, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:40 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x101001, 0x2) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000200)={{0x2, 0x4e21, @loopback=0x7f000001}, {0x306, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x19}}, 0x8, {0x2, 0x4e21, @multicast1=0xe0000001}, 'ip6tnl0\x00'}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x80000, 0x0) ioctl(r2, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$sock_ipx_SIOCAIPXPRISLT(r1, 0x89e1, &(0x7f0000000280)=0x9) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:40 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80100, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0xfff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f00000001c0)="9c", 0x0) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") connect$llc(r0, &(0x7f0000000180)={0x1a, 0x207, 0x8, 0x6, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TCXONC(r1, 0x540a, 0x200) 2018/03/30 11:55:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000080)) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/03/30 11:55:40 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fb", 0x2b) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:40 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:40 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(0xffffffffffffffff, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:40 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x7848c3ad2cbbbbba, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000000)="9c", 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r2, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TCXONC(r1, 0x540a, 0x1) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000200)={0x9, 0x1, 0x2000000000000, 0x5, 0x9}) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:40 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:40 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x40000, 0x0) getsockopt$ax25_int(r1, 0x101, 0x9, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:40 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x600) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000001c0)=0x6c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000000)="9c", 0x1) accept4$bt_l2cap(r0, &(0x7f0000000200), &(0x7f0000000240)=0xe, 0x80000) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x5, 0x80000000, 0x6, 0x4, 0xffffffff, 0xfffffffffffffffa, 0x1000, 0x4, 0x8bf8, 0x9, 0x4, 0xdd}) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TCXONC(r1, 0x540a, 0x1) 2018/03/30 11:55:40 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x0, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:40 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fb", 0x2b) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f00000001c0)) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) 2018/03/30 11:55:40 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(0xffffffffffffffff, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:40 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:41 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x0, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:41 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0), 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:41 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:41 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000240)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000280)={0x0, r1}) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) io_setup(0x4356, &(0x7f0000000080)=0x0) r3 = dup2(r0, r0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r0, &(0x7f0000000180)="f0dee608cac0cba39000", 0xa, 0x3, 0x0, 0x1, r3}]) 2018/03/30 11:55:41 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) r1 = dup(r0) connect$ax25(r1, &(0x7f0000000080)={0x3, {"5f7fb963e2a377"}, 0x200}, 0x10) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x8000) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0x192}) 2018/03/30 11:55:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) syz_open_pts(r0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:41 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x0, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x7) write(r0, &(0x7f0000000000)="9c", 0x1) userfaultfd(0x80800) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/03/30 11:55:41 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0), 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:41 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x0, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:41 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x8280, 0x0) ioctl$KDENABIO(r0, 0x4b36) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f00000001c0)=0x7f) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000200)=""/94) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000280)) 2018/03/30 11:55:41 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x208000, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000340)={{0x1, 0x4c00000000000, 0x6, 0x20, 0x1}, 0xfbbd, 0xa12, 0x401}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f00000001c0)="9471e383bbd89e8d512f58e01e9db431ba95e8bc674079ac966bd0d2349f1223", 0x6fcbaff11ac794a5) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x200200, 0x0) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f00000002c0)) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x3) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r3, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r1, 0x540a, 0x2) getsockopt$netlink(r3, 0x10e, 0x8, &(0x7f0000000200)=""/119, &(0x7f0000000000)=0x77) ioctl$TCXONC(r1, 0x540a, 0x1) ioctl$TCXONC(r1, 0x540a, 0x1) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:41 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000440)={0x76, 0x5, 0x68080}) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000400)={0x2, 'yam0\x00', 0x2}, 0x18) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TIOCCONS(r0, 0x541d) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000640)={0x1, 'dummy0\x00'}, 0x18) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000180)={0x7, r0, 0x1}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000380)={0x3, 0x0, [{0x4, 0x99, &(0x7f00000001c0)=""/153}, {0x10000, 0x19, &(0x7f0000000280)=""/25}, {0x4000, 0xb3, &(0x7f00000002c0)=""/179}]}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000480)={0x0, 0xdc, "d1d5aa3ce32bc4b3c1a34ee0bc8d68f33a02714916a5188f97268300a9c9a32c28be42f9666b591e0d0f3294859575623c8942ad7af42b764816a9108b68331932d7edc8659c3052cb90cf308883ddca31374168f0fd1324c247868e211a268181afb174ac8feadfb63ad83e2018e1112a5ce60f1a3e2b687df28137794867aa33bb5272ac8979a517406cd6a31d45d74688e3502261a5678584be1b50b9517fefaa19af2932980850b582187c2e07dabcbf75c0796d6b1e23729289f711b33ffa745e4c1ade621274aa6e6ac691b8ae4bbf4df8e8b49d841aa52658"}, &(0x7f0000000580)=0xe4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000005c0)={r3, 0x6, 0x4, [0xfffffffffffffffb, 0x2, 0x0, 0xb3]}, &(0x7f0000000600)=0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x10, 0x1) 2018/03/30 11:55:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:41 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0), 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:41 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:41 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:41 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:41 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") splice(r0, &(0x7f0000000080), r0, &(0x7f00000001c0), 0x80, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) [ 286.255497] IPVS: Unknown mcast interface: yam0 [ 286.268682] IPVS: Unknown mcast interface: dummy0 2018/03/30 11:55:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x1a, "efaee9b6018221877bc82502189ed5e25b884daedf38931929f9"}, &(0x7f0000000200)=0x22) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000240)={r2, @in={{0x2, 0x4e20, @broadcast=0xffffffff}}}, 0x84) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:41 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d", 0x16) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:41 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 286.298608] IPVS: Unknown mcast interface: yam0 [ 286.318464] IPVS: Unknown mcast interface: dummy0 2018/03/30 11:55:41 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42003, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0x100}, &(0x7f0000000300)=0x8) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000340)={r2}, &(0x7f0000000380)=0x8) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794708e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/03/30 11:55:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:41 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:41 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d", 0x16) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:41 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:41 executing program 6: socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000080)={0xffffffffffffffff}) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000240)={@mcast1={0xff, 0x1, [], 0x1}, r2}, 0x14) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:41 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f0000000080)='{\x00') ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/03/30 11:55:41 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:41 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d", 0x16) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:41 executing program 2 (fault-call:19 fault-nth:0): r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:41 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) pause() ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x8001, 0x9, 0x5, 0x100000001, 0x7, 0x4, 0x8001, 0x4c7, 0x359a, 0x1f, 0x7}) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TCXONC(r0, 0x540a, 0x1000003) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:41 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:41 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) llistxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/231, 0xe7) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) chdir(&(0x7f0000000300)='./file0\x00') ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) syz_open_pts(r0, 0xa000) 2018/03/30 11:55:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1ffffd) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x20, 0x1) 2018/03/30 11:55:41 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32", 0x21) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:41 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x48441) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000400)) sendfile(r3, r1, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x800) ioctl$TCXONC(r0, 0x540a, 0x2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000080)=0x9, 0x4) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/03/30 11:55:41 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32", 0x21) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:41 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:41 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:41 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x40000, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f00000001c0)={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:41 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000580)={{0x1001, 0x4, 0x1f, 0x4, 0x1, 0x5, 0x1f, 0x182, 0x1, 0x4, 0x3, 0xbb}, {0x10000, 0x4000, 0x7, 0x3, 0x5, 0x5, 0x3, 0xfffffffffffffff8, 0x9, 0x0, 0xffffffff, 0x50}, {0x0, 0x3002, 0x8, 0x4, 0x7fffffff, 0x6, 0x1, 0x8, 0x400, 0x2, 0x3}, {0x5000, 0xd000, 0xd, 0x8, 0x7, 0x1, 0xa4, 0x5, 0x8, 0x9, 0x5, 0x2}, {0x1000, 0x6000, 0xc, 0xfff, 0x7, 0x3f, 0x3, 0x401, 0x9, 0xfff, 0x4, 0x2}, {0x4000, 0x4, 0x8, 0x8, 0x92c77c8, 0x2, 0x400000000000, 0x1, 0x2, 0x7, 0x5, 0x2}, {0x6000, 0x4000, 0xd, 0x1, 0x1, 0x3ff, 0x10001, 0x6, 0xda, 0x0, 0x100000000, 0x3b1e4333}, {0x1000, 0x1000, 0xd, 0x3d, 0x3, 0xfffffffffffffffa, 0x98, 0x7fffffff, 0x1, 0x7f, 0x1, 0xff}, {0x4, 0xf000}, {0x4000, 0x6000}, 0x20010020, 0x0, 0x1000, 0x100000, 0xe, 0x800, 0x1, [0x9a, 0x5, 0x100, 0x80000001]}) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:42 executing program 1: ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x3, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000200)=""/4096) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000080), &(0x7f0000000180)=0x4) 2018/03/30 11:55:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = dup(r0) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', r2}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r3, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:42 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:42 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32", 0x21) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:42 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:42 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) nanosleep(&(0x7f00000006c0)={0x77359400}, &(0x7f0000000680)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0xfffffffffffffffe, 0x7e) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x7fc000000}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000005c0)=@sack_info={r4, 0x9, 0xf52f}, 0xc) r5 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r5) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() r6 = dup2(r5, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r6, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r5, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:42 executing program 6: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000fc0)=@sack_info={0x0, 0x1, 0x80}, &(0x7f0000001000)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001040)={0x0, @in={{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x7, 0x9, 0xb8, 0x0, 0x5}, &(0x7f0000001100)=0x98) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000027c0)={0x0, 0x5, 0x200}, &(0x7f0000002800)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000003000)={0x0, 0x3}, &(0x7f0000003040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000004440)=ANY=[@ANYRES32=0x0, @ANYBLOB="68000000893e0046c0005d42d4720e03a170f0677b956812013bba0a6d90f8ff00b875f9563d93cf3807ef7a85787d865902c66c370b8b5bd4177123864a6541b7e5925faf9e9c955082cde8d41a000000000000000000000000000000000000000000000000000000000000"], &(0x7f00000044c0)=0x70) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000004500)={0x0, 0xa820}, &(0x7f0000004540)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000004580)={0x0, 0x1}, &(0x7f00000045c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000004600)={0x0, 0x8, 0x2}, &(0x7f0000004640)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000004680)={0x0, @in={{0x2, 0x4e24, @loopback=0x7f000001}}}, &(0x7f0000004740)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000005c00)={0xffffffffffffffe1, 0x800, 0x8, 0x7fffffff, 0x3, 0x6, 0x75cf, 0x1, 0x0}, &(0x7f0000005c40)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000005c80)={0x0, 0x40}, &(0x7f0000005cc0)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000005d00)={0x0, 0xffffffff, 0x1, 0x8, 0x8001, 0x7fff}, &(0x7f0000005d40)=0x14) sendmmsg$inet_sctp(r0, &(0x7f0000005e40)=[{&(0x7f0000000280)=@in={0x2, 0x401, @broadcast=0xffffffff}, 0x10, &(0x7f0000000980)=[{&(0x7f00000002c0)="cffc7a3ffc8433193940fd7243b0b75460e76d1e9515387958623bf5af68129da09060cd655540d8d12ced7f7f975d79b6f0549d8e41b60cc05d803a4e6d25aba4367d1d6c65de1e94007ea840d3149606c70898187368a99a326508eb8eeb0881916262a7cb62a7dc894eb6225286e3645bcc94a3eb6d45f04f21f8430cdde55f87ea5284e21f3b87", 0x89}, {&(0x7f0000000380)="67e36b5312e70a7c3b2fd2bce61d440f667e2ddec4f2c91ef9354f4843733c5e412fe5dc3b5b42f2198bc305131a80dbec551f6f6282e4c85cefce987a7cb8ca3a73ab88eb8bb4437eb05953eb3143b1eacfe79732d67dc11a6030117c2496d0e85fec41e41c1bcfd8c133eaa626c86435797c9c723f75f4cc2f54be5781c8046b1987045d86ee6eed3056cddb016995212ff412ca198a3da4d8baf8b12a2724f1d8bc4e28533a7aaf3e293b267d102699dff2cd61fd3ff364d1a87b23bfa9019a", 0xc1}, {&(0x7f0000000480)}, {&(0x7f00000004c0)="e2044c5fde0fc0819438d1a9b7616c4e9a4d088fd6dc348157dc21e16101490a57c68c0e595ac45aeb5092bdf882", 0x2e}, {&(0x7f0000000500)="3ac9365b2c95f55361bd492be6e8ea9885ede346a4915a00990522afffbbd335cff23bf1dfcef1bdd43f8d489748fc51fca67ad384d4c89655ded4531cb78799daaa6c79779847a946927759dc7622f95c711c6e644bf62b33841c7d2ba4f01cf506c8d83305186cb57b517d04476fa6f2278c5b4f5512c3914bf3484792e33f3922e8620e8e630719f1d409111febec3b6e9749eb81f37b3ecfe33e3c64", 0x9e}, {&(0x7f00000005c0)="8ca04ac370330a76cf3d161da95e080bdb2343a01ea0da96dbb4affbc8f03c43b67f7b4599cb8a7f01d63a1541da520b7a789b7399dc479f65f1e2e6c5c049d72a5d4348e31129fac292aa155a6eb6cc36086b9ea40e568de393d1d149739fe99bb893f2639a339686d8d0125455fc7b8e8e66c49ce3a1b5b1e1f897980c948ecf030a4fab82afee0117ae62821351dafcd78a546448778cf03a4779d682507ee35f09219ee67ba520a4", 0xaa}, {&(0x7f0000000680)="a5a29bebf4a73f0f64e4de38f8688bbb65ba5c818046c3a05183867efff5ecffe87eb7d8267142f7abf0eb35b0c4e1cfaae30b626f1120c2ab97988600ef8d232e24ce3e822c3b742613a17e87f4de2a2980826dd003ca871784fb6f33090a57e9c5508d5fd01efb1dc31e3cb98128e6044091de889c3da3d1301dfe2dab9d0fe80ad4585f85573d788372b148660cb491de4d91806f45cac75733c968695dfb6dc91dd0c6994a749fb1ed2b6357b4da096d39d05773ac44599dbf80b40885a98e989cf2241567d21c9ec0b0a6ad71af0522b7f9bb81f3376c1806615fb37cf857a13b76921c62e85f6c044426d3c165c4ee62ec2705", 0xf6}, {&(0x7f0000000780)="3099c9cf68111ba97a1f8da8446f6d637c624167f6b3618e786b41d6b42a036ca5593840f5429472a35052e16f648c6831ab841f8322a4ebbbbcb386ca626222c69daec0743e0d7817a7340809eae4a497732eed64d443a9dbb5bda9e9efa5b30d", 0x61}, {&(0x7f0000000800)="e810ff4ebaa14b7adedfec722ed20eaf2ff4508635fcd9e1459427a952003530d4b70afe2d2e74e7830515f88cf9e4f3ae4921f4e4a1cb4a0e7b48e865ccdc8a8ba31d6f1dd47ccb88ff18b8304bbbd372994ca7995f6f74aa70105cbaa7aa28bd697a755d39117815f39a14cae533339b3464044d9acadc5271a05b009da71ec286e1c2b38a572e327156f58c13b4b86b52419a41b8a17966d3d66546fa8966c6d7d1e91cd47aba98f493a30b6f8627ac623ae3651c1a092860d861d0", 0xbd}, {&(0x7f00000008c0)="f8c83fc6c5b6e474e6d0641beea04f470fea22edd92c7f37de22e479b438ebe19a8637328426ff0c96b05e55b6c66a3e299efabcb7e4fa68251767120b828b12194f92facae94c77a1b15028ff0a98eca6b5519cbab474fecdfb25a28dc3b2598caf24e04f6eb4b3b108b6d71f5542eb6ae09998daa91039d6579426d7a324926af39ed74523096f09cc3ab7bc0e796e5a127f8147999e57ea9b8cc9a0d0b5462b077ba4a3915eb0fdd37a8f0b7a7e", 0xaf}], 0xa, 0x0, 0x0, 0x8000}, {&(0x7f0000000a00)=@in6={0xa, 0x4e24, 0x4, @mcast1={0xff, 0x1, [], 0x1}, 0x6}, 0x1c, &(0x7f0000000f80)=[{&(0x7f0000000a40)="c9ddd4841058672893955491d7e8aea1b720bde4477e20d5af3c080ad5713fff1e4a04f8e7b4ca1e8bacf2890e4a110ca0d8fda82f06dcb5e7e371fdb80c2e3ec7aa7d6fbe5f9f75b176cad99c6da15257535bb855a86e9e9ee531cebaae703e476213a4f026c059f898491561f8beb5c5b7e660330d91b01565320488116a87d57687e5cc7a0f02f48842548e4d55db5494a464d12c9cf7e50e5e04c7df3c5fb10bbf6f377810d1c8cb0a2b673a7c6a19f9e6f2f1abdf1fa611f2504542df4179cb6e175280cec7e28020d8c618f2bce06bca7c36576b11", 0xd8}, {&(0x7f0000000b40)="e9e51836c988fef873de64751f5701da9f6a40f591fb24e10bafae9b9fec3dbf8fef854ef516aabd37caeeb07c823bb615b7a27d9e84c12faab00f", 0x3b}, {&(0x7f0000000b80)="8498b069d15d60e7c75ae76b79b7b9176c7d499c787e7fe2505cd8f2af20a41d4494e9e50402233eac216bbd31dcca3b40b9357e3bda0b7ece99c848258e80e6803865002107cedff847e4661071c1fbb038e09dd247218146a38e5c9d0ab6fe9242146cc3d0faed5259d1276d87e06fcb937a824d0eb17242e8a57336de95bad6c7aa6cb73b5eb271caf4e3eb73bc4e8ad1128d96e2eac4b613eaf7a109bdb04255efcb17c11798d221e064241b8fa59cd78b0c5b755ca9f24cfb568131a212c892cbcd987a78691bbbeb04b623eca807cb82b0e7b3135b6c16c2aacc6a1399ffa6708e531c49ac681b7923f71a8f3437c7e6cfc8c5dce31bee4e", 0xfb}, {&(0x7f0000000c80)="34e14f53c85ebf85c16eb85641cfa8180b211b7ccc324fc0bcf8ecb1672a9db2a4be35bb100ea84c7552fa715bd657b89602e3afa50e87aff503d56eea0766bf633e110db4a58ded5e16e347ab6d4d587df5a979168df7d709b670961805c8ae8e9297aaed40eb734487209f90a8864351d4d58a3e359e7b0ee2068d2a56795673639557af04783a5a3cef3aed661531967d0a6b4c92840825dcb00ac425ad3994e25aed6f02e0484453280c18278ee7c8ca16a9da9f042c107fcd5e8908409731ad40ba010a8f946cdf", 0xca}, {&(0x7f0000000d80)="68d4e123fb41a40651d5205be5cf54bdaf5f4fd5e2bfe48d162a8677c7ef730d78d531e1457ae562cbb19bf68d98b4c562016c14a2faaedb49ba37140ba51d5ce75c66344a03a931d4e937869eb32a98c10b4cdf6f7633e9b8b51768f68681eba9db080228c3153695b079e842074e1e526786055435ef206e34fe0dfdea", 0x7e}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000000e00)="09f0927572912b40ac80902fa093da5570400e526f5c31e26d4586f828b17bd05c3a41de628e380277e05e4ddff8fb04792003cb6966bd67b5ed090e330d8708db330b1db5289b4799afc392d35c1861177333e618a6189981d3dd8b8d6276bdf2ddeb62ccabb50955f8aa83370377cbb212d57708dfc3e564aa7e67c897b0141fd77e5ae4534485a1b61213c9fb11f8564a63ee75e243fa590b726592162332d2c74bc67aa1130d4bc2be58a7c2b3376e6ab30beae9b9d42ec2f30e6d1fcb02de58feb93e51464086640cc003683582d250993c622a1cf98c3d5c26922b74c3f30776801e375b5f1b6c08ecc5a102", 0xef}, {&(0x7f0000000f00)="42208c21deeec0edb645b7a58d2215416da9606f4e1849ec129567387d649aa5a1b5c7123ea85feb650e6217ea7219bea05db313bd38fd0561c7534a3528230563a864d1c3574049eaef30f15b", 0x4d}], 0x8, &(0x7f0000001140)=[@sndinfo={0x1c, 0x84, 0x2, {0x80, 0x8, 0x4eee, 0x0, r1}}, @sndinfo={0x1c, 0x84, 0x2, {0x20, 0x0, 0x20, 0xc01, r2}}], 0x58, 0x4}, {&(0x7f00000011c0)=@in6={0xa, 0x4e24, 0x1, @local={0xfe, 0x80, [], 0xaa}, 0x1}, 0x1c, &(0x7f0000002780)=[{&(0x7f0000002300)="a06f9480a8c8df62ae3383dfa0374c6595ff212117908060921b4abd901d4cec0d70f05c2eb548963b8732bb06cace68321a7d95a591ba09355d14e62d0b86e2f49323b9956eabf39199776cbe24672bee84cda74c44f1a84a4fa6d3b74e7b98412e6d3882c7ab8fbfbdc9c222ec719382d03f235ff8878b672fb9cb8b863c7b2ca6d654c339e5a9779904e4aeed88287abd982f58d8b687ecc7de0a1cd33d2b67c16f7b8ff0e2dbe702dc324e03c54e49bb1c509fd9372a995d4a4ce069d991c82df3b0be", 0xc5}, {&(0x7f0000001200)="731c9455489ae424116ff2bdf4d99da095cb8407ef1f0c68d74c6581a8e17aac35beb7c16bc156a91b22de9572f3bd185a14d48ff2c472da", 0x38}, {&(0x7f0000002400)="ef9ddc3cadd760539da55367c9068e9052816af7b1a8a24813de024768cffd7ab5d6a07cfce4c4e634d25cd05a185ee563bb544ba4978b919593a42098e1f19b04e1c95c2033cd16801fd23fd5cd391a63fdd7c5805765c7c05c6a7a2b44322dccdccc618a9537e8d1b4b393bab7b11b137e0674e5f1c7894cfb25e9b417e65676d7b5a37d30e3eb839cc1b750283e4779e8f6e0e517d46a65504a9c547aaa3ebb2a4290c826ced0d9d973725551a1c60c632542a22f8a3bd367eb9565ee3768075b7904b29670279ebf12a02a9f02b4ce909c148f358fb3667e45798b3f96bc7c00fd0ef4", 0xe5}, {&(0x7f0000002500)="ac655de6a6f8842057357ffff99120029161d6249d3549f3f7652cfe4dec73085fdabcd11bd96aab6354cfae8577c7f4d53deaa97f7d357f2b8160b4a4d01677bd2e23b75d97ac584a17789b24157301d68e6355a8d31bde80237160c68d1fe947a6cd791c54c0dfb18cdec2f5076a", 0x6f}, {&(0x7f0000002580)="c064b1d5569a6da8aee3a69fa4e306984aa0fca2c791da314feef45ce2eb2853328e44d0e0a7c4220c70adbbbc7b2c4fbb0801f0b71c4900d40b7d475d876640ff6acacd3d331cd26b337e648cd8a86de1d20f6e0380682f0b6377868270711e77ac91c2eeee92d03345e6ecee31ee4804958ad707f87007a72abb", 0x7b}, {&(0x7f0000002600)="3efe9fe1694a98dca6cca88b2254d5f939ad29b84a2d3201b3ba5355ac59d6c57b96368a707abae323ece2c6b00eefdc6d08056e942427638492ae13b5cbd785160d65a9279d3bf46a32d957048d20bdeae3892b85848ea48ea571e8763a524466e2fcc51d42c4c66ef9bdccc05a15d14b31b897f925ab52ef3ebd1596651edee833bed69991ebf6fea6cf4f", 0x8c}, {&(0x7f0000001240)="70cd67bd192013cc7bdbe52bc02918db5747462b19774de76571c4", 0x1b}, {&(0x7f00000026c0)="08ef6af140a6d15c258f5f9ee83e8c28dd60bb5152480cc1e35f2999d1a8b74de29d689d7b2b9ee65fd1a99f9b774d7fd042f8febcf19f69c94b4c3bb235ae350cd7c5021cb95943d22a404c79a009a54e39b9cbdeb6ba3b432a7f3eeeed4fe7df5dcd39a26f2a813ba2219ac11bee4691810339edcea3127a02e681acacf1767e973d22fd944c6f10fee2d00b85ea", 0x8f}], 0x8, &(0x7f0000002840)=[@init={0x14, 0x84, 0x0, {0x2, 0x6, 0x0, 0x6000000000}}, @sndrcv={0x2c, 0x84, 0x1, {0x5, 0x5, 0x202, 0x6cb, 0xffffffff, 0x400, 0x101, 0x2, r3}}], 0x58, 0x40080}, {&(0x7f00000028c0)=@in6={0xa, 0x4e24, 0x9, @remote={0xfe, 0x80, [], 0xbb}, 0x100}, 0x1c, &(0x7f0000002b80)=[{&(0x7f0000002900)="21debcab6ebf04593d2eaa7e12c90f2307a4148064417d5fc07b3833bac7bfb0993d2649703c90b28f5c7c7d5ab15a432ca5936f07f7a65e4b11a60039081ffb6376e29ce2c38aea09c5ed14cc8c67fd230034a8ee440c8cd217fb21f33ec21516fcf576460b067643441a365b38ee24f35ca52bc008af29eb05705fcddeee59790fe68f11953b84e58971e90115dbfddaf51ebf936fb2c31ca1c1d1bf9d551d3e2cd8e1e20eb0ae71f7313183", 0xad}, {&(0x7f00000029c0)="94c4c5ff46bd6c941f156f54a46ea7a0aa23bdca12560477569435a2ffc3878d9fceccbc4aa992ea9db7d465a75e35c98cdf4bbb96593ed84b27b3e3fadf87f4fa59b5ec68689f4cf13517e3a9d6887bb9ff2b1eab7c1a4b6880885837d755ccf9235b30011250bbc9777ff371ed0b87dbe362b9e5cb96fa1459e6268a22f884d446fe5c0531a4fa674b2147727b0180a9ab471560d7c510c772188c81e565c94914", 0xa2}, {&(0x7f0000002a80)="2ae30ddc0137f02b5fd9d81b6fec8ef1754ec0a1321b31b6e36080669f76d24d48bf53cde9d66cdeecdf1385d0c15bf921575eef0ffb95a40bd61b5ebe9c710ea380b0ff04d032c4231fb04be7d59ff73b78ecb285ee5ded3b71c943a357f8f7b7989d49f3d8f035201ed36e82f291ffa2b5e7edd0c2360916c05ced312c27f7b7e0fa17f1597ab74facb5fd0b370ceeb9dff602fa9c9aa5702c482e0f79d3fcdafe031945a5503df995cc21ff8713345a5ea64a71acfddfbda0f58ae4ad184875f91a6453d97e97267222773ee0", 0xce}], 0x3, 0x0, 0x0, 0x4001}, {&(0x7f0000002bc0)=@in6={0xa, 0x4e20, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x40}, 0x1c, &(0x7f0000002fc0)=[{&(0x7f0000002c00)="6ee92a50eeeb78b2750f008d9d14ddfb1ea799da4c2315c0149106623ddcf612eb28d1e93ce9e7671930e26f3d28e8fb2313000f56b7cc2061ad546570ab1f31ffdd9d1bbd8550055c4652ea399d3956b27655cb0018febd3b20a295de14f617c1347e0df0660b9a08cabe4691b086ad6fe80948e57f8578849de97ee17934de5a9f4c6e3ec29e148d38f32790580cf761de98bdbfab6511d9d532", 0x9b}, {&(0x7f0000002cc0)="f5aeb6664112b6084d1c7efc7bca64b86587b2d70156cb822892b91e9c5d6c640e81666d3b52b5dfe9aeb18a3cd681c0803861e5c5865af2c6f2c65fe001a24e6541a0ada2772b9f797071f8887b7e5baeffc2460b9cf434be9fc24fead9e2187221401b106234a72e91f3503bb4eb20a3c403f524d593b88d3769e88df2a963268f97fb4ac64557666e7e409cea3d3a92a8f0364658d2fb8ca4b0de9923535d49b0c4de85cde5daecb1e07947d4df876830f477fe39a24c6280b7517e8ec4663a1ee302f98bb6a3c629c53053ad247a43dd402bff02a8", 0xd7}, {&(0x7f0000002dc0)="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", 0xfd}, {&(0x7f0000002ec0)="b8863d5736b5ea007156c868fde93f91d7655d3db46833460864ef0a9a0d303562c58166e81bc378fd93dfb1f247ab1a7e97ecce3ce4507d40fa90530e88d9d112dcd595af045952620915a1d0e53f1c435354eb0e74d19f09161f5791bfde10cae75fb591f96b11120cacc509d472cbeb91bfda7da20350ad8b5099ec3584d475eb8d98bb2cc10d1161b9b4df8ba27c28188cdd95d7f830b2c2830c501e7c7f65e3df36bc56f45890c70e6c0ba3ec27e15cd2146f22392fb94eaa8812634af6e42537891888bb158af85e17bc3f32b4aee3c34bd23d90bfaf", 0xd9}], 0x4, &(0x7f0000003080)=[@init={0x14, 0x84, 0x0, {0x5e, 0x6, 0x535, 0x1}}, @sndrcv={0x2c, 0x84, 0x1, {0x7fffffff, 0x1, 0xd, 0x2, 0x4f, 0xffff, 0x9, 0x6, r4}}, @init={0x14, 0x84, 0x0, {0x992, 0x4, 0x0, 0x4e3}}, @init={0x14, 0x84, 0x0, {0x10000, 0x1, 0x8000, 0x5}}], 0xb0, 0x80}, {&(0x7f0000003140)=@in={0x2, 0x4e23}, 0x10, &(0x7f0000004400)=[{&(0x7f0000003180)="e12b943b6b00b01d3110568331827b15085ed8cef1e661d8b29e03045a737cb9f25da9a72e8a440d71a549a36eeaf8fc13fa98b3617eb4910395c35bc84867ba1d835b61e0214afb05e262eb5a", 0x4d}, {&(0x7f0000003200)="5bc0553421aab68573a014f16a5a83e74d8666c3cd1e73a2224d3b7324aaa7aece7330eb6668fdc533b1eb4bcb4410ad368a9d68a06bbb18a4edc4a62f04c1425e34480bcd74fd0a8e930be22633080e06ef14d59759371f021be327678c6f44e2f06944c703dd20451a8d1f9d090a8d860f53244c8890326be0465805f0f1ad5d49c1b3d7026c37be4894", 0x8b}, {&(0x7f00000032c0)="3221f5a9522b77333047cfad2c1323582190fd3a7588da8ec2d9b0995eb69de426392f42df2ed4f0f2f90b32fee20aada3bc8ddab614729c9f5b0a4b2a6246b949b3e86431ccd6d561d098541f5eb9829c4642b99d43dbeaa1bfde53964a775c7f4480a8006c4cfbbd77", 0x6a}, {&(0x7f0000003340)="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", 0x1000}, {&(0x7f0000004340)="fa0ccc495ae35900166642364c7bded6c1c09284c0876680abc3be741afdafc3cd627a158c19ab1fae6fc62dd89d365a6d4bc77f7eae6ddc68832150e0382ebae7e2cb80c4af280b9d4ebfbac81f761220a7f86805552bc18633977c1148291204739ffb2b6bd84e2585a8b41be073885e2870d2dd601a21365feeb69e574d737f", 0x81}], 0x5, &(0x7f0000004780)=[@init={0x14, 0x84, 0x0, {0x3, 0x200, 0x81, 0x1}}, @sndrcv={0x2c, 0x84, 0x1, {0xebe, 0x1, 0x1, 0x2, 0x7, 0x1000, 0xffa, 0x31, r5}}, @sndinfo={0x1c, 0x84, 0x2, {0x9, 0x8, 0x5, 0x6, r6}}, @sndinfo={0x1c, 0x84, 0x2, {0x80, 0x1, 0x1f, 0x0, r7}}, @sndrcv={0x2c, 0x84, 0x1, {0x9, 0x27e, 0x8005, 0x9, 0x100, 0x7, 0x0, 0xa1c, r8}}, @sndrcv={0x2c, 0x84, 0x1, {0x7fff, 0xef, 0x8008, 0x5, 0xf4, 0xc00000, 0x5, 0x73, r9}}], 0x108, 0x40000}, {&(0x7f00000048c0)=@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x2e}, 0x1c, &(0x7f0000005bc0)=[{&(0x7f0000004900)="abe9d8a8260babe7ad8a9f79cfa8aa3c6db23875ee60a126c8e9e9158bcfc4da46c0bb72aca49f2f5fc475cd60b3792074f3cf04593a77245913c28cc61ece49ae1ee006b0fbda58db7c49fefce7c1deec5f5bdd4e44ffb503264ee2", 0x5c}, {&(0x7f0000004980)="6bc723cafaa69c110093309a5d75f40d719823625e5e90f52f0fd5b1adefcb2915b1f35aec4589445ae2063b3f673c9322e7b8ce2b9b4c8f18b91e9b1cefd474327a6552bf84c345e9b28557bb1e5d8a5ff05b04ce9d781619c06963aea100a4f564b205146b5c8b23206793668c647b5eed0743d3eac1468baec97a846c14984b7aafb21f490b74f840726f618eb9f434c6c1602a365052d14896513a6540746327d42198b2f1e3eb9e4fda6353094d58dbc3677ba4cfe3ad5aa7298f1b35d411347a6df8f9b2", 0xc7}, {&(0x7f0000004a80)="7599d7ec8ba77c363f70afd3bdad67af0dc057d86c86d6acd05d08c3070c4979f43dee8627c2969e50e9f4c182ec4b36c0a5904258e1e98294b3e960b758d3bd7c3c5d28144e29d3f622f8e26cca225b65d5e77ff9d5a3ab0e2d74e42b47640f3280e2772486f3bdc5f9d957ceab4526d84ae52f824fc76ea65a142263ceb8385bae00777e18654c8196352d10f2d3b5fba97aa005d18193c49ef6c66053725fb1c2", 0xa2}, {&(0x7f0000004b40)="68f084bfb21a9d210cfdbe12b0f2f167768cfc53f3e9e9a78036faa177a2adb2abded5357ec32256be3955f4fbd0cf46b9572d3ef06a4cd4cdb01591c91ee92c59b1f00b88c7b71efb653e6c1fe9ba087fc340b7446139a9b9c1ea7c3615bed687b99ee847a1d12f50906c056ecc7c178f15df321ec2495c8e1da6f26d8ec59b", 0x80}, {&(0x7f0000004bc0)="1c6c2a7f41369debb11e3322cf6fbf23e4f2493ac19de78d9832e34a440a12018b25f046ec5e4f17fafa86652572b4e312041ab7de6b8e116a52ba2a4bb5e0ac4fc42001fc783e65be896945426f3e42543d6be4dadf08c9859d015494e32c6a10a55b06b5f270a8ce6e3c82fde36945832d704c91dcc921f266e59506f095124219b726fd555655828135636f284b910636b30d06e3aa5158a019eb3158a30aaee30bc11484f30f4eb4bf13bf9d8720104f9bd182a7190423087a538beea343b71d99f439ea4ce4cad5fa2dcd8b2cfda755be8edb227a86895fd3b350466dfb212dbf8735236a004d9846b0992aea1f051897fac11a3ac488ad77de2e0ad18449a5f37eec7fade0eeee89bfc92bdc724144404b17f42780d74f6e0e8523790d7cc0b6b1b5656dca3af2da0dda6040e613bfa05e3ee6109bba70935d52b019301a5274c98a9b18f6c077121202b83bb658202128c5048487dfb3c758cc6932d4e1a5275fa55ccc530045429297edc515eda45944666c4b44654baa99ab113192187a4f692efea6ec7d573bcd1500c539be50472b0b289cbb65b50118da94af3e4ecc2f8d64d48ef07730ebfe1bb4a76a79553e20e47853ac48aa62c08a3db6ec6c92e6d1ff9399edb91fb1f4f390c024d77bbc90bb993dbe437c9734ad367cb1bd596f5cb0e82039993951c41ac7d3694e1517a82fb55a64a1c43af4624508c05584dbba507f5490b8837d4724e861fec23a103f52ba30c272b80d73eb22ddcd7ec90cf76a135966edf639281605e6b9c4c021f05a6f275747710798e3611adece5a61718d8f767da0293c0f75e2c6f8623814bd2618b9bfe92e06d8ae00965822839f635e63ef35a513d596c78c8d16c72adfe8fd8dea6486e490879ca9ef503bddeb45a3b584453eecb1d00b60f5449632312ed4bd0f103e38818683f5ac15fdde5243a4498e5b44cefb448719d6047cbab0096d6d9e138d79857fe2471eb810d55bf3135520221b842d60a3f382391addde78adc9b58b539fb5b8e489a2033e8fa2b9e612eebf4079df075df8c882e7716675405b3a78d9b224831dbdd1824d5ad72c2d23c5a91961d7f992e9651910f1565e616a83779932d60935c82b181c5c2f49299f9efb976ce6dbff181f84223c58e719e599e2c5c0a9896f830008e683485614c56f74f08d21a1c2ce811ff76654228cc853fe2a18076b1946660f9e56b7013dd3f9a7ae72eecf038b72d79c63ceb75785e3c68513215bba409a09d77ddb954e6a57255760f16ae8dc900210db3b2a2bb4513eb5d1490381259010960bfcbcc9ecb3d088504a833ebeac05351f06184829d06d0e0c27c7adbaedb8a9a31a566639c19e59d00c1c6da75d0b5d691ac1605e99866dc61ed871d5869bb469460c7654b532e38e6ccab8aac2605385baade282ce54744291ba9b0c37174e16fecb49ce4bb2a9c4b13f37c5284bd78b7abca480d00e537b21623748d6d1abf6c255f2fa573c964b27ca9af6ed0394d9edebe2675de2772fa094117cc9ddde919908d03a1e331c1785c45042ec4f1efe2c780c6e2a10392a8284e6cb8ed6a4d320a4a2e1580c82a85f2c537b44284aae950abb6e966b60bbe6d9f1e158f0a1a85a39cab1ebd1bdbe3c3760a0fa5ecaf86d360476c19f965ff9d4cb02bb5e5c724dc9b9a131f268f2e1bee5471ef348abc822d582ac9cff8e29f984d417ce88d482657b375f7681e4a2ef543bd1b5e2898c17e3509e4882e958a8c65cf899e949afbd77e4a4d8731e962a3967191dcee5981ac98565f46a6415efbf65bfc03fa6c95ff771de13236f8719d37211b3d1ff206b39e8e2d92b2e449387557e3920327e8d11c5a3eb9381dbc456b982f1ae896f701ea786aadc4b030c543df92c923793d3fdd1269e5b5636fe8cd9ffb14e4407d9640ab3f7e5409aa28222c439a9f62a599bd11743711124146e4be49ec7fa32820f2559f13e59b295f57f93618579f7bfa959692dd84697e6f211667b2df990741e6394b1916747abba61a9e0e2134f81fb73ebb12db800bba34c22b3c5b195d9910ca05c0a705efa044c57bc4900ac06f5ce2a5a0fed5d2d84f6abb331578cdaea5ffee48aa23f5d30ee44a832be1eda813b75f5a874534085575e08752473da72c9235aaabc22184fc977b028caa261077d56ed45b5e854ae6b6af5df45be1189c8deec1f4a3735d3c12aba56eb5586a5fa863ba9384bb13ae561dba23bf4dfecab4c10b1b1594d99dc55365bf596e5c4d4d969394916bcb6179e4db24de47556cb259be1ed10d20ac4f04ec84c1051a8afbd5cbc967fd268aa6e9bc424b2cfda6bdf6bbf92745b5c451d90958a50247c6662f03d66244c8be282273a7264da26063ce05d79dba862bbee440dc70261ae3c97b0c8172b98eea7b1c8de0e8b5bf0268324dcaf3de6873123c686e55537bbe9182305699db1754975a16adf0a67748b3a8b15f5c74f0edde74d5c8c90568bd630bba2c7d9a0fd2a4d0fa1a0f5225043da0c54a1481f4340b5bb7bc2ed2c7ca4bb8c4d8b7b08606ebdc05bf1ed77e4b319557b6eae6c28c53af3ca62aa3a49e83e5fd0c2398b70a5760d44e20239d74342092502e0120e337e4a2452f86bc39083bf2f48db93b5b3f9241cf30f606b29c844cd4f38d52176d7ddf37bacdce634de480b6806e3441c77c24de8b849398a88e98b012a0728e6e38fce43b2c3947d5772ec9b57ca15de36cc1a04fa6fcb03113e3b40727889840f145ecd4662ab4da5983794776782616d3d8814a0676c62347cf063baadbbb2e15abe0968262d0869f53601c3ab326cd0ebc1b968655c14db577cb7ff923109abfa1a619eb3c1deb913d2addbb96074591547ed00afba1f87c222ea729401a70b2f22f022f1963cf508c4555dec6c66f47a6c109c7e381d00c5fcab868054b72a06c007f7e2460f0d2943d99b3363d4796c4a563d959947ccc9020f1f6a7ab54da9cb62bd84744d39eb7d794366696c3cf36f982d6a34e7eb2e7c51612b5c2d6321efbe5417ddc1170efab6a3e7418b6bb723b28d35a4c520fe93439ddaa56ed7ceada36f5d43bfc63221d6b265ec89c286cac2229f6ee18e092446e9f1a66b1491c1b1eabf43a56c4a8752fc298f28d1c16243439c2ed1e886854866822c73af35899866491629bef11370362258294ea67f70d842920d732987aa5c20f14ffc657511dee4cbbf0418bda1048a75b331e56d7f3cc5bafebe178cad553e754fb866dd494eafeb51cf50d94e82603cb26fe93ead4c13171960d2b7013ce41d902d7b60c24757685140052f995dfcc9c95995e6ca6f6c6e819a231f0a29aa104b21d6f8daacc96cc9036f90dbb01d94c7c4ee4ac1850ec74f598d8dc69887a71e28b7b65cc4aa0ef07338b9f759c1991aeebe13dc3539caf717937ca923ccac7c7e3619ceecd71ee225f1c0cdcf0d7f1b7b1bb1afdd46a086c8ec3502e8c0986bd4e7d8c22de630f2a1bd51ffd99ea49f8f3184d11155e90cea3a9ac0281d9f6705c53c0f2029d10d1af4ef8c2caa9ea435fd1e42e29fd49f124af23d775e083bb81ce932346dbfea8060c4df7472ff271c176a6f80aae8dcfd40592f198e0f84c890b3b3e1e7125f96f6ab0415d89fe28c417b7eb0bb1120cec0b393fb3e131d0d2ef3a6d47a1b810f97d37bad6e50ee7bee34c827a46b44a9bdbd2e2c8e0675c474f7847e314a28946cd0fac3891e696169c3f98967e8f38b26590270b1c49ff7e6de6cb21b4abd571ee2eab205ed9b9994c752dbfdc70fb56fe34077ad78c421afc60abf7c48d8205b6d18dc87a126e9c98c5763861feaac2701df3749c2ccc5477d6f335193d97146657868512dd45f437f062d62cd1b201d0eb32b36cc07c17eefd9e8ee17001ae5f03da769a90b1e2877ca45c4eff20bad378c66d1197573e2a18d9f255e9ad23320a5a264e8cac282de0cd1a24f4df3a4a6add01add13b9ddc8542fc44f542785925658a9b6e1452bd4f6500fb9fbe61b3e1186414b4f1716dae1c7c7e4d012e131e9b5546761c38d9ecbe867878eaa9741309b9ebe4d53f00012adf3636f5d665ec1b9a142375a31f3334a382f093f2119263939d9d7d03eb212a875b8b8446574dc63ac64348935932b80ca35ab8f0f201ecfcf951a16fa560ea9444e0815e509413c4177d159077a35772dfde3fb3f6596c2edd2c3fce2a33920cf4f225a3c03b1fccc1086bb0f08037efba1ed67fe0cfeff0f70558b15a043b03c534053da156874c450bac6d45a2513b3e62f93978e140954e6284138f664a163a714e3cb7b069ae5ed949025927ed440ab2786073508663ad0bcb19b450cf20295f00b45a4804c75ba6d453eaed9aa18d13a8ec146ba74f810bba6823af420211cd3efd5a76bbc24e5804c3658bc809b67f71a041fa948be90207eadbfd238a85107ee6f76b6a39ac6da64be6081bc95cf61afb796784fc8250bc80ee4d41a5c98c6ffea252ffed91b66194bbc63cdba968779f7f8701a76ca72627cdc67a59b4b4442638acd8d20be10084ac37eb31589f8c5d21335cf42b63b45508cf867c156914fcc3a2920e157332cbfdb2da009c3db48b43f7362c16b086c9a7cbb1ec8b8f90b4ae9be03ecaa0aea53687c40774c08b0371a8c16ed8972698cdf1aa15b8b068a01af6b9baa7bcff1ce8f5aeac04e533be4aab3505cb2b2dc0e94c5d0681a1d6eec809d5a940f2fff31a1736fc01db50d1af8cfb6197d7bec341797c8c118eb1f7fffee241d042ee41e4d7fb90f13278127620e3cd5995863eec4f8e2df36392a3baac20d308852a35dba917587f644ab951d47d081ae80b72d128f450ceaf7e6420def2106a96b369c0434e4d4577ee23efcab704928337df32d832bb18ba868aae1adc482d88eff0147c5ce2c2af6db8493266c4b6d1201095d70711684e75e2494ccd6127a116d3983d63097cb95b269f27362f9b92772ded184a359c20740bd90a220c7f5f53d00c5fc85537447082c69b88e9807c105406212c18f7f61edb97857ce8dbfe279e3c256479e3f8746f09772596e6e77b19507af2a3ae3a88f3e95a67f61e36dc1e51112c17156821b7aea80adcbe99a45a07451b0c201718f23826c9407d4435047592a4aaef0ac83ae9309420a464666db82eee26023f7f3fd2efcf4296a2a7df56c98388d07bc41604310fdddec3aede96aac930a78018a50156abc8beef3be6606bda7164778b92dfc81e832c250ed7091245601a7475489a9b8cf55ca7569d5b0ae1f92a8a5ad88532a6b54a2573bbfd4806d20341965513a36c13326d2d0628a1a064177349ef59ce495fc1d421f520d9e32c85dca80d798f14d7e60d2732e429f3f39e03bff392dab19ea3958711a676a97d198b7ab93f9f6d84ca90f0cc8bf15274a87453401ef489985c9043205dc2a189e2f8f53811ab754b0a29a378dc2a8b8ed152c5ccfb2f868eb6950073da030db796a62cc0438ed6d57d6d3eead1cb5c8fccbb1a9aab0985a1d793dd02f61fb86d5b57bad331a2eb4beda3715f6366daf31b35fdb9db07e58a7db463812bb3c0153aa75a9c1fe9ea40c0dec6b8f5cd96db1c0861c8220cc833906db28d6fdcf7ec00267f7b81b209fed60a66e3af04a346928296eb698e68d69ae2d632dce928e55ccd3e0574a615af4a745b4f5514a086465e0ae83980bb76fb3deffe3f1cf26f0385e77ace4beea3e6753df2387f2728a473f097d83093b75b1ddc6a1b26e50cae249e5e1e6f22ef279395ab9df3697c2c7733c3eb96642465eab1969", 0x1000}], 0x5, &(0x7f0000005d80)=[@sndinfo={0x1c, 0x84, 0x2, {0x9, 0x8001, 0x0, 0x3, r10}}, @sndinfo={0x1c, 0x84, 0x2, {0x5, 0x800e, 0x0, 0x4, r11}}, @sndinfo={0x1c, 0x84, 0x2, {0x6, 0x208, 0x4, 0x9, r12}}, @init={0x14, 0x84, 0x0, {0x8, 0xf3a, 0x401, 0x3}}], 0xb0, 0x1}], 0x7, 0x800) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) perf_event_open(&(0x7f0000d2af88)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r14 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r14, 0x29, 0x1b, &(0x7f00000001c0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) setsockopt$inet6_mreq(r14, 0x29, 0x1b, &(0x7f0000000180)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) close(r14) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000001280)='./file0\x00', 0xffffffffffffffff, &(0x7f00000012c0)='./file0\x00') ioctl$TCXONC(r13, 0x540a, 0x0) write(r13, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TIOCGSID(r13, 0x5429, &(0x7f0000000080)=0x0) move_pages(r15, 0x5, &(0x7f00000001c0)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000200)=[0x8000000000000000, 0x972b, 0x10000], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x4) ioctl$TCXONC(r13, 0x540a, 0x2) ioctl$TCXONC(r13, 0x540a, 0x2) ioctl$TCXONC(r13, 0x540a, 0x1) ioctl$KDGKBSENT(r13, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000080)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0xb) [ 287.032416] QAT: Invalid ioctl [ 287.044270] QAT: Invalid ioctl 2018/03/30 11:55:42 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:42 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea", 0x27) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:42 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:42 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) write(r0, &(0x7f00000001c0)="cbdb2dc577757a9968182f0da3833f71a3e1d1db07ad63c27856b5894c530ed51faeb4b9913742fb11e04c43bba8519fe2b6f48f17998bbefab652c1b838d2f71c076c07882c9513308425a3d365e728cc8e93ba5a6a9b", 0x57) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) 2018/03/30 11:55:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0xfffffffffffffffd) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x7d, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:42 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea", 0x27) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:42 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:42 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea", 0x27) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x8000, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x40}) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/03/30 11:55:42 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:42 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000002c0)={0x8, 0x800, 0x5}) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x3e58}, &(0x7f0000000200)=0x8) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000300)=0x2, 0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000240)={r2, 0x0, 0x0, 0x7e0, 0x2}, &(0x7f0000000280)=0x18) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:42 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000580)={r5, @in={{0x2, 0x4e22, @loopback=0x7f000001}}, 0x3, 0x4}, 0x88) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:42 executing program 3 (fault-call:7 fault-nth:0): r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:42 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0", 0x2a) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:42 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:42 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) r1 = dup3(r0, r0, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, @in6={0xa, 0x4e24, 0x4, @local={0xfe, 0x80, [], 0xaa}, 0x1}], 0x2c) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e25cca1f94853c00c41aa3bc2042e7d9acfa3deae5cbf2a4d2468bc871b5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) get_thread_area(&(0x7f00000001c0)={0xff, 0x20000800, 0x1000, 0x3, 0x4, 0x0, 0x2, 0x101, 0x4f3, 0x7}) exit_group(0x3ff) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000200)) 2018/03/30 11:55:42 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x3) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000580)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f0000000400)="d87779a612687a668537db0d643f550114374115d05fbd4d24d602fe33864d008e5a32b05c1e9bd5ea2255d0", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) modify_ldt$read(0x0, &(0x7f0000000180)=""/188, 0xbc) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) [ 287.501259] FAULT_INJECTION: forcing a failure. [ 287.501259] name failslab, interval 1, probability 0, space 0, times 0 [ 287.512566] CPU: 1 PID: 3225 Comm: syz-executor3 Not tainted 4.16.0-rc7+ #281 [ 287.512574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.512580] Call Trace: [ 287.512600] dump_stack+0x194/0x24d [ 287.512621] ? arch_local_irq_restore+0x53/0x53 [ 287.512656] should_fail+0x8c0/0xa40 [ 287.512674] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 287.512703] ? find_held_lock+0x35/0x1d0 [ 287.512733] ? find_held_lock+0x35/0x1d0 [ 287.512798] ? check_same_owner+0x320/0x320 [ 287.512816] ? rcu_note_context_switch+0x710/0x710 [ 287.512848] should_failslab+0xec/0x120 [ 287.512862] kmem_cache_alloc+0x47/0x760 [ 287.512894] getname_flags+0xcb/0x580 [ 287.512916] getname+0x19/0x20 [ 287.512927] do_sys_open+0x2e7/0x6d0 [ 287.512946] ? filp_open+0x70/0x70 [ 287.512961] ? SyS_read+0x220/0x220 [ 287.512984] compat_SyS_open+0x2a/0x40 [ 287.512995] ? SyS_openat+0x40/0x40 [ 287.513011] do_fast_syscall_32+0x3ec/0xf9f [ 287.513039] ? do_int80_syscall_32+0x9c0/0x9c0 [ 287.513054] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 287.513075] ? syscall_return_slowpath+0x2ac/0x550 [ 287.513098] ? sysret32_from_system_call+0x5/0x3c [ 287.513120] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 287.513143] entry_SYSENTER_compat+0x70/0x7f 2018/03/30 11:55:42 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x3) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) r5 = syz_open_dev$sg(&(0x7f0000000b80)='/dev/sg#\x00', 0xaca2, 0x50000) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000bc0)={0x3f, 0xffffffffffff0e06}, 0x2) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:42 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0", 0x2a) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:42 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)=""/170, 0xaa}], 0x1}, 0x20) connect$netlink(r1, &(0x7f00000003c0)=@unspec, 0xc) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f00000001c0)={0x2, 0x4}) 2018/03/30 11:55:42 executing program 3 (fault-call:7 fault-nth:1): r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:42 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_access\x00') 2018/03/30 11:55:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) [ 287.513151] RIP: 0023:0xf7f20c99 [ 287.513156] RSP: 002b:00000000f771bbf4 EFLAGS: 00000292 ORIG_RAX: 0000000000000005 [ 287.513167] RAX: ffffffffffffffda RBX: 00000000f771bcac RCX: 0000000000000082 [ 287.513174] RDX: 0000000000000000 RSI: 00000000cccccccd RDI: 0000000000000000 [ 287.513180] RBP: 00000000f771c158 R08: 0000000000000000 R09: 0000000000000000 [ 287.513187] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 287.513193] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 287.817434] FAULT_INJECTION: forcing a failure. [ 287.817434] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 287.829282] CPU: 0 PID: 3280 Comm: syz-executor3 Not tainted 4.16.0-rc7+ #281 [ 287.836541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.845871] Call Trace: [ 287.848444] dump_stack+0x194/0x24d [ 287.852062] ? arch_local_irq_restore+0x53/0x53 [ 287.856712] ? trace_event_raw_event_lock+0x340/0x340 [ 287.861910] should_fail+0x8c0/0xa40 [ 287.865605] ? perf_trace_run_bpf_submit+0x20d/0x330 [ 287.870693] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 287.875777] ? perf_trace_run_bpf_submit+0x206/0x330 [ 287.880857] ? perf_trace_run_bpf_submit+0x206/0x330 [ 287.885937] ? perf_trace_run_bpf_submit+0x20d/0x330 [ 287.891022] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 287.896201] ? perf_tp_event+0xae0/0xae0 [ 287.900271] ? memset+0x31/0x40 [ 287.903546] ? perf_trace_lock+0x4d6/0x900 [ 287.907767] ? check_same_owner+0x320/0x320 [ 287.912083] ? trace_event_raw_event_lock+0x340/0x340 [ 287.917256] ? trace_hardirqs_off+0x10/0x10 [ 287.921564] ? should_fail+0x23b/0xa40 [ 287.925451] __alloc_pages_nodemask+0x327/0xdd0 [ 287.930115] ? __alloc_pages_slowpath+0x2d10/0x2d10 [ 287.935126] ? find_held_lock+0x35/0x1d0 [ 287.939220] ? check_same_owner+0x320/0x320 [ 287.943543] cache_grow_begin+0x72/0x640 [ 287.947603] kmem_cache_alloc+0x400/0x760 [ 287.951760] getname_flags+0xcb/0x580 [ 287.955557] getname+0x19/0x20 [ 287.958732] do_sys_open+0x2e7/0x6d0 [ 287.962439] ? filp_open+0x70/0x70 [ 287.965965] ? SyS_read+0x220/0x220 [ 287.969586] compat_SyS_open+0x2a/0x40 [ 287.973454] ? SyS_openat+0x40/0x40 [ 287.977061] do_fast_syscall_32+0x3ec/0xf9f [ 287.981381] ? do_int80_syscall_32+0x9c0/0x9c0 [ 287.985941] ? _raw_spin_unlock_irq+0x27/0x70 [ 287.990417] ? finish_task_switch+0x1c1/0x7e0 [ 287.994903] ? syscall_return_slowpath+0x2ac/0x550 [ 287.999814] ? prepare_exit_to_usermode+0x350/0x350 [ 288.004815] ? sysret32_from_system_call+0x5/0x3c [ 288.009649] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 288.014487] entry_SYSENTER_compat+0x70/0x7f [ 288.018872] RIP: 0023:0xf7f20c99 [ 288.022214] RSP: 002b:00000000f76fabf4 EFLAGS: 00000292 ORIG_RAX: 0000000000000005 [ 288.029902] RAX: ffffffffffffffda RBX: 00000000f76facac RCX: 0000000000000082 [ 288.037149] RDX: 0000000000000000 RSI: 00000000cccccccd RDI: 0000000000000000 [ 288.044398] RBP: 00000000f76fb158 R08: 0000000000000000 R09: 0000000000000000 [ 288.051645] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 288.058895] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/03/30 11:55:43 executing program 3 (fault-call:7 fault-nth:2): r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:43 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20000, 0x100) setsockopt$ax25_int(r1, 0x101, 0x5, &(0x7f00000001c0)=0x3f, 0x4) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:43 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0", 0x2a) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:43 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 288.100997] QAT: Invalid ioctl 2018/03/30 11:55:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000001c0)=0xffffffffffff1db0, 0x4) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc127b0e3be319958, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000180)=0xb51) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/03/30 11:55:43 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) syz_open_dev$sndmidi(&(0x7f0000000400)='/dev/snd/midiC#D#\x00', 0x7ff, 0x80200) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r2, 0x5452, &(0x7f0000d6dff8)=0x20000000004) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 288.196651] FAULT_INJECTION: forcing a failure. [ 288.196651] name failslab, interval 1, probability 0, space 0, times 0 [ 288.207970] CPU: 1 PID: 3310 Comm: syz-executor3 Not tainted 4.16.0-rc7+ #281 [ 288.215250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.224595] Call Trace: [ 288.227165] dump_stack+0x194/0x24d [ 288.230773] ? arch_local_irq_restore+0x53/0x53 [ 288.235434] should_fail+0x8c0/0xa40 [ 288.239129] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 288.244209] ? __lock_acquire+0x664/0x3e00 [ 288.248427] ? perf_trace_lock+0xd6/0x900 [ 288.252553] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 288.257733] ? find_held_lock+0x35/0x1d0 [ 288.261804] ? check_same_owner+0x320/0x320 [ 288.266105] ? rcu_note_context_switch+0x710/0x710 [ 288.271012] ? find_held_lock+0x35/0x1d0 [ 288.275066] should_failslab+0xec/0x120 [ 288.279025] kmem_cache_alloc+0x47/0x760 [ 288.283070] ? perf_trace_lock+0xd6/0x900 [ 288.287203] get_empty_filp+0xfb/0x4f0 [ 288.291067] ? proc_nr_files+0x60/0x60 [ 288.294942] ? __lock_is_held+0xb6/0x140 [ 288.298979] ? trace_hardirqs_off+0x10/0x10 [ 288.303284] ? unwind_get_return_address+0x61/0xa0 [ 288.308198] path_openat+0xed/0x3530 [ 288.311892] ? find_held_lock+0x35/0x1d0 [ 288.315939] ? path_lookupat+0xba0/0xba0 [ 288.319978] ? lock_downgrade+0x980/0x980 [ 288.324098] ? do_sys_open+0x2e7/0x6d0 [ 288.327963] ? lock_release+0xa40/0xa40 [ 288.331916] ? find_held_lock+0x35/0x1d0 [ 288.335955] ? do_raw_spin_trylock+0x190/0x190 [ 288.340513] ? __lock_is_held+0xb6/0x140 [ 288.344565] ? _raw_spin_unlock+0x22/0x30 [ 288.348687] ? __alloc_fd+0x29b/0x750 [ 288.352482] do_filp_open+0x25b/0x3b0 [ 288.356262] ? may_open_dev+0xe0/0xe0 [ 288.360045] ? strncpy_from_user+0x323/0x430 [ 288.364436] ? mpi_resize+0x200/0x200 [ 288.368222] ? get_unused_fd_flags+0x121/0x190 [ 288.372780] ? __alloc_fd+0x750/0x750 [ 288.376555] ? getname_flags+0x256/0x580 [ 288.380602] do_sys_open+0x502/0x6d0 [ 288.384288] ? do_sys_open+0x502/0x6d0 [ 288.388157] ? filp_open+0x70/0x70 [ 288.391676] ? SyS_read+0x220/0x220 [ 288.395288] compat_SyS_open+0x2a/0x40 [ 288.399153] ? SyS_openat+0x40/0x40 [ 288.402757] do_fast_syscall_32+0x3ec/0xf9f [ 288.407066] ? do_int80_syscall_32+0x9c0/0x9c0 [ 288.411621] ? _raw_spin_unlock_irq+0x27/0x70 [ 288.416092] ? finish_task_switch+0x1c1/0x7e0 [ 288.420570] ? syscall_return_slowpath+0x2ac/0x550 [ 288.425474] ? prepare_exit_to_usermode+0x350/0x350 [ 288.430468] ? sysret32_from_system_call+0x5/0x3c [ 288.435296] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 288.440123] entry_SYSENTER_compat+0x70/0x7f [ 288.444506] RIP: 0023:0xf7f20c99 [ 288.447842] RSP: 002b:00000000f76fabf4 EFLAGS: 00000292 ORIG_RAX: 0000000000000005 [ 288.455525] RAX: ffffffffffffffda RBX: 00000000f76facac RCX: 0000000000000082 [ 288.462768] RDX: 0000000000000000 RSI: 00000000cccccccd RDI: 0000000000000000 [ 288.470015] RBP: 00000000f76fb158 R08: 0000000000000000 R09: 0000000000000000 [ 288.477263] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 288.484507] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/03/30 11:55:43 executing program 3 (fault-call:7 fault-nth:3): r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:43 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:43 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fb", 0x2b) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:43 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/fib_trie\x00') setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000001c0)={0x2, {{0x2, 0x4e21, @rand_addr=0x10001}}, {{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x104) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000340)={0x0, 0x6, 0x9, &(0x7f0000000300)}) ioctl$TCXONC(r1, 0x540a, 0x1) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000380)="9ca947cf516799e720f3c0eb108931113609dc554c512d88d6bf40961230b0ef29d6e7f6cf87aed85e6c2dce380e32bafef0e3756c47ec9c5a6cdca747501977f4ba6fab783145aaf39ba827a0e74e65f1ad3669a6dc1a03a0010af49d3cd314a23721c5b3f6f0a2616c36bde04481b433e1d492d32d9da8146fa402ddaf0c9761cd12bee2a0a379ff0f000060c2f88c148c352a815c0d8d049767356fd8e36522a3a00599731795563252f5f2000000f4e290ec187631e5f851a9c8508c30ae0f7f970e6ce6cf764aaf58b9145e8459af259b5b2af62f2016cb5b028db8662425279fa330cfc56ee36da472dc13df1fe0367faf398ebe0909e9", 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x5, &(0x7f0000000200)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$TCXONC(r1, 0x540a, 0x9) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000000), &(0x7f00000001c0)=0x4) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x20002) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a45323, &(0x7f00000001c0)={{0x7, 0x7fff}, 'port0\x00', 0x1, 0xa, 0x100000001, 0x6, 0x7c, 0x1ff800000, 0x100000001, 0x0, 0x1, 0xfffffffffffeffff}) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) r2 = getpgrp(0xffffffffffffffff) socket$unix(0x1, 0x3, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x2, 0x3, 0x1, 0x9, r2}) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000280)=[@exit_looper={0x630d}], 0xd2, 0x0, &(0x7f00000002c0)="33343b19b164d9ea284e963e050c09ce91f164ca476f488a1f01c0c219277e7dd47128b66ea3ae82b13273764e501f0fba25d7926d1e6a47d4a5623875507fc4b7c9a2bd97f5826fef74b69a5ff7daabd7382031c27fcba72c26a0d41e5b3e2d19e1c860f17bda4e91b3ec6826a1ed95873fe85a28770a6439517b1de189ab4f2cef9291d8cd9371f1ef52cb2a8e4cd0d4683948ae60b2b8ab1b4ecc9760c913443f78555699a7293ecaa25272ea10f21d757013e465ffafaf1b0afa0151bf6466d571c0136b176cf0f383f8425e75c24613"}) ioctl$TIOCGPTPEER(r0, 0x5441, 0xe80000000000) 2018/03/30 11:55:43 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:43 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r5, &(0x7f0000000580)="d86b79a612687a668537643f550114375fbd4d4b32b05c1e9bd5ea2255d0fb00ea1d2e5702a5ff973b867a064762e4d825085a3e0c0d8b82b62a48c13c8ed925923200000000000000", 0xfffffffffffffcc3) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:43 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() r6 = dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000400)={r5, 0x6}, 0x8) 2018/03/30 11:55:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:43 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fb", 0x2b) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x2040, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40046432, &(0x7f0000000180)=0x1) ioctl$TCXONC(r0, 0x540a, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={0x0, r1, 0x5, 0x3}, 0x14) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000200)) syz_open_pts(r0, 0x20000) 2018/03/30 11:55:43 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fb", 0x2b) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:43 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x4000000000001) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) r5 = fcntl$getown(r3, 0x9) fcntl$setown(r0, 0x8, r5) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:43 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r3) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(0xffffffffffffffff, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:44 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) r2 = perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r4 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) setns(r2, 0x48000000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r4, r4, &(0x7f0000000080), 0x102000004) sync() dup2(r5, r4) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x28, 0x0) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r5, 0x4c01) write(r3, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:44 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(r0, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) socketpair(0x4, 0x806, 0x8001, &(0x7f0000000200)) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000180)={0x3, &(0x7f0000000080)=[{0x10001, 0xffffffffffece85b}, {0x0, 0x40}, {0x5}]}) ioctl$TCXONC(r0, 0x540a, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x800, 0x0) 2018/03/30 11:55:44 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x3, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000200)={0x0, 0x8001, 0x20, {}, 0xd8, 0x8}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x0, 0x0) ioctl(r2, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000080)={0x7}) 2018/03/30 11:55:44 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r0, &(0x7f0000000780)=[{&(0x7f00000007c0)="1bbf09956b9a8ce7f0abf5f28f88f0465fced5e65bd5566b3b2eb7ba657d36c2fb684c548fe502eeb4c9b3648559c14a5ccbc08c3749b14d2b801cb6056cee00eaaed1d32936316afd62dfb3792772e13fe8ef0e5dc2d85c0dc12b6227c0026d3722bd373b062e67a171f8b41501aa7a76c5c6ae00c9fd54334aabded91cea867b7056cbbad2e9d095de914f92ce2397fb8844cfbc82ebde22d4723698718293efd6696c329148e26204b00a5b75aa4720a12b5a2b14bbd2beb9f4fdc169a1e00ffc5d8bea8f1bea53e0f583724f0d199346aa9f3b2e1a7ebe43c34eb1b5d1", 0xfffffffffffffff9}, {&(0x7f0000000680)="8709017d02720ded82b68fd50c8b03b7251e91a792b97ac6ac2c70e88f45318c67f5828e7fe24b27431cda6af5d07a29d796216607f99ef91748c802967038bd20da0873953cf3d029da8d9a335ee0d1da4fb98068b2a9944e24f273c49ad1ea", 0x60}, {&(0x7f0000000700)="7d5d12d8e711e86252d850f9ff905f8c929910b6ca42c2270ac94a4e9088805c3229f26b267d2bd7aedbdf04a110a6ed997f785573a2d21cd28db9c9d5d0b061cd2e98b0e7ce4911ada575f91331509687fead3af6806c659f27538109a4e8cb013fb49ac71e7c2a4621b59fd99695d500a8b90c4e29c5eb8846e94ecfd952", 0x7f}], 0x3, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1f, 0x6, 0x0, 0xa, 0x1c, 0x10, "9c38cd661485232c4582b8759762dddabb621475f74bf213d4bdc06fb83aaca6a49abd6b354322d7902c9c7a4ea18d632b0cb754c8b9ef175c2c5cef99b44933", "424fd4161186351293bc673db9b1280be17cf7c4e6bb207f2d57628eafa9e78f2f14bf99f4f72d26f7a77538b4b693b991ad5f5d66b807805da65435e53d2c11", "5cfb7d7e81670a3c5536a22c4e0325a1903c9817dfe6db68ea0017199376e3c1", [0x7ff, 0x1]}) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000400)=0xe) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f00000003c0)) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:44 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x102000004) sync() dup2(r3, 0xffffffffffffffff) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:44 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000001c0)="5c8820c5af99275ce7d50a7f827bab4df67203ad08fd5335772cf5c6d94314a92484242a0afbf0ddea15f3ff51b78c48d888f007221d1b76e5bf87dbf268218ceefbd75d62d241b6e10c2d164e7a2f565f5fa457985292ea656318066cdea256aefe07fc4748886a17645aba203091fb4e10df2d9bfb9ec17c0498947fba66af20610565c70bf4a40e4a8a528ec76eebec6c04c0b4ed18d5eeb98865d5a8386ade04eea9ba513a561e1088287338da02754f65d9ad7782441c4d30cec218abdc4e9eb319d34ebf8b1eb2985a189a9b8dccac8db644317f90a522ed31e06bb8286b6790fa79a3c9a11d3dc72af38c11fed6e1c94f98c7ec2d") r1 = dup(r0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000080)) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:44 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:44 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:44 executing program 0: ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="9c", 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r0, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f0000000380)="e2da0600d2794715e80cf0287ec6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defb7a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c05688b9e3267604ff90d4fdb85730590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb564835002e03cfbb706ea4f5f590b4a66120b690f03d1d1474d8369617659a604c20af02b26161b1c1d840509a91bb7196") r2 = fcntl$getown(r0, 0x9) fcntl$getownex(r1, 0x10, &(0x7f00000001c0)={0x0, 0x0}) kcmp(r2, r3, 0x10ec10666b64c1be, r0, r0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000440)={0x0, 0x1000, "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"}, &(0x7f0000000100)=0x1008) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r4, 0x4) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:44 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) r2 = perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r4 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) pwritev(r2, &(0x7f0000000400)=[{&(0x7f0000000580)="c17ead1ee22ad08c564726891b2410e6ef4030aede500c8120b8996fbdb4682d2661906295c0acfbf364162cc78ac547709cb8759f2d2ca82d59893de463df9eefd2eb95cd8e6c420ca790904befc4df0c08f30782d7c0db3cc393974b53d16e0b4ff5d40eec71daad8061b887fe60844293b8586843ec319081e351947da2bc3727fe0f9fd244b339f3b7801fa5104f7d55ee0a41fe1b3c1cdd415a1cc0e5d4347a89834e0aa0df882317c74423bb0abf", 0xb1}, {&(0x7f0000000640)="c7b87f8da368de66b41ac878f5d35c56678411fe37c76f42f1d4c6f98b88612323fd24f34a16c3005b42cc6abc0764ba34a76115f707cce3ac5168ff84818e38203ba7050e4051754d5e61fcdd787a61b5a9c00f4dfee045d2c6e6812a0b21be583497633b7df42225cca635a2c12b1b0142893caa570dcd5d05f37d15fdaa64c767c4c5285532e863571b0b5b38e41014606f5aaf11f5701af6acc26807f4021e9121ecd6cf4aa46d8e4d4928e77f9f94950a035b01008abf9e5acdea2d7db145cc13e1213d197ee6dc95648f1dceec1c409c62e51c66", 0xd7}, {&(0x7f0000000740)="52bdd8b67020ba5058f27f7607d2750d40c1d0d773ae810ca7c3207c75faa1a0c53522b0324cac03d2c7c61f1578eb96e4ef1c0249dac60ed14b52f370ddda16416ff1718e4b37d3218feb6c2c4e02002fb468afe9c2c5ae081b2c487a151974e89004fdf7ccff8b501e607d06c567ab8f5706339e611c535208da63fd6648ec0e65822bfe6d2b754056d812dbb33cd56ad3fa4b4ed4d9ca707e60600c3abe73318d34494b2b54883672be2da34161e041017ae3fb272ac9f06e4cc274bbd77841f3a7cb6de24a222cc1100716b7054cb09f5d83e6b413e54961ae421df6", 0xde}, {&(0x7f0000000840)="929e333969182e7ee4a28b24139a6f48740788f34bbde04705790fd58653464670a1dcd52cd6438b4a6c45903ea5a4e541315cc8885bb687dfc4358b1e9762c1fc05a0dce066b603e4689f5d3f0991ecf397a32e002821bbef43a2739f7630739445745f9601322e52bd7ce275542e6f93e42b28998d5bd6a665422460e4cf21a53f04e504d7cd07ac24574925bb703634cd643978814f4e96f1fde8a01e8dacce4b61c5a87529d5d3dfab4242631a62b5875a558854d4b0863e8d9f811da5", 0xbf}, {&(0x7f0000000900)="645e83ac71f7d6ef64c977240c9601409c4a3cae0560fce94c6ac5f986eeb2494186fc7233476571f67c8d14ea0835d93dd11f46cf97f3e33c0e0ee85c8acb3331c968a5a50c487dad9d2b373f1ca065c740f56485197007214de331e1f7753cf11c869eb085470bcba164076eb69d617bfd15b93ceaa4faa41c5785afc09b91049963bd8b7a48a9cb9b05d6c205f00f462d885b80fb4c0ee8c4a05d", 0x9c}, {&(0x7f00000009c0)="3047c181d1abb16eeecfd165df8c1e5c0d08f9d4922d821d73cbb4a298497532812c6c9b9c4953deb4c925dc4af6d5f10fe27617779485e475cbcda0cc43c65c356b567e9786248421165d1013618cb4729ceb4eaaa06e84fa2025d31c201c7a5bd2a6f9e9a1bf28f63f72abb9ee831ed4c504134845711f00f21bac438d3e817e9244994108ae91b11a4aca708b61327e0a4f74255d8f87996e4b5a7af35cd7179a5c68d08d7145d749bb4feac22532f59f2e7c183d7f707dc7dd0eaa66f5b24d2e9a118c21b80d", 0xc8}, {&(0x7f0000000ac0)="c54ef02492c23977b7d518aec97975b5588d1520dee6f89109476af7045f17650aac330f8afc703aee878018d171c4a9570eb8fbaa81978e437f97a08affe0ef9a0cd83bcd133c38d0b5cd8f8bf87467dea6eb33d364ccafe5ce0168700d68e01145e13eed5b74b3883424f700dbbe79ffb0fae15997ee148352f8dd4a89c8dd6a2ae0d6d5b350cc0f857ebfa7e07465b8d0b08991ff49b7104ae4acd29cd6b89d0748704f8b0d40fecf9277fd96ce5b82960b9dbda5c313c9ea171f1279cc254965d1fffd74b54cf67e11c358fc28a218336a8f190d00c96b151c9b87645a79198d9c", 0xe3}], 0x7, 0x45) r5 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r4, r4, &(0x7f0000000080), 0x102000004) sync() dup2(r5, r4) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r5, 0x4c01) write(r3, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") r1 = accept4(0xffffffffffffff9c, &(0x7f0000000180)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, &(0x7f0000000080)=0x80, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000001240)=0x1008) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000001280)={r2, 0x7}, 0x8) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/03/30 11:55:44 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:44 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000280)) r1 = dup(r0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x800000000000}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={r2, 0x4, 0x1d8f792, 0x2}, &(0x7f0000000240)=0x10) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:44 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:44 executing program 0: ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="9c", 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r0, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:44 executing program 0: ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="9c", 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r0, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:44 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x0, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:44 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:44 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000480)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000580)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, &(0x7f00000001c0)={{0x0, 0x1, 0x9, 0x3, 0x7}, 0x633e, 0x10000}) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:44 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$TCXONC(r0, 0x540a, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x22000, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000001c0)="f2a5660fe81aa7b8010000000f01d9b8d9fa00bf0f23d00f21f8352000000c0f23f866260f01b4f0c4a757240f2183c4c15d57d066ba410066b88d9466ef66bad104b841000000ef", 0x48}], 0x1, 0x4, &(0x7f0000000240)=[@cstype0={0x4, 0x6}], 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:44 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) r3 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000005c0)="e1915432b7fcf7f3ea78d6c09181b4f79c4d8b487613450c7afeb3474bf52feb6b32e6a2ff2914c03563288d3a8ff842537419949099562fa204572d262519ee71478345f8174be75fcf38e41cb9fa06013c7d3db932434f2e5456547d14d3", 0x5f, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000000640)='user\x00', &(0x7f0000000680)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000006c0)="ca90fe88ec784decf1af7248848a140486bce74aa734420bae79d89797b1a20a88ab9e06fa124de1302f2d95af46ca985dcee69f08428ca37766c945688b5a3650bea3d0b87adc9a18e556b160f337cc8de18fcd883a2b407e9c0488449ac616a9985b32e00cca8e", 0x68, 0xfffffffffffffffa) r5 = add_key(&(0x7f0000000740)='cifs.spnego\x00', &(0x7f0000000780)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000007c0)="7f4c35aeb85869913298df53b14e57613ec2914954253cfbd36c46f79ba935487b8dd4e271387b893783badf6e2332cf4166be16a9a8924f5cef2311d6d38f9d36c5addafed740af1c9e33b5fe7f6742fda25edcbac28ff65e1f1c95ac96a2e1cb80f1ea3bab657a81715c599c2a09ddcc502ca2d07c6cba06036c051df78a895dcd1e638c", 0x85, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000880)={r3, r4, r5}, &(0x7f00000008c0)=""/106, 0x6a, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r6 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r7 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r6) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r6, r6, &(0x7f0000000080), 0x102000004) sync() dup2(r7, r6) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r6, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r7, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) pause() ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) r1 = socket$inet6(0xa, 0x1, 0x66653ad2) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f00000001c0)='bond0\x00') ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) r2 = socket$bt_cmtp(0x1f, 0x3, 0x5) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000080)=0x400, &(0x7f0000000180)=0x4) 2018/03/30 11:55:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:44 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) r2 = perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r4 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x70, 0x3bd, 0xffffffff, 0x25ff, 0x80000, 0x0, 0x5, 0x10000, 0x3, 0x3eb5, 0x3, 0x5, 0x1, 0xffffffffffffffc1, 0x6, 0x3, 0x8, 0x3, 0x2, 0x1000000, 0x3, 0xee, 0x7, 0x4c8, 0xdc, 0x2d7, 0x6, 0x5, 0x3ff, 0x5d997c9, 0x9, 0x5, 0x101, 0xfffffffffffffff9, 0x1000, 0x5, 0x101, 0x0, 0x1, 0x4, @perf_config_ext={0x3c, 0x8}, 0x4, 0x0, 0x6, 0x1, 0x80000001, 0x4, 0x9}, r7, 0x6, r2, 0x1) sendfile(r4, r4, &(0x7f0000000080), 0x102000004) sync() dup2(r6, r4) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r5, 0x4c01) write(r4, &(0x7f0000000640)="f906fbee9acb5fca374115d05fbd4d4bd602fe33864de38d5a32b05c1299d5ead400000000000000e7ff000000000000000000", 0x33) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:44 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:44 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x0, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x0, 0xa0000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000004c0)=[{0xb, 0xa5}, {0x2, 0x8}, {0x0, 0x4}, {0x4, 0xb74}, {0xc, 0x5}, {0xf, 0x7fff}], 0x6) ioctl$TCXONC(r0, 0x540a, 0x0) write(r1, &(0x7f00000005c0)="c2b30332cd13f682f4fea159634c8e97322c101a51723403fa64f665b9ca1c0ab49b7bbf142422bcdc52dacb70767c4b3b36821328572f6d66e64148f09552882664889aaea1d6fb95cb7df69c0887eaac287e35ec14f38d4c92", 0x29f) r2 = openat(r0, &(0x7f0000000280)='./file0\x00', 0x82000, 0x1) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) ioctl$TIOCNOTTY(r1, 0x5422) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) sendto$packet(r3, &(0x7f0000000380)="35803c1310a02f328a23ee", 0xb, 0x20000000, &(0x7f0000000440)={0x11, 0x17, r4, 0x1, 0x8, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) ioctl(r3, 0x8000000001004, &(0x7f0000000640)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500e16a1b520d6ba8bbb184738c2045d35626cebaac25934f121eadde9da46c803bf726af1635fa9e41a3592a053be6f25f850412a9416927ce63f1c2d76ad4e7e80d18f83e8702c5592e7dd56c849ebdc6736443acbeced2a3489518c1f8f2cb92") fcntl$setlease(r2, 0x400, 0x3) ioctl$TCXONC(r0, 0x540a, 0x2) r5 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x80000000, 0x80) fcntl$getownex(r0, 0x10, &(0x7f0000000200)) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f00000001c0)='ip_vti0\x00') ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) ioctl$sock_ipx_SIOCAIPXPRISLT(r5, 0x89e1, &(0x7f0000000500)=0x1) ioctl$sock_inet_tcp_SIOCATMARK(r5, 0x8905, &(0x7f00000000c0)) r6 = syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0x9, 0x400000) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000300)={{0xa, 0x4e21, 0x71b, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, {0xa, 0x4e20, 0xe40, @dev={0xfe, 0x80, [], 0x13}, 0xdc49}, 0x1, [0x9, 0x2, 0x3, 0xaeb, 0x7100, 0x4, 0x5]}, 0x5c) 2018/03/30 11:55:44 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:44 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0xffeffffefffffffd) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0xfff) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x4, 0x711, 0x1, 0x80, 0x4ca6, 0x5, 0x1, 0x6, 0xbffc, 0x100000001, 0x10000000100, 0x10001}) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x309000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f00000001c0)={{0x0, 0x2, 0x0, 0x0, 0xfff}, 0x9, 0x5, 0x3}) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/03/30 11:55:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x2, 0x2100) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="44000000b7ab74fb5afdc319ac141b0b3bc7bffa8f8dab8818e1535919eab246d5a49a37d6344f1f2527122783f151c5a40a8ec86f0500318100"], &(0x7f0000000200)=0x4c) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000240)={r2, 0x81, 0x5, 0x100, 0x0, 0x80000001}, &(0x7f0000000280)=0x14) ioctl(r1, 0xfff, &(0x7f00000002c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={r3, 0xa0, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x9, @ipv4={[], [0xff, 0xff]}, 0x7fff}, @in={0x2, 0x4e24, @multicast1=0xe0000001}, @in6={0xa, 0x4e20, 0x8f, @dev={0xfe, 0x80, [], 0xa}, 0x1}, @in6={0xa, 0x4e24, 0x8, @remote={0xfe, 0x80, [], 0xbb}, 0xe477}, @in6={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, [], 0x14}, 0x4}, @in={0x2, 0x4e24, @rand_addr=0x9}, @in={0x2, 0x4e24}]}, &(0x7f0000000440)=0xc) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f00000000c0)={0x7, 0x9, 0x7f, 'queue1\x00', 0xad2}) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/03/30 11:55:44 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x9498bf40248e2409) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x9, @empty, 0xff}}, 0x200, 0xee5, 0x8, 0x4, 0x12}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000280)={r1, 0x2d26}, &(0x7f00000002c0)=0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r3, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000300)={0xffff, 0x6, 0x9a, 0x1, 0x0, 0x1}) getsockopt$inet_dccp_int(r3, 0x21, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TCXONC(r2, 0x540a, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:44 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x0, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:44 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:44 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x880, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) r1 = getpgid(0x0) sched_setaffinity(r1, 0x8, &(0x7f00009ad000)) r2 = syz_open_dev$usbmon(&(0x7f00004b7000)='/dev/usbmon#\x00', 0x0, 0x0) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x2000000005452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r4, 0x8, r3) read$eventfd(r2, &(0x7f0000745000), 0x8) fcntl$setsig(r4, 0xa, 0x12) pread64(r2, &(0x7f0000e95f16)=""/234, 0xea, 0x0) poll(&(0x7f0000027ff8)=[{r5}], 0x1, 0x8000) dup3(r4, r5, 0x80000) socket$kcm(0x29, 0x2, 0x0) tkill(r3, 0x16) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000080)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f0000000180)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/03/30 11:55:44 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:44 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:44 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000200)={0x6, &(0x7f00000001c0)=[{0x3, 0xffff, 0x101, 0x5}, {0xcdb5, 0x1000, 0x4, 0x5}, {0x4, 0x7, 0x20, 0x100000000}, {0xff, 0xfffffffffffffffe, 0x7ff, 0x7}, {0xfe900ab, 0x4, 0xffff, 0x18f8}, {0x6, 0x3, 0xd43, 0x3}]}, 0x8) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r0, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:45 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:45 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000400)={'\x00', {0x2, 0x4e22, @multicast2=0xe0000002}}) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x4a9a, 0x321000) accept4$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0x2711, @host=0x2}, 0x10, 0x800) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/03/30 11:55:45 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:45 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() r5 = dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) ioctl$LOOP_CLR_FD(r5, 0x4c01) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") sendmsg$rds(r1, &(0x7f0000001d00)={&(0x7f00000001c0)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10, &(0x7f0000001240)=[{&(0x7f0000000200)=""/56, 0x38}, {&(0x7f0000000240)=""/4096, 0x1000}], 0x2, &(0x7f0000001a00)=[@mask_fadd={0x58, 0x114, 0x8, {{0xff98}, &(0x7f0000001280)=0x81, &(0x7f00000012c0)=0x1, 0x3ff, 0x4, 0x81, 0xd301, 0x0, 0xac0}}, @rdma_args={0x48, 0x114, 0x1, {{0x1000, 0xffffffffffffff81}, {&(0x7f0000001300)=""/122, 0x7a}, &(0x7f0000001580)=[{&(0x7f0000001380)=""/85, 0x55}, {&(0x7f0000001400)=""/51, 0x33}, {&(0x7f0000001440)=""/43, 0x2b}, {&(0x7f0000001480)=""/220, 0xdc}], 0x4, 0x10, 0x998}}, @mask_fadd={0x58, 0x114, 0x8, {{0xfff, 0x7f}, &(0x7f00000015c0)=0x7fffffff, &(0x7f0000001600)=0x9, 0x1fffe00000000, 0x1, 0x400000000000, 0x0, 0x4, 0xe3}}, @rdma_args={0x48, 0x114, 0x1, {{0x3f00000000000, 0x9}, {&(0x7f0000001640)=""/108, 0x6c}, &(0x7f0000001740)=[{&(0x7f00000016c0)=""/90, 0x5a}], 0x1, 0x40, 0x80}}, @mask_fadd={0x58, 0x114, 0x8, {{0x0, 0x80}, &(0x7f0000001780)=0x8, &(0x7f00000017c0)=0x1, 0xffff, 0xb321, 0xd84f, 0x5, 0x8, 0x80000000}}, @fadd={0x58, 0x114, 0x6, {{0x2f}, &(0x7f0000001800)=0x4, &(0x7f0000001840)=0x1, 0x99, 0x9, 0x3, 0x1e80000, 0x10, 0x9}}, @mask_fadd={0x58, 0x114, 0x8, {{0x20, 0x5}, &(0x7f0000001880)=0xfff, &(0x7f00000018c0)=0x1, 0x7, 0x80000000, 0xdcb2, 0x0, 0x4, 0x1ff}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x100000000}, &(0x7f0000001900), &(0x7f0000001940)=0x3, 0x91e, 0x9, 0x1f, 0x0, 0x0, 0x8}}, @cswp={0x58, 0x114, 0x7, {{0x200, 0x1}, &(0x7f0000001980)=0x8, &(0x7f00000019c0)=0x7ff, 0x0, 0x7ee, 0x9, 0xd80, 0x1, 0xd1}}], 0x2f8, 0x4000}, 0x20000800) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:45 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) r2 = perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r4 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r4, r4, &(0x7f0000000080), 0x102000004) sync() r8 = dup2(r5, r4) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) r9 = getpid() getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0}, &(0x7f0000000780)=0xc) getresgid(&(0x7f00000007c0), &(0x7f0000000800)=0x0, &(0x7f0000000840)) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000880)=0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000008c0)={{{@in, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f00000009c0)=0xe8) r14 = getegid() r15 = socket$can_raw(0x1d, 0x3, 0x1) r16 = gettid() r17 = getuid() fstat(r3, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r8, &(0x7f0000000b40)={&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000600)="1b6bd80953291bf975f2a7b918ee8d596994aea2416d3d6de4ed46743b03ca549a7e68199fb70959ec55bb5bff26c4f1bfbe00b64c04f24fce3a66da4d44732ed02ec280708af274d95a157be5302bfb586148aa67c720edd3200e99abefc6f7c4ca3cd867139306434d96bdd074fa5bf97f6ae82a152abc414fc6211a2e3d8ed35ff8ba310bc6327de9ec4b895c4ac37fddf407b953c73574f66d2f78bb5a9a23bc4c38dd4a85c66a626367d984a6ba9c448decde0fd8d9408767fcf5d360c44ecf625f52b3ba2df8faef1e0ad6f1492b875cc01460b1edda94f3f2", 0xdc}, {&(0x7f0000000400)}], 0x2, &(0x7f0000000bc0)=ANY=[@ANYBLOB="240000000100000001000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r2, @ANYRES32=r5, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="180000000100000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="180000000100000002000000", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="1c0000000100000001000000ddd53fde2c568b906bf4a02fb7f5fe1c7daaeca9985faa41de087f41bedf7d321c1cb0b851f735bec625dde06d5535315a17acad09683b3deff2c9d460c5151af2ea42f4539afa9067fdc3d74612e07415ab3c", @ANYRES32=r4, @ANYRES32=r15, @ANYRES32=r8, @ANYRES32=r3, @ANYBLOB="180000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r18, @ANYBLOB="1c0000000100000001000000", @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="146473d98d00000001000000", @ANYRES32=r8, @ANYRES32=r0], 0xb8, 0x801}, 0x80) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r5, 0x4c01) write(r3, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:45 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000080)) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/03/30 11:55:45 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x1) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) accept4$inet6(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, @loopback}, &(0x7f0000000580)=0x1c, 0x800) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x181, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:45 executing program 6: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x40000182ffa, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/71, &(0x7f00000002c0)=0x47) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x600100, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f00000001c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x303, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000000)="9c", 0x1) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000040)={0x9, 0x6, 0x7fffffff, 0xfff, 0x1000, 0x7fffffff, 0x8, 0x526, 0xa00000000, 0x8}) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={r2, 0x7, 0x1, 0xfc, &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x3}, 0x20) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000200)=0x10001, 0x4) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000000240)={0x4}) ioctl(r3, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:45 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000), 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:45 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000080)={0x7, 0x5}) 2018/03/30 11:55:45 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000), 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000), 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/03/30 11:55:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rpc\x00') getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000000)="9c", 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x0, 0x0) ioctl(r2, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000280)) ioctl$TCXONC(r1, 0x540a, 0x1) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:45 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000580)={'raw\x00', 0x31, "a019fa934f0dc98bb4ac4fb931a4f9391bd35627e7b554def3b62804f82e1732e42de1a7ef8c12db71f114a95c9345eaa8"}, &(0x7f0000000400)=0x55) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:45 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(0xffffffffffffffff, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:45 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x1000, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:45 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(0xffffffffffffffff, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:45 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:45 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x80000001, 0x400) r2 = socket$inet(0x2, 0x80003, 0x40) socket$pppoe(0x18, 0x1, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000280)={0x4, 0x1, 0x0, 0x4, 0x8, 0x4, 0x6, 0x64, 0x3, 0x6, 0x3, 0x8}) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000001c0)={r2, 0x1, 0x1, "483c6757217594a92b66800ed5e7bcc29a57de7be7bf8c9ae24bae18e1e9b42654c932"}) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) mq_open(&(0x7f0000000200)='/dev/ptmx\x00', 0x800, 0x80, &(0x7f0000000240)={0x200, 0x81, 0xffffffffffffffff, 0x8, 0x4, 0x800, 0x2, 0x1}) 2018/03/30 11:55:45 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x40) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) dup2(r1, r0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) fsetxattr(r3, &(0x7f0000000400)=@known='security.capability\x00', &(0x7f0000000580)='/dev/net/tun\x00', 0xd, 0x2) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r1, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:45 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() r7 = dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(r7, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000400)={r5, 0x1}, 0x8) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/03/30 11:55:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_netrom_SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000001c0)) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:45 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:46 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) recvmsg(r1, &(0x7f0000002880)={&(0x7f0000000580)=@sco, 0x80, &(0x7f0000000400)=[{&(0x7f0000000600)=""/234, 0xea}, {&(0x7f0000000700)=""/199, 0xc7}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/104, 0x68}], 0x4, &(0x7f0000001880)=""/4096, 0x1000, 0x7fffffff}, 0x1) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:46 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(0xffffffffffffffff, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:46 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:46 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x8, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r2, &(0x7f0000000580)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) nanosleep(&(0x7f00000005c0)={r5, r6+30000000}, &(0x7f0000000600)) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:46 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000240)=0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000001c0)={0x3f, 0x2, {0x0, 0x0, 0x6a1400000000000, 0x3, 0x1}}) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x7fff) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:46 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:46 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e22, 0x100, @dev={0xfe, 0x80, [], 0x14}, 0x5}}, {{0xa, 0x4e24, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x6}}}, 0x104) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r1, 0x540a, 0x8) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000180)=0x4) write(r1, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") pipe2(&(0x7f0000001900), 0x84000) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x7, &(0x7f00000018c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x8, r0, &(0x7f0000000340)="be61651901bff748e9e146655e9835d9e23f46c995dc996d89eacf2bb9b7c375ad1486a1fc76fa2ae3e81f12db929a6755824df75f8e5c8557ef7f66d6df6f0ad451253487482ae430f2a8c0666b71cd53ce85a81a0de12dc77005f34857823f71d12b24cea3d73cc83d3eb8b370aaea47855edec2b928fe7232f0cf2b1eb7327d161f02ca387eaa5c3bff0b2858017ce16dcc175a28db85a13a15de5c85e98cb03910f1aff38bb37bca6a57cf1957505e76416bdab38dac57a6a8017bc8437a1c78ba48f53d22919b91171cfc6ff0a6d53b2fb91dcf5cb8d399f2075e743c4a140a845b57e24a2dbb8acd577c5b30", 0xef, 0x10001, 0x0, 0x1, r0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x9, 0x20, r1, &(0x7f0000000480)="77bddc75e6a29453e492b51179504c01988aca41bc1f6bef32174be0f76bb6d2d7a64c7f16729e9f1ad7edcdf4ce2ef9785a83d162e4493dd6d0e77abb630ab0f3c35781471a2bd73c375643f9780b79e58c31bd85637cd0cd03aa8f3a1345016ec21356793fd2aefa5d51fadd4ef77bc3f07ea29bdf950e8f664eb7c16dcec27d64f719fa184d0c13874a87c9475b", 0x8f, 0x4, 0x0, 0x1, r0}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000580)="da21ebf961acc1d088ee2560adffee02a2e7e9ac745212bb9900e676c52cc59954fbdb02f429b5173b109a305f69a94e6d5f6017c403ea158f860d25933a87cab44fd453fffdf5eada6a08f06529a3f08f035e55c4", 0x55, 0xf1aa, 0x0, 0x0, r0}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0xf, 0x7, r1, &(0x7f0000000640)="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", 0xff, 0x10000, 0x0, 0x1, r0}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0xe, 0x4, r0, &(0x7f0000000780)="54c8", 0x2, 0x4, 0x0, 0x0, r0}, &(0x7f0000000840)={0x0, 0x8a313d1e6b3aa84e, 0x0, 0x0, 0x8, r0, &(0x7f0000000800)="f382aab90ee3e89fd2b30e3fc4d3f3d58af0df2dc2e21f7eebd9b4cc09829900d58fd5fcf0423d92bb", 0x29, 0x6, 0x0, 0x0, r0}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0xe, 0x0, r1, &(0x7f0000000880)="5a6fb585760c17e62e051080b6c79e6fc0d1a654e230d23f4ab298b07eeb3ff61e755492b5fc086adf8c606c229e52e587e36db0982d898e726fa16fce29d85d50b32d34ef0e2c469c38900f64d1a33df8e33750609d1621b6335039ed35d2a849b34564df130c7ecad8642ffc257b15cb958cbf7233dbb740f4e29df41a7e58363facc558cb5943267bf43be389b9db52451718803e8ebc6973f723db412cfc84539ed6a91d8e809500f70f85174a18752cf8b81187c0b15d8d910aeeb4a4caa1915d508ce716a3f953f89f264c7237a133f90a2fcf06750781fb9773e358da3097c244d0b9be13b51a753e984b632691ed90adf1b17e7c21af43e4daa94af0c2a07caf5fcadf1aa3b39d9241a656acc45e7bd2260cfb8fb98950d02fd8d4f562ad37464d9f9225ef0c0c21c03d75919a4130229feee19daf8206292771ab5206be67faa6d55cb15ab48f8921ba6a1c3c9af2e208dcc425de376126f14e2ef8127ec2be9464d383b8f9ef28216a13754ee10bf0726ca4a162730a85de46cdc974ebc76b913f397c96315e155c5852e37958a7706ad42036c2fc11766b79c32f9153e9d6454b24d760dfb1f22a1bbbc5d6935891f82d86b923f3742e653a35e0b631fb44aa1c5362823fe8aba2d126b8b2cd952dcecd1a68e31dfb71bfd03e4da56c46d838d574768316cdb5b64ad472f13c8c8ffefe4fc015dac52280bf5a667b596f140e4c4928aedcb1c4984fb96994b1e8a1646a75c6c9dd4dc785c4510fbba8461aa5d91a3b548d7c255a1fb701b844cdb63227545f2f72a50cf650137181dc7fc3dd7a1b9460ed9fdb77b4239c9b64ccbc7017ceede3d6e971c855eec58bf11f69ee1fc3f22beeb717ed90bdeecab8d3a5ee66a41e3651aa6e13606131eba373c0ed7ad7842ec2e02c24302c54ade29b60981bceaceb37a12c3e34b6a396a68c967f961bbc6f520c76480eb6bb13c9a44a735c6ddb0bb1189f27fdc404781cf738a404ab509188237153e04f017542f16d7785d3935765dcddc621295cf85e92edf9271040e3d858defa79ac9093bd84c716c691deea7a39a9f6e24759c58f1335ad8c7ee4c00ce94a3acad8d0927312819bcffea7b640e7a0793d1a5bfaf20175897a0e6e1ac17d7313f7fcf342b4b276eaab4f22bc4f24f009b3f9e8997a899e6ff03a0a79a5b03d575a76a45f128970745cf63c44a3d17984c2a4e63c18142c864f3171a181692b181e02b32407c44675e9af7d7b7bbfe7f0c2861f9c02ff2144818c932a42736aac88f2fb731bc513afce17860635ec079ecf82331315dc4236f4cc29607ac0c2e7a950f23d8988957344bcf9f3d178fec47607c93ad58738ae47df26d4fbd9390a3b7213e5830d6aa549a60dc49b0d01b820aac4ed3cad82adb10269c4b57a39361805a3b49fcffdc2195ed23df44fc358bda83de47d93c9123b9ef2bd9c6d64c4b1a71ded1e210b623346a1d8353b4e8570ab8e018eb8bd9dee3180e69feb8a719ff5cc298f20cf42a3e3f18b16323c445145a25f898deb4b5e22d2388a05da3ade25ea25250a879cbeb150e43ec831fdb2c0f2fecf2698bdbe85a419f56769c83e2b399725ba7996fc15fb4fee48eeef6a2dbd5b6a216a209025030af8a01906a8c43e6469b8324899e0bc05cf4f6ababffa74d8f2dea38eca637873a61063bbc16b1e98dfd24d5a04e2b00049ec8918d56fdce45df377b43737e7e8abe8668e8265d1820d7a769f526516787e69ec9a6b6c5db65944fae57cced4d0a4c83232e57558a6899d469e7c5deea166e2b96decbc9c4941354e93ddd5ce254a6a97d20e79bb0688c707268016aaa3d53b946188b6203ae456c6100e84d82afba68e2fd47120d1f3fb3043708288e5c37db2ab9bfbed2abc7c19f752e4c6cae4f52db5f0e2d95fe450a4b2dd3c0d4d7233fcbd8237eb7a385ab7141aa3725dce8902fcd68253661050c267bb653be40196e0a6e399252b989a43f3a46a30bccc625be6ec5d70720ee00c1670b3e2532fe8a9cc00905db9ee07272383a35a61b60da7c531635986626353ff8407a71b451f942560a7a837ad0c599c8c768431697505a71a8993e3a9a3686163b4b362a792d82914a201d3812ebff72ce68f59ebe916748d67df797b6df3c8fd03d509bcac6601b518886d83cbd33a6aa5bd696229c962bedff926d2d6a9934fd6c99f9e482f0ed9d8b3918ec1764e06a6eba57d0f45cfd49b9ba4474ffb10b61c487338fd5eafda985e5d7e75a9e145da473e5ffcb3cab13eb08cf9b93f32552522bb19a74deb5e2ec656f3ad63df50cffaa9bbd6f8ae659f24099b44bdeb5abc7ca8981c0e72a76584e11eceedb1993c4bdad08b07809bafc2b54b68dde6d696f646ef09a7ad2c8ebdf9fff92c6a3843ec6c580a2387f2eab583c376a3e6d5d4889829e70b5986236128acfb21118429219d83aee8d250993fcef126a255b287c5737958646fd5d8e4fe0414c4f98667bfab03c09981ee53076a8bb47759d8e8eb5ea856a3d56f0140d2581efbbe2c75777b191f68286dd4b0683fd026d71d1ba50756eb419fd29ac45619498be0ca37be748704d7b173ab5ac10c0460c9b31c1e690f69aab13c3151f4e9413478de8aeced3c6a2f4324323fe7fac413253e347cad20186aa0864d87f1c2484c1c08234a6c25b17a5c641a354f1dfad4e3f6fa73cfe44f38806486d909606154cc6f32e7784e274ce3e3c73677dd4e115e3321210f588237a37b89da7e32655f30cb9d61da3b1dbf989005eea149a3ab09a745905ea054c8a5bfdd64edde7b8abe89473156222ce3e2dcd98972786f63dd76c00d22336454cb6c76c4d769351a47bfe24492d6d43e51cc454af2df102a34ac68baee94ad8d99114c0cf571b3d7fbfc324aa16c4f1bd439c887a236ab1e7fc6d390bc9aae45c8d0160b5d74996cb24ea24c0e7c5b935c28657d6efa82aaee957d9a6607602eec54747fdcefcbfc8caf42750a5325de37181cabcd61dd0a317bb394a899a26be45cada0c2b3cdff7ecafc9dded6ea7b288080735ac86cdc9cf2d1c3e8b555bf543418abc3109449da89e1a0f0df2a1f0c1c002a21585b720ae8b8a61f75add6267c4225b4ed863057397a5f810b0c4de9e12c16d4377198b556ed587a8288081ec6565be24fad83fcd8a1ef4b3598022d45e4e600329c66e57a05efca73309e8a4761baa7416620fc19c29bdeae3be4f07a2e2b1040461cf1deb628349c7e826ae08a3f49eb0b7b637798d512f8b8347f83c6cfd06b1599adcf84cb748878a9a1f89bf0339d57bca3a9e770146a828196610fe4fd8417ee1f3a1416c566e1ca68340c648282bf7b305654299d26a0e11c3f5bde0b906724d4759ba11d60f6fb4d3858ee03ec5d9b36a6f22eaec801cad9b80c16df92daa51d997004f3ca17894dc245d78da3534da6d3b1464aed8c0732ff8ed9b7c8705dfcf6a84baf5a89db5c3e6df413628cd35095d5a5e289a5f1fb59bb2a1f7901ab6e8bb627809975acd436691ed91c848da0d9a05a7e2cfce46d38fca679dd239079f74c71d39b6d1967b41fee47628668d618617d3ef1bf1482527dd897f652c5541e3bd1f361e6de607a55ad5e759f77e78e3f9064515c161270ce2b89ed971423a908f77567c15ef45de8b4ad4cf6d323f400daeda06c5a857a810e69a301343363b70aa478bf4eed0c26e74d329e5fae017ea7ec9aa53397ae7eff4393acf428991043be4ab43af3684c5050be68622107c03c0e6d7bcb3416bffb24af0add620a37aec95c0eca9befc46a8a78ff8df3bfe67e804e5d73b2b240b3d20f4d42e2246d174eab1b785ba77f6ac983c5fd0d3f6bb29ed439c1f378e93b56f16dbe4e032a7e3e85f4894da9f97ddeed7880766b2894fe6a159e2d54aac3e645f82080729c880fd3eb501986e3bfb60d26fd1a5b973d50febb7a3567de4046a2d491518ebf81f3ecc8e690c57732c61e26a9ffce7dbcddffafcfc08c9029e5cf0d55cdd4e7ba12ed5a7add69cbb17a367194edc498542c0e6aeea3d944e9e64ab2db4e29e4ca4d1e3ff7a2e635294fd0c3fd4df5fe95b8e05cb0c91c383627944e8f3d642ab3436a1d101321eec8eb4f0e0f6cc16e223c767f34beb9381dbb65581531a6d235c586161cc3d006f3997b6cae864a7b4b194cdea42baad4c1eea2671ec707d5ace56219c6a7bf17c235918b7e98374e0b3eef8d38b8b6868afb30a89a73a8e1891295cf86f94c67ed27b48ca3644132d9464050ce425abfd910b8929619e66f1c5f15f46261722c37673a929ff431b9e7769bda1e50a75f9b88276b23f3c2a64697dad917b8a25cf2a3d37624272633a20a98ddc33f4cef97acc7ca9535b5f6fe5653ac83052aaa6945695cae2e6e2e65e60fd1c8b2d90f458e9dc6eb8b39366cf09a27d1a3c3c78b4b6db288f4b0a723bc0d32c2491fbfcd1fa296171b88c7f2f79ebebc2a1ec996acc70c351e7df48f04a0802f80e24c77b6826332b975b8e48afdd57491a76de669b1387b0a3280c0d632e19c9745de70969aaf9f113d541fc3d99acbb1529221f48d01152046aec2478b95b07526be5a56e286b317a87b0d55f22980a00407d6496393caa134e5eff68e60049db9478b9c3291efad9beffc35550aebbd07c54a52104586560065ef6bbd89a615a125fe47b57c75c462490792911336c5cf12281e4d2579635f75451bd09bcd90a1deb3e31091c52852a47227ff222b6c38c9ce85254740005e4af4696bf1d9d8b0ee91af3e89dd20cbf63d39d260ea4e9698c652b49be1472276866aab145c3981040d2d20ff0417b3319a0f84f3c387c15285eb454c95e69945a5f1a66e7f49bb47af66ba1dd90a0537077c5f1a5e994b93c7ad271650f751c9e5f3f4ec784dd59054301c8d87a4effdcede15298382cc6e2d415a97fd9510d20dff208964e8e989bab6421c3f794bf9f22c649ba8d263eea9a965f2f27486cbb784d527e739d822c23ca179c4707469ab760daa24d4a3ade00708e0173929e7094814f9369592c8b4ecb92e0d8e2bac4b52848331652c645b90d23314ad136d87f720c9cbec4b5a0d59c7e8992244e987daeb579419f78f056770b4f6065b2bebb377cd65862c12da8618bb61276f7aa90a5dce524c04e855cb42de7e0edab26dd913f0b192ad3121eebed88ea4ed690e6043c3ccff9574a7e1a345272a4b563b32ed48320f7658fe4db5da814add979cf89e2a73aaf4248d18c2684b47396a1e174e27cd37a89021657413a28a2dbdba7f1ac68f3c1460dcc1e3a581374b12b9db11d772a342998ecfd772b2865d02caacbeddb482b1803581c2783abc6edafe92ad931b8a1edaa52c0d97ab682d6b55b55949b88fa7be8b74751d83f7f0343fde57a9416ab314447ab7a8f1548d48aae2e3dfaa8827b3bc41eece4f533deef3d6e735f9572487ba3d17864bbd2820c37a20a16ad0f322a371ec9189cd0834df153bf0f54e60832b37f85f6291f6576140be628b6c4b7664eacc9e11618d5fe6669404e3f371032f0b48b7a2e058e245ffed4ab681a4d6506f13383bee193385dffb10536edd4958b873686e79cfbd7d3b5419b56bd944dd2394f6dbdf94d10108e97702249885d4cba29f89173e77a4f077387563d06fe3d600565ac501b328669377ff1140228efcc0e7bc3568e6223ecfd55e34f5c784d31c6c584ccb02f4701a3e266fca61e6ef9f9b8340f375565dad0c2d671de688cc435e8efc31125e4aa2d2968d1ffbefa802fcc173f4bf135507db2c0ed8e055", 0x1000, 0x0, 0x0, 0x1, r0}]) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TCXONC(r1, 0x540a, 0x1) 2018/03/30 11:55:46 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:46 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x48000) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000580)) sendfile(r6, r3, &(0x7f0000000400), 0x2000000102000004) sync() dup2(r6, r5) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x2) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:46 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x10001, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40046432, &(0x7f00000000c0)=0x6) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000200)=r2) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000100)=0x80000000) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f0000000280)="e2da7ab492794715e839a005e5467ee13b3e04def8660cf0287eaa7943c6feb27f28233a56185503e9ad893af2dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x2c002, 0x0) socketpair$inet6(0xa, 0xb, 0x1, &(0x7f0000000240)) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:46 executing program 3: r0 = syz_open_dev$tun(&(0x7f00000005c0)='/dev/net/tun\x00', 0x0, 0x80000) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0xd9, 0x80000) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:46 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x400000, 0xc2) ioctl$sock_ipx_SIOCAIPXITFCRT(r1, 0x89e0, &(0x7f0000000180)=0x7) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, &(0x7f0000000080)={{0x3, 0x3, 0x9cf9, 0x1, 0x4}, 0x3, 0x2d}) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/03/30 11:55:46 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:46 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x0, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:46 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:46 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r5, &(0x7f0000000700)="d87779a612687a668537643f550114374115085fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4a9beb575d87278ae67305406b66fd0eeb102d868f02bfab752ceec81c3144b97511c7aeb0d17489bb0f615eadb4330cd1f5f7de29f102631fbaab033749d7067d89236e28cc378eaad7af5514559abead06d37ff73866dd83d037504299d99dfb30c863caf0ae6549254347d34", 0xffffffffffffff70) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:46 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0xabcc) ioctl$TCXONC(r0, 0x540a, 0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7ea0a252, 0xfffffffffffffffe, 0xbd97}) 2018/03/30 11:55:46 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000040)) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) r3 = perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r5 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r6 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r5) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) ppoll(&(0x7f0000000400)=[{r3, 0x2000}, {r0, 0x8}, {r7, 0x20}, {r7, 0x40}], 0x4, &(0x7f00000005c0)={r8, r9+10000000}, &(0x7f0000000600)={0x783}, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r5, r5, &(0x7f0000000080), 0x102000004) sync() dup2(r6, r5) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x4c01) 2018/03/30 11:55:46 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) 2018/03/30 11:55:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) [ 291.289745] binder: 3848:3852 ioctl c018620b 20000040 returned -14 [ 291.326409] binder: 3848:3852 ioctl c018620b 20000040 returned -14 2018/03/30 11:55:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0xfffffffffffffffe) 2018/03/30 11:55:46 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(r0, 0x1000, &(0x7f0000000380)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") socketpair$packet(0x11, 0x3, 0x300, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x443e, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000240)="0df39cef347c2a132da21ff2b68c0f4b816d21f8bb7139edd0659a2d049bcbb52e1c025ca2ed0c65ad085fc0ec931fcc2a07d91ebfcc", &(0x7f0000000280)="1c201f6a1090556970bf2d7d18c1ff80a951709c7bf82f721dee5f2cb0142733644875eda20818391abaec9e85006b3996840a5c4ee19a4ec7bf0b5100c488bc62de7d1744435de179789c2ece4658647e97f1ca575b06ecd8f871eaa71f53f79dd4aef0e5dd14c3af064b88f7a1f2c33625b6bcdf0184bc556c6f8f62ffd6c035aa4fc39b6a97b19f0756c7f55a25915cdb090d160ae741c7ccf9e63ba72a7fc4a6251b1fbfbb4cfb1fce", 0x3}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) accept4$packet(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x14, 0x800) ioctl$TCXONC(r0, 0x540a, 0x2) chmod(&(0x7f0000000080)='./file0\x00', 0x26) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:46 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:46 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x0, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:46 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:46 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x5}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000005c0)=@assoc_value={r2, 0xffffffffffffff2f}, 0x8) r3 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r4 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r4, r4, &(0x7f0000000080), 0x102000004) sync() dup2(r5, r4) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r5, 0x4c01) write(r3, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:46 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:46 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:46 executing program 7 (fault-call:18 fault-nth:0): r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:46 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x0, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) [ 291.558816] FAULT_INJECTION: forcing a failure. [ 291.558816] name failslab, interval 1, probability 0, space 0, times 0 [ 291.570431] CPU: 1 PID: 3896 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #281 [ 291.577703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 291.587049] Call Trace: [ 291.589644] dump_stack+0x194/0x24d [ 291.593284] ? arch_local_irq_restore+0x53/0x53 [ 291.597964] ? trace_event_raw_event_lock+0x340/0x340 [ 291.603173] should_fail+0x8c0/0xa40 [ 291.606874] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 291.611973] ? trace_hardirqs_off+0xd/0x10 [ 291.616202] ? find_held_lock+0x35/0x1d0 [ 291.620256] ? trace_hardirqs_off+0x10/0x10 [ 291.624578] ? __unlock_page_memcg+0x53/0x100 [ 291.629065] ? lock_downgrade+0x980/0x980 [ 291.633205] ? node_tag_clear+0x180/0x180 [ 291.637344] ? lock_release+0xa40/0xa40 [ 291.641320] ? __lock_is_held+0xb6/0x140 [ 291.645403] should_failslab+0xec/0x120 [ 291.649384] kmem_cache_alloc+0x47/0x760 [ 291.653435] ? rcu_note_context_switch+0x710/0x710 [ 291.658354] ? mempool_destroy+0x30/0x30 [ 291.662403] mempool_alloc_slab+0x44/0x60 [ 291.666543] mempool_alloc+0x16a/0x4b0 [ 291.670412] ? remove_element.isra.4+0x1b0/0x1b0 [ 291.675146] ? mark_held_locks+0xaf/0x100 [ 291.679273] ? _raw_spin_unlock_irq+0x27/0x70 [ 291.683765] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 291.688773] ? __lock_is_held+0xb6/0x140 [ 291.692818] bio_alloc_bioset+0x3cd/0x760 [ 291.696963] ? bvec_alloc+0x2d0/0x2d0 [ 291.700747] ? check_same_owner+0x320/0x320 [ 291.705071] submit_bh_wbc+0x105/0x710 [ 291.708953] __block_write_full_page+0x56c/0xc80 [ 291.713686] ? check_disk_change+0x130/0x130 [ 291.718084] ? submit_bh_wbc+0x710/0x710 [ 291.722128] ? redirty_page_for_writepage+0x60/0x60 [ 291.727142] block_write_full_page+0x125/0x230 [ 291.731708] ? check_disk_change+0x130/0x130 [ 291.736106] blkdev_writepage+0x24/0x30 [ 291.740068] __writepage+0x5f/0xc0 [ 291.743591] write_cache_pages+0x72c/0x14b0 [ 291.747896] ? print_irqtrace_events+0x270/0x270 [ 291.752644] ? tag_pages_for_writeback+0x460/0x460 [ 291.757574] ? clear_page_dirty_for_io+0xe50/0xe50 [ 291.762485] ? perf_trace_lock+0xd6/0x900 [ 291.766620] ? lock_release+0xa40/0xa40 [ 291.770599] ? rcu_note_context_switch+0x710/0x710 [ 291.775522] ? __might_sleep+0x95/0x190 [ 291.779491] ? __mutex_lock+0x16f/0x1a80 [ 291.783538] ? iterate_bdevs+0xc8/0x260 [ 291.787492] ? trace_hardirqs_off+0x10/0x10 [ 291.791806] ? iterate_bdevs+0xc8/0x260 [ 291.795774] ? blk_start_plug+0xbb/0x370 [ 291.799818] ? blk_lld_busy+0x60/0x60 [ 291.803609] ? lock_downgrade+0x980/0x980 [ 291.807736] ? trace_event_raw_event_lock+0x340/0x340 [ 291.812919] ? iterate_bdevs+0x119/0x260 [ 291.816980] generic_writepages+0xe9/0x150 [ 291.821210] ? write_cache_pages+0x14b0/0x14b0 [ 291.825784] ? _raw_spin_unlock+0x22/0x30 [ 291.829918] blkdev_writepages+0x1d/0x30 [ 291.833970] ? blkdev_writepages+0x1d/0x30 [ 291.838201] ? blkdev_readpages+0x40/0x40 [ 291.842342] do_writepages+0xff/0x170 [ 291.846144] __filemap_fdatawrite_range+0x32f/0x460 [ 291.851145] ? delete_from_page_cache_batch+0xdb0/0xdb0 [ 291.856508] filemap_fdatawrite+0x26/0x30 [ 291.860640] fdatawrite_one_bdev+0x50/0x70 [ 291.864861] iterate_bdevs+0x109/0x260 [ 291.868736] ? fdatawait_one_bdev+0x70/0x70 [ 291.873067] sys_sync+0x112/0x1c0 [ 291.876510] ? sync_filesystem+0x2e0/0x2e0 [ 291.880728] ? SyS_read+0x220/0x220 [ 291.884365] ? do_fast_syscall_32+0x156/0xf9f [ 291.888843] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 291.893853] ? sync_filesystem+0x2e0/0x2e0 [ 291.898079] do_fast_syscall_32+0x3ec/0xf9f [ 291.902410] ? do_int80_syscall_32+0x9c0/0x9c0 [ 291.906983] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 291.912504] ? syscall_return_slowpath+0x2ac/0x550 [ 291.917422] ? sysret32_from_system_call+0x5/0x3c [ 291.922261] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 291.927092] entry_SYSENTER_compat+0x70/0x7f [ 291.931477] RIP: 0023:0xf7f96c99 [ 291.934814] RSP: 002b:00000000f779209c EFLAGS: 00000286 ORIG_RAX: 0000000000000024 [ 291.942497] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 291.949743] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 291.956991] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 291.964247] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 291.971499] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/03/30 11:55:47 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0xbb) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:47 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:47 executing program 7 (fault-call:18 fault-nth:1): r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:47 executing program 6: ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="9c", 0xffffffffffffff12) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) io_setup(0x40, &(0x7f0000000040)=0x0) io_destroy(r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000002c0)={r2}, 0x8) 2018/03/30 11:55:47 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000400)='/dev/audio#\x00', 0x3, 0x100) r2 = dup3(r0, r0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000580)=r2) r3 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x9) r5 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r6 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r5, r5, &(0x7f0000000080), 0x102000004) sync() dup2(r6, r5) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r4, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r3, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f00000005c0), &(0x7f0000000040)=0x4) 2018/03/30 11:55:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)) ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:47 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:47 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) r1 = dup2(r0, r0) r2 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x10000) r3 = syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x8001, 0x418000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000340)={r2, 0x10001, 0x1, r3}) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) r4 = accept4$netrom(0xffffffffffffffff, &(0x7f00000001c0)=@full, &(0x7f0000000080)=0x48, 0x800) getsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, &(0x7f0000000240)=0x8000, &(0x7f0000000280)=0x4) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x400000000, 0xbd97}) 2018/03/30 11:55:47 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000580)={0x80000, 0x0, [0x80000001, 0x0, 0x1ff, 0x6a2, 0x40, 0x7ef0, 0x6, 0x543]}) dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:47 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:47 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:47 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x4540) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x401) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r1) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) signalfd(r5, &(0x7f0000000400)={0x8ff}, 0x8) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:47 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)={&(0x7f0000000400)='./file0\x00', r1}, 0x10) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)) ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/netfilter\x00') ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000200)={0x2800000, 0x9, 0x458, 0x4, [], [], [], 0x400, 0x815a, 0x7fff, 0xfffffffffffffffa, "98e9b6744bc2c9eb8d1b2637ebfa3db7"}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x321000, 0x0) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000180)=0x1, 0x4) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/03/30 11:55:47 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:47 executing program 5: syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x9) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r1, r1, &(0x7f0000000080), 0x102000004) sync() dup2(r2, r1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) write(r0, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x6, 0x0) ioctl$TCXONC(r0, 0x540a, 0xfffffffffffffff8) write(r0, &(0x7f0000000180)="00f14050eb692d6a2b02af99a0e41d8d97120aab888a1a8ed5115bfa0733892a247e241da9e07a62b4b7b749602cde8bce291ba829cefa652106fb2f589326eb57e19e9794f058aba940a47163ba2f350a3df99acd4c0107450eab3e0296aa70fae66072daea7d137bb3ef107c7dcf55dede9f769bb061e0c509df6d293b6dbd", 0xffb1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x80000) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000002c0)) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x44) ioctl$TCXONC(r2, 0x540a, 0xfffffffffffffffa) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/03/30 11:55:47 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x1000) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x4) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:47 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) memfd_create(&(0x7f0000000400)='/dev/loop#\x00', 0x2) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)) ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:47 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:47 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:47 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0xfffffffffffffffe, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000640)="2f6465762f7667615f6172626974d6b3878613657200", 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x2) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$DRM_IOCTL_FREE_BUFS(r4, 0x4008641a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[0x5]}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000600)={r5, 0x0, 0x0, 0x7f, 0x1}, &(0x7f0000000680)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$audio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 2018/03/30 11:55:47 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:47 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) r1 = signalfd(r0, &(0x7f0000000040)={0x7}, 0x8) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f00000001c0)={0x2, 0x2, {0x1, 0x3, 0x101, 0x3, 0x5}}) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000240)=0x5, 0x4) 2018/03/30 11:55:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c4") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:47 executing program 5: syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x9) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r1, r1, &(0x7f0000000080), 0x102000004) sync() dup2(r2, r1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) write(r0, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:47 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) munlockall() getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:47 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clock_gettime(0x0, &(0x7f0000000640)) nanosleep(&(0x7f00000006c0), &(0x7f0000000580)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000400), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) r5 = openat$cgroup_ro(r4, &(0x7f00000005c0)='memory.stat\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa, 0x15010, r5, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:47 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) sync() ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000000400)=0x1) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = dup2(r0, r0) r2 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x4, 0x400) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000200)=r2) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000240)={{0x800}, 0x1}, 0x10) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x4) rt_sigsuspend(&(0x7f0000000080)={0xffffffffffffffe1}, 0x8) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/03/30 11:55:47 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:47 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x100) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:47 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:47 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x400000006}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x80027, 0x400) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) socketpair(0x1b, 0x3, 0x3, &(0x7f0000000400)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:47 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c4") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:47 executing program 5: syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x9) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r1, r1, &(0x7f0000000080), 0x102000004) sync() dup2(r2, r1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) write(r0, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:47 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@nl=@kern={0x10, 0x0, 0x0, 0x20000}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) getsockopt$sock_int(r2, 0x1, 0x3f, &(0x7f0000000400), &(0x7f0000000580)=0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:47 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000080)=""/33) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:47 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:47 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0xf0c3, 0x2, 0x2}]}, 0x8) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000600)={r5, 0x1ffffffffffff, 0x0, 0x101, 0x8}, &(0x7f00000005c0)=0xfffffffffffffcc8) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) writev(r0, &(0x7f0000002880)=[{&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="74690159bd9d0d8833ee16b1a6df303d5f411ebd278e1df78de669120aecba258c956f839b591506b6c5f6ffaade25d2da5c175397e6fb6a618e603b8f73d860ab42e46305feca37b5e0cada66065c79465ac9ef4e99483516c70b9c73fc909bea1e6bffff07498f1d487a9bbff0fd111d5b3f81", 0x74}, {&(0x7f0000001440)="82aef3de6c1e812159b069c4683a3eae5ddbd22dbeb85c4db3ecfa689d64179612324e80688dbd8e0756a9c35258923ea5fa83ad360ae4642e94561cc415b3de15f8ec532b961c11600d993915fe707a76c0881b8b4a2c0baf69b3636e322158ddc1a0986816f7b754c9fd33eda145b0c8c99fd4df554a7344629bd1823105fa3dd1a756aa6963316b671eaee12f66f79e2184820eb26e455f8656a2ccf2dfe991fa895874d9ac4bea9f36d97e7a0cd0b93ac23661abc918a666a6bb5bbe", 0xbe}, {&(0x7f0000001500)="d7d06ab42fa4a3d7e011ce4174bfa4bf931fa6f17b5ca9e120260fcd5501084e852a03c3922e97028b0768d5dfda01fff1da749c0b65b5138e34c239ec80c857b89bc297ec62e0ee37168d82e31695cd5bd6b071df6bd4d2895fe100eb2999fbd086e2b037dc427b5f0706be9a5754b22d737ab1687bd2361955ef6063c248d08e845089d3c7340f0ce2e50405", 0x8d}, {&(0x7f00000015c0)="dcf6bfb80c4befa3b59a42c30242f73a0bc3e9443ed236d15eb1e390dd4d505983ee065d5dbf620087a9c100d451736f6a883f88d105ef5cc98a86d0b1642c5e782f669ee586ed2b94ce4aea036393dd5c1a5c8114ace875a3567f182a18c5b6e8e9c28ad2ed6bdcb2dd4fc40370f6abf3ae8e46bd848b932bd27de83aed586da93ec3976bb6191d38d7d0", 0x8b}, {&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000002680)="66016a5ebab6811393efe6520731982b5d64fa31244a7b5636aa4904184f15364a15d8c1587251f4f1ce864469f56765202cc82bafed5996e68dcc38b1ada8b06ae7651e576dca728362474b48dda479360efea297a49ad091e803f2", 0x5c}, {&(0x7f0000002700)="ff4d2ea1e361a15f6e96e8dadd984a", 0xf}, {&(0x7f0000002740)="72ec0e666b66e8e0408ddf3931e23cb877173208752ccfe0b5dd63c665816066b9a0df0d3a2bce89f9e9ed834629d1a19073562b3e447c21da8c", 0x3a}, {&(0x7f0000002780)="f28bb2c6f32ee037788fbe98a60d2897dd0f9972784b052cb9a98aa7d1f19e46018a584a54780450089543ff1c929218dc17c4174ce6ea45624507354cf0299526fa5eb0d97f2d8328b591f191da540285dd138175484061c524150c0739baabb2952024d89af42a8b3b350f88458402994831604ce45bf0b7892f422e6c1505ed0248366cf6870b0e9e16fa8151ff94bd1c140d463d0c0e0c571a5e92acbf3314709bc9e107e21e0784f531a69daaccf98bc210461e8bceb3bcb1ec49ef57ecd48b6acb036cfb60564a30234583b25dc2f889946eb765", 0xd7}], 0xa) ioctl$TCXONC(r0, 0x540a, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x8040, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000280)={@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, {&(0x7f0000000180)=""/184, 0xb8}, &(0x7f0000000240), 0x10}, 0x9c) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000380)={0xff, 0xf3a, 0x80000001}) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000002900)=0x1, 0x4) 2018/03/30 11:55:47 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() read(r0, &(0x7f0000000580)=""/248, 0xf8) dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:48 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:48 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x9) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r1, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r0, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c4") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:48 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:48 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:48 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x800, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x8, 0x0, 0xbd98}) 2018/03/30 11:55:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x8) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) r1 = syz_open_dev$midi(&(0x7f0000001300)='/dev/midi#\x00', 0x6, 0x361000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180)={0x0, 0xfffffffffffff939}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000200)={r2, 0x7, 0x3f, 0x2, 0x101, 0x3}, &(0x7f0000000240)=0x14) getpeername$inet6(r1, &(0x7f0000001340), &(0x7f0000001380)=0x1c) fcntl$setpipe(r0, 0x407, 0xe6c) 2018/03/30 11:55:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:48 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:48 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x9) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r1, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r0, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:48 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000400)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:48 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r4) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r2, &(0x7f0000000080)=0xfffffffffffffffd, 0x102000001) sync() dup2(r4, r5) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:48 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000400)={0x0, 0x2}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000005c0)={r3, 0xffffffffffff1ddc}, &(0x7f0000000600)=0x8) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r4 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r4, r4, &(0x7f0000000080), 0x102000004) sync() dup2(r5, r4) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r5, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:48 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x252) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0xfffffffffffffffe) r1 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x100000001, 0x100) name_to_handle_at(r1, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x98, 0x401, "47ece82b49ebee74fbfde0bee0fe2e8b8abbc4f10ea767d50d905cfd8701330db42d84b27e1f1fe1f7060e529db25e8fb8e8f8a9f3676f4bae3e0b027a6f7a6fcca69e5c68201588e505f2bfc2ff2a91d8ad033c07462a0dcbf43af5ca43cedd85be47ea28c295bc6dfbe1aa409ab9549317f4a00f265943d584053021b002d2471d0284a587378022eaaafaa45833a7"}, &(0x7f0000000380), 0x1400) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f00000003c0)={0x0, 0xa2, 0x3}) ioctl$TCXONC(r0, 0x540a, 0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:48 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r4 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r4, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:48 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x9) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r1, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r0, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(r0, 0x100000001, &(0x7f0000000180)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9477ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/03/30 11:55:48 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1ba, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x1, 0x4000) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:48 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000580)=""/197) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r0, r5) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:48 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r2) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) dup2(r4, r5) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:48 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:48 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x40000000000009, &(0x7f00000001c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:48 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:48 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x5, 0x80000000032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x11, 0x2, 0x0) sendmsg(r0, &(0x7f000000cfe4)={0x0, 0x0, &(0x7f0000006000), 0x0, &(0x7f000000effa)=[{0xc}], 0xc}, 0x0) r1 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f00000005c0)=':\x00', 0x7) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x9) r4 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r4, r4, &(0x7f0000000080), 0x102000004) sync() dup2(r5, r4) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000003c0), 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000580)=0x7, 0x4) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000480)) 2018/03/30 11:55:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2f, "b1def730e27241d9bd0508c49584fdd32a24ee6eab18bdf2fe380722f4395b0523a1a0161844bdb9c99b24141409f7"}, &(0x7f0000000180)=0x37) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={r2, 0x7fff}, 0x8) 2018/03/30 11:55:48 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) r2 = perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r4 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$int_out(r2, 0x2, &(0x7f0000000400)) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r4, r4, &(0x7f0000000080), 0x102000004) sync() dup2(r5, r4) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r5, 0x4c01) write(r3, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:48 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r4 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r4, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:48 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) nanosleep(&(0x7f0000000100)={r2, r3+10000000}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r5 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r6 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r5) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2}, &(0x7f0000000140)=0x10) ioctl$TUNATTACHFILTER(r1, 0x400854d5, &(0x7f0000000400)={0x9, &(0x7f0000000580)=[{0xee65, 0x9f, 0x0, 0x9}, {0x4, 0x2, 0x52, 0x4370eb7a}, {0x0, 0xfffffffffffffffa, 0xffffffff, 0x100000000}, {0x5, 0x6, 0x5, 0x5a5}, {0xa33, 0x7385, 0x550, 0x4}, {0x5, 0x8000, 0xfffffffffffffff9, 0x9}, {0x4, 0xfffffffffffffff8, 0x0, 0x2}, {0x4, 0xbca, 0x80000001, 0x4}, {0x7, 0x81, 0x101, 0xfffffffffffffffe}]}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000440)={'syz_tun\x00', {0x2, 0x4e23, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r5, r5, &(0x7f0000000080), 0x102000004) sync() dup2(r6, r5) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x4c01) write(r4, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:48 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x42006, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0) mq_unlink(&(0x7f0000000200)='$md5sumnodevvboxnet1vmnet0\x00') ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40086410, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) sendfile64(r0, r0, &(0x7f0000000080), 0x4) 2018/03/30 11:55:48 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x7, 0x400000) getsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r2 = memfd_create(&(0x7f0000000080)='/dev/ptmx\x00', 0x3) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000180)=[0x265a67, 0x1], 0x2, 0x0, 0x53f7, 0x8, 0x2, 0x0, {0x7, 0x7, 0x40, 0xff, 0x3ff, 0x6, 0xffffffffffffff01, 0x8, 0x4, 0x4, 0xf42, 0x1, 0x3, 0x6, "66034062d828c8561b352996ff7abae24b8c9b0cf7d60614692526ad4f35c3da"}}) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=0x0, &(0x7f0000000340)=0x4) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000380)=r3, 0x4) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/03/30 11:55:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:48 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x10800, 0x0) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:48 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x175) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:48 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000001, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000400)={r5, 0x3ff, 0x7, 0xd11a}, &(0x7f0000000580)=0x10) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:48 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(r1, &(0x7f0000000600)=""/191, 0xbf, 0x4000003f, &(0x7f0000000740)=@llc={0x1a, 0x0, 0x7, 0x81, 0x4, 0x7fff, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000580)=""/66) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:48 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:48 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:48 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x400500, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x9, 0x24000) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000001c0)={0x1, 0x2, {0xffffffffffffffff, 0x0, 0xbe9, 0x1, 0x44a9}}) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:48 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x800040000040, &(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x2, 0x4, 0x1, {0xa, 0x4e22, 0x4}}}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x102000004) sync() dup2(r3, 0xffffffffffffffff) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r3, 0x5452, &(0x7f0000000400)=0x3) lookup_dcookie(0x1, &(0x7f0000000580)=""/92, 0x5c) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:48 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r0, &(0x7f0000000580)="d87779a612687a668533643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd49fa50516695dfe63beb0b5c972205679a2af17140142d355ad193c083901acf5648c8856f777528ee36337368ed2111c66d9d494c845dfbc9f0a427a258b7c0717fea3555264113f5bb52f477182a0146ecbef2c7a7a82d088d0269fa1b3a0360ab131aca19efd5ec2dd8db645a0327707405f7feb7ab4a1de0d5efb1f6238ff3c3c394e1717c34f7643", 0xb6) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:48 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) truncate(&(0x7f0000000400)='./file0\x00', 0xffffffff) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000000580)=0x1) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = memfd_create(&(0x7f0000000000)='/dev/ptmx\x00', 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000001c0)=0xa34, 0x4) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x2, 0x9, 0x5976, 0xbe87, 0xa8, 0x8, 0x8001, 0x3, 0x8000, 0xaf4d}) write(r0, &(0x7f0000000180)='/', 0x5fb) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/03/30 11:55:49 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:49 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f00000005c0)=""/17) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000080)={0x3, r0}) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f00000001c0)) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) socket$rds(0x15, 0x5, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:49 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:49 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r3}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000400)=0x5) r4 = dup2(0xffffffffffffffff, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r4, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:49 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000440)=0xdc) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x7, 0x4) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:49 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f0000000740)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x1000000000800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'dummy0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000680)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="03000100", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="4a06323d8ef713d7e78980438f58d39d1e64010069076c337ec0fdd7305038bb1dec5dab0b92ee25e3a9fa2908427214e127d90e8793d5421327b67b593183915afae9142b1e9adba30c4b521830c2a6e968e2872c69f4babcefc527c6b914915991a5176dca33038de7b2d60c412d6e7fe496a3aa6a0a0cea4aee722234362975cce58fc0a6515dcb32bd136e3980eb24a5d959a13b691650a63b37e2fd06e34bf176037a4bd7af718227d5b20b8b2c576649924f1446523a0ce78894b5439656d215f4f9e91abaf2ef115da9b2118734253dea08a09437059408b7ec848a2f718ad6b27deea30257c126995524"], @ANYBLOB="a1010700ac0605000700000001040000f1e27a8c9be68dc45c2aa112ec3f2bc12ae0ab93ff129df4d4cde663a619ac34d76087f036bc10b1019fe469145b020e50dd3ed03cd3961bfa7afebf9b3d56f9a8d1bd586a19d9d60f3971279de697c62a2a7369df32181c4760338b0652eb5132593075e030fb848705c611d76c7497a3c302dfe21851db50a6067733b18170abd840e520623c50c95e1d"]) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x8d3) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x56000, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x1, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000001c0)) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f00000002c0)=""/78) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000080)={0x401, 0x200, 0x81, 0x1, 0x3, 0x3ef9, 0x7fffffff, 0x0, 0x8e6e, 0x101, 0xfffffffffffffffc, 0xffffffffffffff59}) memfd_create(&(0x7f0000000280)='/dev/autofs\x00', 0x1) 2018/03/30 11:55:49 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x4a, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xff, 0x3ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8000000000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/loop-control\x00', 0x141004, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000400)=r2) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000600)=0x4) 2018/03/30 11:55:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:49 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x80000001, 0x101000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}, 0x9}, @in={0x2, 0x4e24, @multicast2=0xe0000002}, @in6={0xa, 0x4e22, 0xffffffff00000001, @remote={0xfe, 0x80, [], 0xbb}, 0x1ff}], 0x48) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf006000000000000007f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7fff, 0x2080) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x6}, 0x52, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, 'ip6tnl0\x00'}) ioctl$TCXONC(r2, 0x540a, 0x7fca) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000300)=0x10000) ioctl$KDSKBLED(r1, 0x4b65, 0x0) 2018/03/30 11:55:49 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r3}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000400)=0x5) r4 = dup2(r2, 0xffffffffffffffff) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r4, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:49 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x0, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:49 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:49 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x0, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:49 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000580)={{0x8, 0x6}, {0x9, 0x1}, 0x0, 0x6, 0x9}) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) socket$pptp(0x18, 0x1, 0x2) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) sendto$unix(r1, &(0x7f0000000180)="6660dc9b7cf5eedb747915b9ecdc23760a829de8729d0e5568db12a69a4a82a707606830c44353aeddde066ddb844f888a837ca0c6c7ddfd9e48d2200934b016933ebf28f5276328a415a98f79ac91e4c959d8735a20d43ace7730d2f4076119", 0x60, 0x40000, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r1, 0x540a, 0xc9b) 2018/03/30 11:55:49 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000580)='/dev/loop-control\x00', 0x110000100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:49 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5421, &(0x7f0000d6dff8)=0x4) syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x10001, 0x1) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:49 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x4101, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000001c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TCXONC(r1, 0x540a, 0x1) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:49 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:49 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x0, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:49 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000400)={0x3, 0x8fa}) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000580), &(0x7f0000000040)=0xffffffffffffffec) 2018/03/30 11:55:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:49 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) r1 = getpgrp(0xffffffffffffffff) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x0, 0x7, 0x800, 0x100000000, r1}) ioctl$KDDISABIO(r0, 0x4b37) 2018/03/30 11:55:49 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x9) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:49 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x80, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000005) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:49 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x80001, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) getsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000400), &(0x7f0000000580)) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0xfffffffffffffc60) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:49 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x40) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() r7 = fcntl$getown(r3, 0x9) perf_event_open(&(0x7f0000000580)={0x0, 0x70, 0x5, 0x3, 0x7fff, 0x887, 0x0, 0x7717, 0x10, 0xe, 0xfffffffffffffff8, 0x5, 0x3, 0x100000000, 0x7fffffff, 0x6, 0x5, 0x0, 0x9, 0x7, 0x4, 0x44ba, 0x97, 0x5, 0x4, 0x1, 0x8, 0xfffffffffffffffb, 0x2, 0x3, 0x1, 0x8, 0x3, 0x1, 0x6, 0x0, 0x2, 0x5, 0x0, 0x0, 0x7, @perf_config_ext={0x9, 0x8}, 0x20, 0xcf0e, 0x6, 0x7, 0x9, 0xfffffffffffffffa, 0x4}, r7, 0x10, r5, 0xb) dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r6, 0x5452, &(0x7f0000000600)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:49 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:49 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:49 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:49 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x400, 0x1ca) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000780)={&(0x7f0000000580)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)=ANY=[@ANYBLOB="080100", @ANYRES16=r2, @ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x4000001}, 0x24008004) r3 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x9) r5 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r6 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r5) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r5, r5, &(0x7f0000000080), 0x102000004) sync() dup2(r6, r5) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x4c01) write(r4, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r3, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:49 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000400)={0x2}) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x0, &(0x7f0000000580)=0x696) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:49 executing program 3: r0 = syz_open_dev$tun(&(0x7f00000005c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000400)='/dev/vcs#\x00', 0x9, 0x200) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000580)={0x2, 0x1}) r2 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x9) r4 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r4, r4, &(0x7f0000000080), 0x102000004) sync() dup2(r5, r4) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r5, 0x4c01) write(r3, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r2, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:49 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x1, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000001c0)={[{0x80000000, 0x7fffffff, 0x9, 0x9609, 0x80, 0x0, 0x1, 0x200, 0x5, 0x8, 0x80000001, 0x460, 0xc3}, {0x1, 0x3, 0x7, 0x5, 0x1, 0xffffffff7fffffff, 0x3, 0x9, 0x4, 0x2faf, 0x3, 0x3f, 0x101}, {0x80000001, 0x200, 0x1f, 0x8000, 0x588, 0xc0e2, 0x4, 0xe6, 0x3, 0x8001, 0x800, 0x8}], 0x73b84469}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x101ff, 0x3, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000280)={0x7, 0xfffffffffffffffe, 0xbd97}) 2018/03/30 11:55:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000180)={0x6, 0x3}) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000080)) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/03/30 11:55:49 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:49 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:49 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000580)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@multicast2}}, &(0x7f0000000400)=0xe8) ioprio_get$uid(0x3, r5) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:49 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r3}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r1, r1, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000400)=0x5) r4 = dup2(r2, r1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r4, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:49 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:49 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x20102000004) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0106434, &(0x7f0000000180)={0x4, 0x0, 0x1, 0x80000001}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40086439, &(0x7f00000001c0)={0xffffffffffffffe1, r5}) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb5648") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:49 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() r6 = dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000400)={r5, 0x7fffffff, 0x1, [0x7fffffff]}, &(0x7f0000000580)=0xa) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:50 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) mknod(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:50 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r3}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r1, r1, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000400)=0x5) r4 = dup2(r2, r1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r4, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:50 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000400)=0x1, 0x4) recvfrom(r2, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x403, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(r0, 0x1000, &(0x7f0000000180)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/03/30 11:55:50 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:50 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r3}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r1, r1, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000400)=0x5) r4 = dup2(r2, r1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r4, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:50 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$VT_DISALLOCATE(r0, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r3}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r1, r1, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000400)=0x5) r4 = dup2(r2, r1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r4, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) write(0xffffffffffffffff, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r0, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:50 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000000580), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000400)=0x7df6be4ebb83051) 2018/03/30 11:55:50 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0xa2481, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:50 executing program 7: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x90000, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x9) r4 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r4, r4, &(0x7f0000000080), 0x102000004) sync() dup2(r5, r4) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r5, 0x4c01) write(r3, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r2, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:50 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x28, 0x1) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe333226b4a85a32b05c1e9bd5ea22d5d0fbd4", 0x32233caa5a6f5550) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:50 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSCTTY(r0, 0x540e, 0x9) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/03/30 11:55:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb5648") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:50 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$VT_DISALLOCATE(r0, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r3}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r1, r1, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000400)=0x5) r4 = dup2(r2, r1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r4, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) write(0xffffffffffffffff, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r0, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb5648") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:50 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) r1 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000200)={0x2, 0x1, {0x0, 0x3, 0x3, 0x3, 0x9}}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000280)={0x0, 0x13}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r2, 0x8}, 0x8) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000340)=""/49) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x2, 0xd0ce, 0x5, 0x8001, 0x4, 0x9, 0x3, 0x10000000000, 0x1b, 0x0, 0x5904, 0x5}) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:50 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0xfffffffffffffffc, 0x83) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) socket(0x8, 0x3, 0x26a2d3c5) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:50 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000400)=0x4) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:50 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:50 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000580)="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") pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0106434, &(0x7f0000000180)={0xdb65, 0x0, 0x0, 0x100000001}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40086437, &(0x7f00000001c0)={r2, 0x8}) restart_syscall() ioctl$TCXONC(r0, 0x540a, 0x1) 2018/03/30 11:55:50 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x400000, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) 2018/03/30 11:55:50 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$VT_DISALLOCATE(r0, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r3}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r1, r1, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000400)=0x5) r4 = dup2(r2, r1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r4, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) write(0xffffffffffffffff, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r0, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb564835") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:50 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) getuid() recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:50 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:50 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) r2 = perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r4 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x7f, 0x100000000) r5 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r2) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000580)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r4, r4, &(0x7f0000000080), 0x102000004) sync() r6 = dup2(r5, r4) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) ioctl$KVM_SMI(r6, 0xaeb7) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r5, 0x4c01) write(r3, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:50 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e23, @multicast2=0xe0000002}}, [0xffffffffffff8001, 0x1f, 0x5770, 0x0, 0x3426, 0x9, 0x6, 0x32, 0xffffffffffffb10e, 0x5b98e18b, 0x0, 0x0, 0x81, 0x6, 0x8]}, &(0x7f0000000400)=0x100) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB="44000000826de349"], &(0x7f00000006c0)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x800c, 0xf8, 0x2, r5}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:50 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:50 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r3) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(0xffffffffffffffff, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f0000000400)=""/7) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb564835") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:50 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:50 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000400)="aa", 0x1}], 0x20000166, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x10001, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000580)={0x8, 0x2, {0xffffffffffffffff, 0x3, 0x8, 0x2, 0x100000000}}) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:50 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000400)={0x77359400}, 0x8) dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0xc) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:50 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x9, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850025645d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x1, 0xbd97}) 2018/03/30 11:55:50 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$TCSETS(r0, 0x5402, &(0x7f00000001c0)={0xddc4, 0xffffffffffffff56, 0x4, 0x6, 0xffffffffffffffff, 0x8, 0x4, 0x7, 0x0, 0x0, 0x7, 0x1}) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000180)) socket$inet_icmp(0x2, 0x2, 0x1) 2018/03/30 11:55:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb564835") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:50 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) bind$ax25(r1, &(0x7f0000000400)={0x3, {"231861fc34a20f"}}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:50 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:50 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:50 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x6, 0x400) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:50 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) ioctl$KDGKBENT(r4, 0x4b46, &(0x7f0000000400)={0x5, 0x9, 0xfff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:50 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:50 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:50 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000400)) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:50 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) readv(r4, &(0x7f0000000400)=[{&(0x7f0000000580)=""/184, 0xb8}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r4, &(0x7f0000000640)="d87779a612687a668537643f5501143741154bd602fe338630008e5a32b05c1e9bd5ea2255d0fbd4", 0x103b1) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:50 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x9) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/03/30 11:55:50 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x80000001) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) socketpair(0x7, 0x0, 0x6, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$inet_int(r1, 0x0, 0x3f, &(0x7f0000001340)=0x6e48, 0x4) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000001300)={0x6, 0xdb2b, 0x3f}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r1, 0x0, 0x1000, 0xc8, &(0x7f00000001c0)="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", &(0x7f00000011c0)=""/200, 0xffff, 0x400}, 0x28) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:50 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) nanosleep(&(0x7f0000000100)={r2, r3+10000000}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r5 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r6 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r5) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000440)={'gretap4\x00', {0x2, 0x4e23, @multicast1=0xe0000001}}) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r5, r5, &(0x7f0000000080), 0x102000004) sync() r8 = dup2(r6, r5) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(r7, &(0x7f0000000600)="abcf2f17d4fcc76a66f2714358bd9ae79660a27f86c606bd65a11ead243bb8187bd13781f1bf7c7d29b497b46be94d5cf39585676a33edb12ed147d411284d2a0071a42357e2fac24f2d5060c4622b26e9523e172004f63912c73c8d675e2423dcec16b4b3214daba2d721298bf861ec3e22e5289eb0b9e598", 0x79) ioctl$TUNATTACHFILTER(r4, 0x400854d5, &(0x7f0000000580)={0x2, &(0x7f0000000400)=[{0x2, 0xfffffffffffffffb, 0xfffffffffffffffe}, {0xfffffffffffffffc, 0x4, 0x5, 0x6}]}) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r8, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x4c01) write(r4, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:51 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:51 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000280)={0x3f, 0x7, 0xb7, 0x0, "edd837eac8979ded899cb4c0a8ccb3548daadb5e2a4a68aace35faba957e5ab9fe37e2de0ee06aafbbb3abd0", 0x1000}) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000400)=0xb53) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1, 0x100000001}, &(0x7f0000000380)=0x88) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x102, r5}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000580)) openat$cgroup_ro(r2, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:51 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:51 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000180)={@remote, @local}, &(0x7f00000001c0)=0x8) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/03/30 11:55:51 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:51 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x1, 0x4403) getsockname$unix(r1, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:51 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:51 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:51 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) socket$rds(0x15, 0x5, 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r4, 0x5421, &(0x7f0000000580)) getsockopt$inet6_int(r1, 0x29, 0x7f, &(0x7f0000000000), &(0x7f0000000600)=0x4) 2018/03/30 11:55:51 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000400)='/dev/input/mice\x00', 0x0, 0x600000) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={r1, 0x0, 0x1, 0x1, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000540)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f00000003c0)='/dev/loop-control\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x9) r4 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r8, 0x40001) sendmsg(r7, &(0x7f00003f6000)={0x0, 0x0, &(0x7f0000f39fc0)=[{&(0x7f0000c44000)='2', 0x1}], 0x1}, 0x0) setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f0000e4effc)=0x4, 0x4) sendfile(r7, r8, &(0x7f000000a000), 0x2) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000480)=""/152, 0x98}], 0x1) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x8000000000004, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r4, r4, &(0x7f0000000080), 0x102000004) sync() dup2(r5, r4) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) 2018/03/30 11:55:51 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:51 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f0000000400)=0x3) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r0, r4, &(0x7f00000001c0), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:51 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000400)=0x1) 2018/03/30 11:55:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x10000) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/03/30 11:55:51 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") readv(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/115, 0x73}, {&(0x7f0000000240)=""/100, 0x64}, {&(0x7f00000002c0)=""/180, 0xb4}, {&(0x7f0000000380)=""/81, 0x51}, {&(0x7f0000000400)=""/191, 0xbf}, {&(0x7f00000004c0)=""/102, 0x66}], 0x6) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000700)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000740)={{{@in=@dev, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000000840)=0xe8) r4 = getgid() sendmmsg$unix(r1, &(0x7f00000008c0)=[{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000005c0)="d22a767070b48eda09c5a734a6a30b93728628d4b9d7dbf9c03e9f5f97334229eb63d6fbaf2c4900be134a93a20d52f5a9682445978481be89d0271c02f13d4c84f60f54159d", 0x46}, {&(0x7f0000000640)="f4baa1aadfae7a490f4229892951f43aee131bec30606d5c06053d9c322bd0593e58ea8eafefa3e6a319a7d20ea7b5b71dfccdf3ab033add6d28dcb547a81a195602a4a95ce8f98e5c58db22aada9014fec08841fc7cdbdd6107b4ff399e48c70dff8efeb821d20aae2a49e52eb300c31e32ca439b74575a4d", 0x79}], 0x2, &(0x7f0000000880)=[@rights={0x28, 0x1, 0x1, [r1, r1, r1, r1, r0, r0, r1]}, @cred={0x18, 0x1, 0x2, r2, r3, r4}], 0x40, 0x8000}], 0x1, 0x40) 2018/03/30 11:55:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x0, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:51 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r3, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:51 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x800001ff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/03/30 11:55:51 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/03/30 11:55:51 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x0, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) fremovexattr(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="757365002e2f65d100f7f965768a59c9af1451cd99c72f707bd05ff15eabf6f53b9b15d84cd40c834af17fc37e034013286404717d78bc16257c3c2fe478d239b96eda8210851a"]) ioctl$TCXONC(r0, 0x540a, 0x1) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x7, 0x40020000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000200)={0x47a, 0x1, {0x0, 0x2, 0x1, 0x3, 0x6}}) 2018/03/30 11:55:51 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r5, 0x400006}, &(0x7f0000000600)=0xfffffffffffffe69) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:51 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) r2 = perf_event_open(&(0x7f0000536000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2000000000000, 0xff, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x880000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r1, 0x0) r3 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r4 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000400)=0x1, 0x4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r4, r4, &(0x7f0000000080), 0x102000004) sync() r6 = dup2(r5, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x4c01) write(r3, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:51 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e23, @multicast2=0xe0000002}}, 0x8000, 0x8, 0x7, 0x1, 0x40}, &(0x7f0000000400)=0x98) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000640)={r5, 0x70000000000}, &(0x7f0000000680)=0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f00000006c0)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:51 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x9, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f00000001c0)={0xae49, 0x7, 0x5, 0x5}) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:51 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x0, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a76cb97c99b3ea51ebc432ef6a1dc34c6133aa16e7e89dca38a2220aa1cd95b66440e49f176988244b6c5df196d776d8dac7e400572f41825a6f364a7e250a7e70e67ef86eb1c98b277fb3d45e5b7b6e8ff62659ce50d95b8bf751df5a10b830fdf700ddaad60a696cf5525c2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:51 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21}, 0x10) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:51 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x620180) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000400)='/deter\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x80010, r1, 0x0) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x7, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:51 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$sock_ifreq(r2, 0x893c, &(0x7f0000000400)={'ipddp0\x00', @ifru_ivalue=0x81}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() r5 = dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0xfffffffffffffffe, 0x200000) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000640)="6370757365742e6d656d6f72795f7072657373757265004cda6373f4b44d3284bcd5c2e57b25267a60", 0x0, 0x0) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000005c0)={'bcsf0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="37000000d00100000400000000000000380d00000000000088100000fffffeff0400000001000000383e4a8b967b2c058dce915b62b4e48849c446cf0f7ffa864f72aeca0fd417390a33e797185e248f168656bf33752fe6e78c319ca8f3ef836e9179c4f77c11868c2f9b22324cc1df514fcc3f2c515bc551de07efc34baa7114cae0711bc37a7eccb382e770ed70076c5b7febc3e3"]}) 2018/03/30 11:55:51 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000700)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x8800) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000400)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f00000005c0)={{0x3e5e, 0x0, 0x7fff, 0xfff, "b5f36571469c7b23c05497053419d48553c931f07afb5f528db2ee41e36428c0adb3515f20224901e39b65dc", 0x400}, 0x0, 0x0, 0x351f, r5, 0x2, 0xf189033, "f7b11fa2b22d47df5d22c55129f7ce82b76fb3236027598c9c76c94e49e70fe1b67f3b21a5ada3aca1a7db981d86bbeeef65319cabb39f77eb9b37ed36c537f6", &(0x7f0000000580)='/dev/loop#\x00', 0xb, [], [0x2, 0xffff, 0x100000001, 0xb0]}) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:51 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x0, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:51 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) sync_file_range(r0, 0x3b, 0x3, 0x3) 2018/03/30 11:55:51 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:51 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:51 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x4e20, 0x807}, 0x1c) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000400), 0x4) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x9) r4 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r4, r4, &(0x7f0000000080), 0x102000004) sync() dup2(r5, r4) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r5, 0x4c01) 2018/03/30 11:55:51 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x101000, 0x0) r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:51 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000400)=0x5, 0x9, 0x2) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) r1 = syz_open_dev$admmidi(&(0x7f0000005f40)='/dev/admmidi#\x00', 0x8, 0x100) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="a1000000c3fda864b0e216641344cc9cbdd9089706dd97b8434df5a50513124bd59cfd7cbd55ec711ac0a91bcd1df4e2e1d98994526aaac2b04526eae3548a20e5f2052ad85386e2e8dc8912d98955992ff96f29397505242e21809a08d93459f7217781bed199ea94ce1d93c3814c0b6252cd9422495476b708838cf03380c8616d08fab1e4a5c48d3b77a0bb163c8dd08e97a04eb3d4c2d9c234fb1f67295778ed6ea99d6b1485b14e49561c69a5defeb168505e14f9170000000000000000000000"], &(0x7f0000006040)=0xa9) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000006080)={0x101, 0x4, 0xd5f, 0x2644, 0x0}, &(0x7f00000060c0)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000006100)={r2, 0x6703, 0xfff, 0x1, 0x5, 0x2, 0x7fff, 0x1, {r3, @in={{0x2, 0x4e24, @loopback=0x7f000001}}, 0x8, 0x7ff, 0x9, 0x2}}, &(0x7f00000061c0)=0xb0) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/03/30 11:55:51 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:51 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:51 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000400)=0x404, 0x4) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:51 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x800, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000001c0)={@rand_addr, @rand_addr, 0x0}, &(0x7f0000000200)=0xc) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000240)={@remote={0xfe, 0x80, [], 0xbb}, r2}, 0x14) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:51 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) socket$inet(0x10, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x2, 0x0) mlock(&(0x7f000036d000/0x2000)=nil, 0x2000) mbind(&(0x7f0000024000/0xc00000)=nil, 0xc00000, 0x3, &(0x7f0000c28000)=0x800003f, 0xf0, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000580)="2f6472762f645b5d48a6a4be766761966db34557f1ddb4a15f61", 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) 2018/03/30 11:55:52 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:52 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:52 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000580)=[@textreal={0x8, &(0x7f0000000400)="f40f2021d1c8baa00066b80700000066ef0f093d070066b92c0a00000f32baa100b000ee0f7f6952f2660f001c", 0x2d}], 0x1, 0x70, &(0x7f00000005c0)=[@flags={0x3, 0x10000}, @efer={0x2, 0x400}], 0x2) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:52 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000580)={&(0x7f0000000400)='./file0\x00', r1}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:52 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x4, 0x2046, 0xffffffffffffff00, 0x4, 0x8, 0x4, 0x5, 0x9, 0x18, 0x8000, 0xeb, 0x40}) 2018/03/30 11:55:52 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000400)={0x25d, 0x5, 0x2, 0x24, 0x9, 0x7a4}) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:52 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000080)={0x8, 0x7, 0x7fff, 0xf5, 0x4}) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) 2018/03/30 11:55:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) getpeername$packet(0xffffffffffffff9c, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000700)=0x14) sendmsg(r1, &(0x7f0000000cc0)={&(0x7f0000000740)=@ll={0x11, 0xf8, r2, 0x1, 0x5, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xc}}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000007c0)="d0dcd56897cef01bffcf0f8c8c1ad1f73539db4c660f59e080d0de31e018d18cc7f7dc03949e3844e7ba2646b3396dd225ae612ed53a1b53e0ff6d321ffd1a47e1ba8fe28382a00794b887a71f3d9d65dc4c53c9cdc7477af0924c4084f1e3f51a4a16205a33198562845515e2dbae2cc1e6b3d8ceca822b6f5a1a7128beb637a61726c17c4aebd562f4e172d4c6a6", 0x8f}, {&(0x7f0000000880)="3b699e45d78b73c705b8a3cdccb612652b5b38adcfe3c09d806e4c6b78cf7ac798ca8fc71184adbe77e0d9b645006a3733b497979af544b9cd60f8b99a3040f2cf9fa51a68d2b308da464c3b0bae1bdd9289af2f6fed023468", 0x59}, {&(0x7f0000000900)="fc1710be2a0eb6204980a7e60466116c65a620f9711561c401f7a4558e7a3058a443f4621c0c537623ae387deb8d67afdb40ee93d0f7de8beaeb193860d63de1cc0da65ea6399da5aa98a26c33bfaaa793644ec681002c782981ca2721352f38a1febd299f57683c73", 0x69}, {&(0x7f0000000980)="d549a5833a26961cecc4b8c1f71e93eaf82b7a0a5628558014eb882fb204e194bce3a989fe038881ac63de8d9403b738dd845fdabf45f3bf7f23c9eba884e6b1a7df6ea112c0d3c055d98d3789056f2f046015af550fe2526761af8277a253", 0x5f}], 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x254, 0x10}, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) pwritev(r1, &(0x7f0000000600)=[{&(0x7f0000000180)="05cfbd987896b6a28f65a011e9fb19cb47a57b794e4bc974575d7c160ab68e8a56b7d8fa4ae3537a1ad56f980f39124c43fe26974b2951d8c11cfe2210f8c0656894d597fb3d5f5568bb9d551252fd59041c7aeba989e7ad3875dca297ad3aacab38b2c0bd9aadf9d9ce21621b64e78bde22355c35177b0a60e040a22844697870823b816e1e568943189bfc51bc3f466dbd97a959633e29269abfe1dc94ba77d9ec927096ab769cb17387088d4fb7a3f9838de8a08f1df3f534e6bf709d5a8a2aed0ca50e1e468b73796b0e138c81a67a12e3bbefc6aa2cfd9196d216b93b64db2d256a7176207422456475a6e967c58dbb9c9192", 0xf5}, {&(0x7f0000000280)="2d26f1e58e61d699de10e9fc5b0a19bdbcad3ee6c9363cdaa6a0c1a8ceff3fb2694b9ef6f18561067de2fea7a917f5eb008944706d82c3c85723e1e3d2c40eb52daa85a6243a47d0b558b209786f5c657ce2de7f5a6a8d5b3c741f9a657ecf6b6067ece067da9066cd153ade96a7c7ab68dffbed42e4d2639bedd0a1350e", 0x7e}, {&(0x7f0000000300)="c10c0c10611934c34e27a314c550d072461367cf0e944fd9b75ba118974b2bd16725ac776af1001047621429d7c51bdaa7d7baaa4e52e211cd5f1af9d0c31782426f2c1533a3e63b9b523c6596d4ac982b4438c0450a74c84a9d4b9de1e61409be8389d2f48ebcf9b8036cbb3df710792dce84c9727a9df67049747452b87ea0536d9cce3e6d49d8873617b6d37c7513ba85933be2e4c4fa0f764b2f12f6ab1d3c467445aabf1866af64e03a6488ee05d2a4765aeb20876d149833932c38905bd12a5eafa729d9255f066f14ee3b30e448da9b45506714076cc7942675dff7c3b18a3f6345643383600c32b813fb34", 0xef}, {&(0x7f0000000400)="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", 0xfa}, {&(0x7f0000000500)="8e9db371f070099a813eda2322b400b752ad9dbd98bdf9842b68713eac1a39ca22cd71c54736c994bac1ca819b379990fa", 0x31}, {&(0x7f0000000540)="f58f3da1e0686ae1d9b957c5aabc551e8b13e26cf46d62912a61e696b8e4400be726032add1a23bb6f4f4373a89a0c16a70e0af641145f297c8ea747e9865a321d6921f1a8655ad999bdd14ee96b2195ca5fdb937038632a48dbe56f1837d0a4c3fa4e897724c016657ca071db307bde115972dcb888190174e956aca9228071897edc284742cabf3f0f705ad403", 0x8e}, {&(0x7f0000000d00)="ac41afb15c1f4889ec709a64d7523bfbb91a87a511152ff9c24d7d84943aa460ea872eadc20e9ccc34bdb510568243ac7219e4cd409f6918d5c9d0777d1c7474e39e74a20e6b2110696386d7e6dcacdaf9e6361ac8b3e8ee3e045c1989a658804234f2a91a0b997c0a713f46715b7d9e9b23f7ddf26ddf20d1f0af26d4c0df156890d48e08f46fd7a96ddfcda5a18007a8cb7727d128f0c39e5c19f992ec563ad1f024cd8cd175d12eff02705519d60fdc031f02efb471187d435993604bd064ca9a0f428cd4", 0xc6}], 0x7, 0x0) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x7) 2018/03/30 11:55:52 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000400)={0x10, 0x4, 0x4}) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:52 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000640)='/dev/loop-control\x00', 0x400100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(r3, &(0x7f0000ffdffb), 0xffffffffffffff29) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) utimes(&(0x7f0000000400)='./file0\x00', &(0x7f00000005c0)={{r5, r6/1000+10000}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) 2018/03/30 11:55:52 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:52 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_DISALLOCATE(r1, 0x5608) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='cpuset.memory_pressure\x00', 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0xffffffff, 0xe9, r4}, &(0x7f0000000440)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x80081, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) r5 = dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write(r0, &(0x7f00000005c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e4a32b05c1e9bd5ea2255d0fbd4", 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:52 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x1) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:52 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x42003, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") prctl$setname(0xf, &(0x7f0000000200)='/dev/ptmx\x00') ioctl$TCXONC(r0, 0x540a, 0x2) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x1052c0, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000001c0)=0x8000, 0x4) ioctl$TCXONC(r0, 0x540a, 0x180002) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4008641a, &(0x7f0000000280)={0xa, &(0x7f0000000240)=[0x14, 0x101, 0x2, 0x81, 0x8000, 0x7b, 0x6c, 0x10000, 0x401, 0x40]}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0xc200, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:52 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") r1 = fcntl$dupfd(r0, 0x406, r0) accept4$alg(r1, 0x0, 0x0, 0x80800) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl(r1, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x0) clone(0x60000, &(0x7f00000001c0)="9f823f4a588f9e8140227897d125e07e3991aa4fc06ea9eedd88026411602f3654d8cf41cfd29b28416fb7adf72a7e596c3c3fed5dc2b2cf0ac23c98dd03f98b31371c1f145fc6e0217eb2373b9f3b1eea8c20d3025d1924e189b04d5b56928f0ebf036cf3762f4e9e0ec17d7a", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="aede86be05613e1e29857ad7c808b8da1790571480fc4cd8bcee4ad1556ebd1a44f8709e8ed2f3fee3e6126abdfda90e534215c93f2ff91bfeb401278e6b1458a1d902bed877f7f9d41d5ec2c5af3925546cbe3564099a0e26de2668e0079c") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x0, 0xbd97}) 2018/03/30 11:55:52 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r3, 0x5421, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:52 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) finit_module(r5, &(0x7f0000000400)='cpuset.memory_pressure\x00', 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f00001e0ffc)=0x3ff, 0x4) connect$inet6(r1, &(0x7f0000f03000)={0xa, 0x4e20, 0x800, @loopback={0x0, 0x1}}, 0x36) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/03/30 11:55:52 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000640), &(0x7f00000005c0)) perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) r3 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) ioctl$DRM_IOCTL_ADD_BUFS(r4, 0xc0186416, &(0x7f0000000580)={0x1, 0x0, 0x9, 0x6, 0x7, 0x4}) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x102000004) sync() dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) write(r2, &(0x7f00000003c0)="d87779a612687a668537643f550114374115d05fbd4d4bd602fe33864d008e5a32b05c1e9bd5ea2255d0fbd4", 0x2c) ioctl$int_in(r1, 0x5452, &(0x7f0000d6dff8)=0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/30 11:55:52 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x42002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000080)=[0x4f300000, 0xffffffffffffffff]) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl(0xffffffffffffffff, 0x1000, &(0x7f00000000c0)="e2da7ab4d2794715e80cf0287eaa7943c6feb27f28233a56185503e9ad893ae5dc7756730e76c45d55289dda6d5defa0a4970227350d46e7e276ca1f9485ebe2c41aa3bc2042e7f2a4d27ffb0a6fb5c0568899e326590b281532287fd850b9d845d2667282b3a477fd609a64e81bb5364e3660a144aaa87aac01b20ddb56483500") ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000001c0)=0x8, 0x4) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x100000000, 0xbd97}) [ 297.368477] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 398.512653] kworker/dying (21) used greatest stack depth: 14160 bytes left [ 492.512194] INFO: task syz-executor5:5081 blocked for more than 120 seconds. [ 492.519443] Not tainted 4.16.0-rc7+ #281 [ 492.524044] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 492.532036] syz-executor5 D23472 5081 4480 0x20020004 [ 492.537679] Call Trace: [ 492.540271] __schedule+0x8fb/0x1ec0 [ 492.544006] ? perf_trace_lock+0xd6/0x900 [ 492.548176] ? __sched_text_start+0x8/0x8 [ 492.552339] ? futex_wait_setup+0x22e/0x3d0 [ 492.556666] ? trace_hardirqs_off+0x10/0x10 [ 492.561003] ? trace_hardirqs_off+0x10/0x10 [ 492.565336] ? __lock_acquire+0x664/0x3e00 [ 492.569582] ? futex_wake+0x566/0x680 [ 492.573409] ? find_held_lock+0x35/0x1d0 [ 492.577491] schedule+0xf5/0x430 [ 492.580862] ? __mutex_lock+0xaa8/0x1a80 [ 492.584926] ? __schedule+0x1ec0/0x1ec0 [ 492.588913] ? lock_release+0xa40/0xa40 [ 492.592886] ? memset+0x31/0x40 [ 492.596165] ? do_raw_spin_trylock+0x190/0x190 [ 492.600755] ? debug_mutex_free_waiter+0x1b0/0x1b0 [ 492.605687] ? mutex_destroy+0x1d0/0x1d0 [ 492.609754] schedule_preempt_disabled+0x10/0x20 [ 492.614517] __mutex_lock+0xaad/0x1a80 [ 492.618402] ? trace_event_raw_event_lock+0x340/0x340 [ 492.623604] ? lo_ioctl+0x8b/0x1b70 [ 492.627242] ? mutex_lock_io_nested+0x1900/0x1900 [ 492.632098] ? do_futex+0x86f/0x22a0 [ 492.635813] ? trace_event_raw_event_lock+0x340/0x340 [ 492.641048] ? __fget+0x342/0x5b0 [ 492.644500] ? lock_downgrade+0x980/0x980 [ 492.648655] ? lock_release+0xa40/0xa40 [ 492.652632] ? __lock_is_held+0xb6/0x140 [ 492.656714] ? __fget+0x36b/0x5b0 [ 492.660176] ? iterate_fd+0x3f0/0x3f0 [ 492.663995] mutex_lock_nested+0x16/0x20 [ 492.668051] ? mutex_lock_nested+0x16/0x20 [ 492.672290] lo_ioctl+0x8b/0x1b70 [ 492.675740] ? __fget_light+0x2b2/0x3c0 [ 492.679722] lo_compat_ioctl+0xab/0x140 [ 492.683694] ? lo_ioctl+0x1b70/0x1b70 [ 492.687499] compat_blkdev_ioctl+0x3ae/0x1840 [ 492.692008] ? bfq_create_group_hierarchy+0x110/0x110 [ 492.697218] ? compat_SyS_get_robust_list+0x300/0x300 [ 492.702416] ? security_file_ioctl+0x89/0xb0 [ 492.706834] compat_SyS_ioctl+0x151/0x2a30 [ 492.711089] ? do_fast_syscall_32+0x156/0xf9f [ 492.715590] ? bfq_create_group_hierarchy+0x110/0x110 [ 492.720795] ? do_ioctl+0x60/0x60 [ 492.724248] do_fast_syscall_32+0x3ec/0xf9f [ 492.728588] ? do_int80_syscall_32+0x9c0/0x9c0 [ 492.733174] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 492.738726] ? syscall_return_slowpath+0x2ac/0x550 [ 492.744242] ? sysret32_from_system_call+0x5/0x3c [ 492.749105] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 492.753955] entry_SYSENTER_compat+0x70/0x7f [ 492.758373] RIP: 0023:0xf7fc8c99 [ 492.761729] RSP: 002b:00000000f77c409c EFLAGS: 00000286 ORIG_RAX: 0000000000000036 [ 492.769442] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000004c00 [ 492.776705] RDX: 0000000000000017 RSI: 0000000000000000 RDI: 0000000000000000 [ 492.783983] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 492.791253] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 492.798522] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 492.805802] [ 492.805802] Showing all locks held in the system: [ 492.812136] 2 locks held by khungtaskd/868: [ 492.816580] #0: (rcu_read_lock){....}, at: [<00000000f577b76c>] watchdog+0x1c5/0xd60 [ 492.824649] #1: (tasklist_lock){.+.+}, at: [<0000000024984ced>] debug_show_all_locks+0xd3/0x3d0 [ 492.833683] 1 lock held by rsyslogd/4309: [ 492.837855] #0: (&f->f_pos_lock){+.+.}, at: [<00000000bd9d76a5>] __fdget_pos+0x12b/0x190 [ 492.846277] 2 locks held by getty/4399: [ 492.850254] #0: (&tty->ldisc_sem){++++}, at: [<00000000a758c874>] ldsem_down_read+0x37/0x40 [ 492.858935] #1: (&ldata->atomic_read_lock){+.+.}, at: [<00000000ec13371b>] n_tty_read+0x2ef/0x1a40 [ 492.868233] 2 locks held by getty/4400: [ 492.872197] #0: (&tty->ldisc_sem){++++}, at: [<00000000a758c874>] ldsem_down_read+0x37/0x40 [ 492.880878] #1: (&ldata->atomic_read_lock){+.+.}, at: [<00000000ec13371b>] n_tty_read+0x2ef/0x1a40 [ 492.890162] 2 locks held by getty/4401: [ 492.894130] #0: (&tty->ldisc_sem){++++}, at: [<00000000a758c874>] ldsem_down_read+0x37/0x40 [ 492.902799] #1: (&ldata->atomic_read_lock){+.+.}, at: [<00000000ec13371b>] n_tty_read+0x2ef/0x1a40 [ 492.912103] 2 locks held by getty/4402: [ 492.916067] #0: (&tty->ldisc_sem){++++}, at: [<00000000a758c874>] ldsem_down_read+0x37/0x40 [ 492.924755] #1: (&ldata->atomic_read_lock){+.+.}, at: [<00000000ec13371b>] n_tty_read+0x2ef/0x1a40 [ 492.934043] 2 locks held by getty/4403: [ 492.938029] #0: (&tty->ldisc_sem){++++}, at: [<00000000a758c874>] ldsem_down_read+0x37/0x40 [ 492.946705] #1: (&ldata->atomic_read_lock){+.+.}, at: [<00000000ec13371b>] n_tty_read+0x2ef/0x1a40 [ 492.955993] 2 locks held by getty/4404: [ 492.959975] #0: (&tty->ldisc_sem){++++}, at: [<00000000a758c874>] ldsem_down_read+0x37/0x40 [ 492.968656] #1: (&ldata->atomic_read_lock){+.+.}, at: [<00000000ec13371b>] n_tty_read+0x2ef/0x1a40 [ 492.977943] 2 locks held by getty/4405: [ 492.981917] #0: (&tty->ldisc_sem){++++}, at: [<00000000a758c874>] ldsem_down_read+0x37/0x40 [ 492.990596] #1: (&ldata->atomic_read_lock){+.+.}, at: [<00000000ec13371b>] n_tty_read+0x2ef/0x1a40 [ 492.999958] 1 lock held by syz-executor5/5081: [ 493.004544] #0: (&lo->lo_ctl_mutex/1){+.+.}, at: [<00000000cdce1927>] lo_ioctl+0x8b/0x1b70 [ 493.013133] 1 lock held by syz-executor4/5078: [ 493.017721] #0: (&lo->lo_ctl_mutex/1){+.+.}, at: [<00000000cdce1927>] lo_ioctl+0x8b/0x1b70 [ 493.026323] 1 lock held by syz-executor4/5091: [ 493.030906] #0: (&lo->lo_ctl_mutex/1){+.+.}, at: [<00000000cdce1927>] lo_ioctl+0x8b/0x1b70 [ 493.039500] [ 493.041135] ============================================= [ 493.041135] [ 493.048183] NMI backtrace for cpu 1 [ 493.051828] CPU: 1 PID: 868 Comm: khungtaskd Not tainted 4.16.0-rc7+ #281 [ 493.058727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 493.068054] Call Trace: [ 493.070616] dump_stack+0x194/0x24d [ 493.074219] ? arch_local_irq_restore+0x53/0x53 [ 493.078860] ? debug_show_all_locks+0x2f3/0x3d0 [ 493.083505] ? nmi_cpu_backtrace+0x1be/0x210 [ 493.087889] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 493.092356] nmi_cpu_backtrace+0x1d2/0x210 [ 493.096578] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 493.101045] nmi_trigger_cpumask_backtrace+0x123/0x180 [ 493.106297] arch_trigger_cpumask_backtrace+0x14/0x20 [ 493.111466] watchdog+0x90c/0xd60 [ 493.114903] ? reset_hung_task_detector+0xa0/0xa0 [ 493.119717] ? complete+0x62/0x80 [ 493.123154] ? __schedule+0x1ec0/0x1ec0 [ 493.127099] ? do_wait_intr_irq+0x3e0/0x3e0 [ 493.131394] ? __lockdep_init_map+0xe4/0x650 [ 493.135776] ? do_raw_spin_trylock+0x190/0x190 [ 493.140330] ? lockdep_init_map+0x9/0x10 [ 493.144363] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 493.149441] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 493.154431] ? trace_hardirqs_on+0xd/0x10 [ 493.158562] ? __kthread_parkme+0x176/0x240 [ 493.162863] kthread+0x33c/0x400 [ 493.166204] ? reset_hung_task_detector+0xa0/0xa0 [ 493.171017] ? kthread_stop+0x7a0/0x7a0 [ 493.174966] ret_from_fork+0x3a/0x50 [ 493.178710] Sending NMI from CPU 1 to CPUs 0: [ 493.183218] NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0x6/0x10 [ 493.184204] Kernel panic - not syncing: hung_task: blocked tasks [ 493.197673] CPU: 1 PID: 868 Comm: khungtaskd Not tainted 4.16.0-rc7+ #281 [ 493.204571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 493.213900] Call Trace: [ 493.216468] dump_stack+0x194/0x24d [ 493.220073] ? arch_local_irq_restore+0x53/0x53 [ 493.224721] ? vsnprintf+0x1ed/0x1900 [ 493.228503] panic+0x1e4/0x41c [ 493.231679] ? refcount_error_report+0x214/0x214 [ 493.236419] ? nmi_trigger_cpumask_backtrace+0xf0/0x180 [ 493.241761] watchdog+0x91d/0xd60 [ 493.245199] ? reset_hung_task_detector+0xa0/0xa0 [ 493.250013] ? complete+0x62/0x80 [ 493.253448] ? __schedule+0x1ec0/0x1ec0 [ 493.257392] ? do_wait_intr_irq+0x3e0/0x3e0 [ 493.261703] ? __lockdep_init_map+0xe4/0x650 [ 493.266088] ? do_raw_spin_trylock+0x190/0x190 [ 493.270642] ? lockdep_init_map+0x9/0x10 [ 493.274677] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 493.279755] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 493.284744] ? trace_hardirqs_on+0xd/0x10 [ 493.288867] ? __kthread_parkme+0x176/0x240 [ 493.293176] kthread+0x33c/0x400 [ 493.296517] ? reset_hung_task_detector+0xa0/0xa0 [ 493.301329] ? kthread_stop+0x7a0/0x7a0 [ 493.305280] ret_from_fork+0x3a/0x50 [ 493.309559] Dumping ftrace buffer: [ 493.313170] (ftrace buffer empty) [ 493.316858] Kernel Offset: disabled [ 493.320474] Rebooting in 86400 seconds..