, 0x2, 0x0, 0x0, 0x40000}, 0xc051) getsockopt$inet_tcp_buf(r4, 0x6, 0xd, &(0x7f0000001300)=""/73, &(0x7f0000001280)=0x49) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000001180)) 2018/04/21 01:40:38 executing program 4: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0xb37a, 0x5, 0x0, 0xffffffffffffff01}, {0x7, 0x0, 0xfff, 0xf9f}, {0x200, 0xfffffffffffffffc, 0x10001, 0x5ac}, {0xb3, 0x8, 0x1}]}, 0x10) r1 = socket(0x18, 0x0, 0x1) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000004fc4)=[{{&(0x7f0000003000)=@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x80, &(0x7f0000004fa0)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000002d30)}}], 0x1, 0x0) connect(r1, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) sendmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000003040), 0x0, 0x80000000}}, {{&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @host=0x2}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000001380)="9c", 0x1}], 0x1, &(0x7f0000001440)}}], 0x2, 0x0) 2018/04/21 01:40:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000001200)='./bus\x00', 0x0, 0x10) fallocate(r0, 0x0, 0xffff, 0x2) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x7, 0x11, r1, 0x0) fallocate(r0, 0x1, 0x0, 0x4000003) keyctl$session_to_parent(0x12) write$rdma_cm(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c000000080000fa"], 0x8) madvise(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x200000009) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xcf, &(0x7f0000000040), 0xfe91) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xf9c, 0x40) syz_open_dev$binder(&(0x7f0000001800)='/dev/binder#\x00', 0x0, 0x2) r5 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000140)="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", 0x1000, 0xffffffffffffffff) r6 = request_key(&(0x7f0000001140)='encrypted\x00', &(0x7f0000001240)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000012c0)="0000b7b286b1e60000", 0xfffffffffffffffe) keyctl$link(0x8, r5, r6) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)={0x3ff, 0x0, 0x10000, 0xffff}) write$cgroup_int(r3, &(0x7f00000011c0)={[0x38, 0x3f, 0x0, 0x37, 0x3f, 0x37]}, 0x6) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) sendmsg$inet_sctp(r4, &(0x7f00000017c0)={&(0x7f0000001380)=@in6={0xa, 0x4e23, 0x1, @empty, 0x3}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000013c0)="46a92cb8ac5e7880f0421750303caaa46981987da1cbf4ca8922b3fbc3035302da3a35a3e556ae24674aa66663ea8c25d5c0b000322dc6c94e6d24fb47b913cd9a9b923725ede31c5e984e8bd9f99fb7d94e9b4c11701f", 0x57}, {&(0x7f0000001640)="92f69f44f091026c318cb0b4b27fb5b72130400959898bcf447bbef125f53aed9e56f6807e42614c81eb3f46d84c0808080ce3c3a7c34183d004a09995850612f7adea6bc3162d31ad7a369cd0655e1df160352b09d20b19d4495df1270620d5fcf591d7b3", 0x65}], 0x2, 0x0, 0x0, 0x40000}, 0xc051) getsockopt$inet_tcp_buf(r4, 0x6, 0xd, &(0x7f0000001300)=""/73, &(0x7f0000001280)=0x49) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000001180)) 2018/04/21 01:40:39 executing program 0: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0xb37a, 0x5, 0x0, 0xffffffffffffff01}, {0x7, 0x0, 0xfff, 0xf9f}, {0x200, 0xfffffffffffffffc, 0x10001, 0x5ac}, {0xb3, 0x8, 0x1}]}, 0x10) r1 = socket(0x18, 0x0, 0x1) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000004fc4)=[{{&(0x7f0000003000)=@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x80, &(0x7f0000004fa0)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000002d30)}}], 0x1, 0x0) connect(r1, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) sendmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000003040), 0x0, 0x80000000}}, {{&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @host=0x2}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000001380)="9c", 0x1}], 0x1, &(0x7f0000001440)}}], 0x2, 0x0) 2018/04/21 01:40:39 executing program 6: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'bridge0\x00'}}, 0x1e) sendmsg(r0, &(0x7f00000002c0)={&(0x7f00000000c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000480)}, 0x0) 2018/04/21 01:40:39 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000019c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes-fixed-time)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) 2018/04/21 01:40:39 executing program 7: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f2, &(0x7f0000000040)={"65716c0021d7ff06c4e75b00", &(0x7f0000000040)=ANY=[]}) 2018/04/21 01:40:39 executing program 4: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0xb37a, 0x5, 0x0, 0xffffffffffffff01}, {0x7, 0x0, 0xfff, 0xf9f}, {0x200, 0xfffffffffffffffc, 0x10001, 0x5ac}, {0xb3, 0x8, 0x1}]}, 0x10) r1 = socket(0x18, 0x0, 0x1) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000004fc4)=[{{&(0x7f0000003000)=@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x80, &(0x7f0000004fa0)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000002d30)}}], 0x1, 0x0) connect(r1, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) sendmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000003040), 0x0, 0x80000000}}, {{&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @host=0x2}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000001380)="9c", 0x1}], 0x1, &(0x7f0000001440)}}], 0x2, 0x0) 2018/04/21 01:40:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000001200)='./bus\x00', 0x0, 0x10) fallocate(r0, 0x0, 0xffff, 0x2) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x7, 0x11, r1, 0x0) fallocate(r0, 0x1, 0x0, 0x4000003) keyctl$session_to_parent(0x12) write$rdma_cm(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c000000080000fa"], 0x8) madvise(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x200000009) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xcf, &(0x7f0000000040), 0xfe91) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xf9c, 0x40) syz_open_dev$binder(&(0x7f0000001800)='/dev/binder#\x00', 0x0, 0x2) r5 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000140)="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", 0x1000, 0xffffffffffffffff) r6 = request_key(&(0x7f0000001140)='encrypted\x00', &(0x7f0000001240)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000012c0)="0000b7b286b1e60000", 0xfffffffffffffffe) keyctl$link(0x8, r5, r6) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)={0x3ff, 0x0, 0x10000, 0xffff}) write$cgroup_int(r3, &(0x7f00000011c0)={[0x38, 0x3f, 0x0, 0x37, 0x3f, 0x37]}, 0x6) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) sendmsg$inet_sctp(r4, &(0x7f00000017c0)={&(0x7f0000001380)=@in6={0xa, 0x4e23, 0x1, @empty, 0x3}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000013c0)="46a92cb8ac5e7880f0421750303caaa46981987da1cbf4ca8922b3fbc3035302da3a35a3e556ae24674aa66663ea8c25d5c0b000322dc6c94e6d24fb47b913cd9a9b923725ede31c5e984e8bd9f99fb7d94e9b4c11701f", 0x57}, {&(0x7f0000001640)="92f69f44f091026c318cb0b4b27fb5b72130400959898bcf447bbef125f53aed9e56f6807e42614c81eb3f46d84c0808080ce3c3a7c34183d004a09995850612f7adea6bc3162d31ad7a369cd0655e1df160352b09d20b19d4495df1270620d5fcf591d7b3", 0x65}], 0x2, 0x0, 0x0, 0x40000}, 0xc051) getsockopt$inet_tcp_buf(r4, 0x6, 0xd, &(0x7f0000001300)=""/73, &(0x7f0000001280)=0x49) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000001180)) 2018/04/21 01:40:39 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) ppoll(&(0x7f00000003c0)=[{r0}], 0x1, &(0x7f0000000440)={0x0, r1+10000000}, &(0x7f0000000480), 0x8) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000039000)=0x8, 0x4) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000000)=0x5, 0x4) syz_emit_ethernet(0x6e, &(0x7f000010ef70)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, [], "f601929f106531aa"}}}}}}}, 0x0) 2018/04/21 01:40:39 executing program 0: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0xb37a, 0x5, 0x0, 0xffffffffffffff01}, {0x7, 0x0, 0xfff, 0xf9f}, {0x200, 0xfffffffffffffffc, 0x10001, 0x5ac}, {0xb3, 0x8, 0x1}]}, 0x10) r1 = socket(0x18, 0x0, 0x1) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000004fc4)=[{{&(0x7f0000003000)=@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x80, &(0x7f0000004fa0)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000002d30)}}], 0x1, 0x0) connect(r1, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) sendmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000003040), 0x0, 0x80000000}}, {{&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @host=0x2}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000001380)="9c", 0x1}], 0x1, &(0x7f0000001440)}}], 0x2, 0x0) 2018/04/21 01:40:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000001200)='./bus\x00', 0x0, 0x10) fallocate(r0, 0x0, 0xffff, 0x2) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x7, 0x11, r1, 0x0) fallocate(r0, 0x1, 0x0, 0x4000003) keyctl$session_to_parent(0x12) write$rdma_cm(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c000000080000fa"], 0x8) madvise(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x200000009) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xcf, &(0x7f0000000040), 0xfe91) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xf9c, 0x40) syz_open_dev$binder(&(0x7f0000001800)='/dev/binder#\x00', 0x0, 0x2) r5 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000140)="779ac32cce923bc01f5a51109e4fe74c2712abd4842017e072788c9264f4304e16a26da2448136fac065c4aac7c4a032744379ee8de74561108b6037dfc4b2a33c5f67ac7422dd2d297876972203e77ecfd3adf99b338f00a6e6431724ae4648cbccc85cc2e567a8d37116a70e067a4052d741ed4bc8c563c1b0b69ab25233805741e214ac3f93f68902a98931d35ec3a8ff5f63491e180fad561d1f2082b560c432709edc2dc48d1b1c8682441e569bc9434a07bd3836207dbd8f0937829b764a13de0e58512de8c739f735870414f38aa9830b1789938113c1f78195c54ceb2f5a68fd6e8f2962d2be7d7f44198b200ef359496d2d5fea169835a099bc59e39fd0df55ac9bd914adb7de5afd458b559dcfd9ca60252be2b9fbadcb40e03f8bda692d53a29c4e14e47fc4289e80618566341bef0de8b14797ea71223d2ba8f4b76986a4399893adbca9be65db22ae01b81bc67820945a22fa5e7d13cb67adafe4db3726dc594b80c689792b38e28b94df76edbdc3664d25d5e909358a6e399c7e347792ae037c254d99b519c70b3bf60e250ad383ff3802744b3677dee0203475b183d77e933a66bd2bd79163d969d570ec23fda89ecafa045a8fcf292c7b4451a8e3c9ab444c64c476c3fa179e267f54d46a59115e48ed8128cfa86880d6404f390259b1bad4573301eae745ce15d67466ebeeea07284a181ad8f0c0c07475bd1d44f3b380a0bcd958d841edd9e626d4fefe78e50e0a4af61c01180e2b266c6c438fe27e4ae8c99c0c9290002ddb0eace6058c2f0162a2a98d56025bab9580b1929286622976a6a2861f95eb092c81fb87937be43729d2e068dc199ec623269c7b48950a5c54797d4b6f1c62b3b3d5c190afbb47f339bdf9531bdd1f6830a1364d19313efa610d8b9993d0fa2aa0aedff7220479f4648cb0add194dd7aaf785575d27ff5612d617aebe2587ac55ef00722ab1e0a0d94e04c0143fc3fa92134a23849e5e30f479e6c1a029dd6a46ccd1b92952e9270a70d157b11754c4b1f7ec136e81698a555d2f02bb1007bc7437e40ae9d4b78caca82ae51200a6afa2fd908e405c81bae9543679f9c1c0f165b3db90725012ceaa11d7a69610fc488503139b30d56c913f7d283ed51881d221fb016f04fa76b11ccfb8b938d28564d180a6814e4741c58643461260d9b1be6cca4740adcffb4c1148d3ed826b85244edcb51dbdc4016be4bd68abfc2d95e291bc1f67545a8ba363e0e742a17affda13f8e3eeee4525895081d3dbd7bba5e81ee96d6523c2719f042f8f8fcbcd0fba31f5817669c5c9d0da121366e12acb78c7c67941ceef2134f8328c0f8feaec0287443cb3f488778558e5b69c52c7bdfcb3e01ab8ff50d4b30351c8775508c0c0f40ea02932544310e95f5a7cb94d98188412da3cb0a6c16d0a7c91d27a290e09cfbb92fc4851bdfb23088ad86e383e4d4d09fc62be2ad67e6a9999ef76ec6488a5bace69cd1d045784f66933d6379aeeb08a405a30c1eb5110178fb5296ba09f3636ee9184a0162406900fc757bd2f76b238d705402ce7b44a37c4f3916cd5b8f5c89c2b8fd9080547eeee5161a1491396bc2ca5053c24e200841f28bd8d104859688058557c3f3a300da1a07ba18dcd8b0eb74447b1353ba38b2ab94bfd766f4029f2968d99e519096e47e1792a8da28241bdfaae18194c7e082891288b173dbb218e3dcb1f94e68c900742f15616174fd36d37afa8f7bb11387ae84a34ce40f6c754ec5c03407ac3ec1b61b454bb7adbe20e225989f38969a45a278607253300097a3754a00cd433221b5ff7f1c553e8c02dbdae3902973927d89f182232d060872d80f11c5bdae8415b4a194456ab558763f7ccb6341ed8664e1a5b3b0c4ce69c9dbeebaa4c40ae4f1a4ac5311814c71a41c8664c2cb2cc217521d80e6cd26452c72761c1e7d11880a1bec5526e4b7cd1591e8b92a7a2171f8574726df9de26aa475d7a71cd546f38b2f4413f5f42435ac79542dc3d5c09e8b6ea7301165f5e2180058b8976cb7ef99d8b930dbbe329976a905678d60651ed4bda5cfe4edc7f476f6bcebf83fdf9d6a424cece6db8e9ca88d28846c2f8d773e2a8bde1203a1023b25b7cd532583cf5145293f01cdd3a643c78becda244aa536bd72eb41eed706d5877f8235acdab7d1b4b52518fed09794b392685e50506cf31ab3ae4045ca81574123615ce6b7cefb43b56c61ee6c07b401ce1d5df5f2cb0c8a052ea155aba05a0a65c0fd71d6e22e2f767e343806fb0d95e55ad1756bd40118463d33ad7c05a169a2a14374fbb4709d35a165ba9ec60c585423840427aa27018ab29eb03f64b3b263b8ffa2c9870536bbc1d4caa5866f4881f65c2ed6beeedec5fe1ce957921fc5c3558f033ec09b01e97a277d8983536d032734dc0f343ed2ef878b6b1abc5b2fa795e7e1df5404ebd7ba611e5889bec64a7e3918472190f51a1df16b7117a22ee5ec780f2f679146e5a3bbebb38c7680a0cb200d5e367be50501a5f6d072cfaba02a3d6bba2f244d4f1bc66912f2e580680016fd8d5d41e33c6798f3b1e87a70658bb6c71951e0222f1410b4420055d23cb3dc0ef93f7c80e60151715ae25679c202250a33b48127cf50e64e13cc837fa304f9930c1c85a790e8d164389d9f82dfe52715a88d8901986392723a7ee17b4d33cab707783e612058ce6bc2109f1b6919e032893c5fc896cf1d5308b6a3307dc7f9ec292e68aae96c85a2346e615d0326ba6713c8639a31d77f695afcafa52a8621bbc65612b882cf484ec2b5f5c98a21a545641a4f2b28156b4338304e43e8d10f0853d8ab4b11b6574388fdff956d67547f0bd350d5090f1115a11e91f65ba8c238aebbd63977f609b1cdcc8dcf383837d8fcf70e3415e0bfd88f471cd4122e8aa3898eecca1d34088d5d88e8a16b6040f59af79f8dd0234227905a76a3f5d1ba433e587c6c014118b1b67d250da090d960dd4b84a6bfe8cf24179eaae1659d276faf6a71f413103ebd54e8530202d9b1d44addd13bcca8e7a1fccd5132ea3e3578819ba73dafd8a85df492c005dda919828602bcf3ce81463b7276126d38c70fd3fd96c764f73824c9f463c108f17a39d0cf585ede281ea48b9e410346b8d49c253c14e1a9d86585fb6ffc6651476efa1c7036f34859e789e615ce0e49ed0e26ccf08c1cd9dec6c6aba7ece2b2fce874d990590e670ce681fcc9f746818bca962b3efab215d326f869a8c0e3544ceaac01f949bcbfb49f749234213991f76d14470c3bcafebba14bd994ea76c369fa106af78e7ac4847f5261171b4f3320a57988162becb9abc28fb43f32885b906ee1eaabcf9f6210bd2ccb3d2cfdc6d8c19d379659308aa864de9f97e6494b0ba309e19ed3b8c10fd97a50af3a69bc0318d63e318cc10da2659b988a773eb6bda1054fca61bed752bf8cea5e4964fdb8bab713c20382a2f51ff2a11ec9f0d5705ed142877fbd96b4dd87379577e3640dea0d45ed55ffeec7fa83dd293ec3e32cdfe944b2c5167a0d6ad7bf7a5077b38512250195ae9713a028524cf7b4ea7762cd41b0085054b3a8fc1acf624b1c5f79f6d59e07f803f8d39288b56b2b5549a74531a9f4a194e4ec5290536657660ddb6da673570c023f8ffced364829ebc3b39cb379615c67f21427e4840ae32e5f9479036342a3da8b7adbc3db5e16b1bc9a7525855c6700f6c8bdd730d2d028e40453a68fa581091658196efa97cbfc36fe10999a2fa58d466a673c6de6b3bb5c79964693708a9ed5f61867d7d998dcd41d430d7135d0199231e48d2cf2001b338878e443a846cdbf186a7043688356048d921b955e46a9418ac4440a3fc8aa557397cd80acf973d0a7f29bdc20e879e53dbebf5823be90cb97ae9c80aa7b70ae2162586bdf5a03c553b5c8cb513b55555d9e95ab0451a16695e664c5c30922233f71a13e46d0b44cebcdc50e3224540edab2c6a4f666d72c17781e27f66f710d1d436b6dbdd64b6c4a724eff4fcca9ae7cd58a17a94a545c2619e203055672d8d2d969a4057d3645b9dbd38b70ec952a47095393bc510ae771fcd88dd2a5973c8730a0647f0e7cd41cc1277ff1b62575cfb154a0d96241bdb6ccaca21cd15cf3a41357a6d6f9a449e8b641d1585d76255789003d21ea4e2255497a7ef328cbfd7a96cb249c2289c554c099cd5e7b5caba16963901348a8dd7d4535ae6f664a2fc52bc9b1ee8fd151a66964dbf18813b5f97d796b5464ba83aa22434a1689a47dfd14fdf0e4e5cc3331324727f7e8322e4f27b223cc9d315585e0a02615b6390e0f14b257ae86f497868787828eb4df938110b428bd0366692a72045a86168861f9e7f8b4f9f5549f279a554866ba529eed07871d33d45058d72231c950c7802ec1a1d71fc5415ef4857966d9b7efced5a6138972f45a30df41d3aa35d68d4b0e201ca75b8cc04ade79fab144b828ee3f82b8d9950614f36927ad148dd758c400e27525abacdba1d0b9a403f5cc07950f90578db8033decb870cc3a4bb586bc0b9f5aed43e0fb76c9fe1924d995a4e565729f1c288b9d1952832cf16b9e875f61ff48f908121c5e01f7eb40cd7a6c9d493f5fc5f8577cd63cb9e2d64b8face58d4c3f10e9f6f23ab09c11f91ce3f35ec1c10b8533c0fe77fd18bf5f3927121cbba7346b5a6a9a5d4abff62309aa6bbbc6a12aaa109e58c87f5bca92c74a3909532a4e91612131d40e5cc54e254300fbc620b8401b738ac1eb4ec41a00c4d6687401467267773699a40ea0ed8204a61cddcc564ddb7167a8f3dbe93f2ae3da120d474752d042a9a71cac07e2dd592a9b25c1e7c09dc163ed61569822a8b32a350c82ee26976b51813ddb75ac645a800640d66c8dcff60038c7e99ca7084b3fdf67e9f9fb92363983a5934358ab374ab00315f2edaa95ebe2e8c5d7a6f67e2ce16c9613039c3608723613aaace222c4fc2e1353e9d26a53d914cea48e5c9ed660415c96069cf2fbc5bef2fab42ea806d23c174c7d32d3451590f91690ed45aff0d8588c3022564ac4cbbdb18cbdb484bebe240ac57ea21278da8ff5a5936ff49b81f26adc98a06faa6ee8bfa683505eef02d0a3bae5c6dcb57f30a01065aee87df9da1ea825003fbdf21e95eb12e9f605b89cb3693f04a88b1f84afc603393db52cf27eadfc6266fe2e7b636bcedec36d941efc700fd3a913d18eb06168f3e28c940db99bba92160315fcabe0886206c923130a0b596bbcaa595f0d3ffd2bdaaec7e2ae8c521054f5bd414f765ff81a14867a736cf0ed6618c5793e792f398359d11fbc4e796be0c95ce3771c5e1f6c6b64256fa80ab12a7299e32837833ae6c4dea438fe95ae0b2493b8d2995a6433e6f099ea4e09dadeb4368b2d4569b56412719604905e2d490e14a91def25922a15637875b4bbc06f9c47f8af1d2a4514e5bd071d12d79b011470c6d0c21fff0d3edae0b763331476ab6351be0b362f35eb3b42e08db0d8018d51902abdf3580daa3e045f516924783dd5b27ecf132505b1acec070ed3da62f34b16a7b8716ff40456579d8f4b552ae55af80d2ab607e71698e3af5d9241a8b86f96ddd6a569efa9ad4c4ed50e45530251da17aca45fcb7bca69867183900560b9f94d9044a448b87b1d2f8afebab947d1a680795a390b285ccdcc43ae9a9483c4cc5c1cd359d4a81ab8e0590fdd594220f4051fcf895478ee524b06135b32674e0f908c920341269b4b3107f596e6d30e2f60dbe599439acfea947c85425d83487ae3d97db46668", 0x1000, 0xffffffffffffffff) r6 = request_key(&(0x7f0000001140)='encrypted\x00', &(0x7f0000001240)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000012c0)="0000b7b286b1e60000", 0xfffffffffffffffe) keyctl$link(0x8, r5, r6) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)={0x3ff, 0x0, 0x10000, 0xffff}) write$cgroup_int(r3, &(0x7f00000011c0)={[0x38, 0x3f, 0x0, 0x37, 0x3f, 0x37]}, 0x6) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) sendmsg$inet_sctp(r4, &(0x7f00000017c0)={&(0x7f0000001380)=@in6={0xa, 0x4e23, 0x1, @empty, 0x3}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000013c0)="46a92cb8ac5e7880f0421750303caaa46981987da1cbf4ca8922b3fbc3035302da3a35a3e556ae24674aa66663ea8c25d5c0b000322dc6c94e6d24fb47b913cd9a9b923725ede31c5e984e8bd9f99fb7d94e9b4c11701f", 0x57}, {&(0x7f0000001640)="92f69f44f091026c318cb0b4b27fb5b72130400959898bcf447bbef125f53aed9e56f6807e42614c81eb3f46d84c0808080ce3c3a7c34183d004a09995850612f7adea6bc3162d31ad7a369cd0655e1df160352b09d20b19d4495df1270620d5fcf591d7b3", 0x65}], 0x2, 0x0, 0x0, 0x40000}, 0xc051) getsockopt$inet_tcp_buf(r4, 0x6, 0xd, &(0x7f0000001300)=""/73, &(0x7f0000001280)=0x49) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000001180)) 2018/04/21 01:40:39 executing program 6: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'bridge0\x00'}}, 0x1e) sendmsg(r0, &(0x7f00000002c0)={&(0x7f00000000c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000480)}, 0x0) 2018/04/21 01:40:39 executing program 7: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f2, &(0x7f0000000040)={"65716c0021d7ff06c4e75b00", &(0x7f0000000040)=ANY=[]}) 2018/04/21 01:40:39 executing program 4: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0xb37a, 0x5, 0x0, 0xffffffffffffff01}, {0x7, 0x0, 0xfff, 0xf9f}, {0x200, 0xfffffffffffffffc, 0x10001, 0x5ac}, {0xb3, 0x8, 0x1}]}, 0x10) r1 = socket(0x18, 0x0, 0x1) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000004fc4)=[{{&(0x7f0000003000)=@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x80, &(0x7f0000004fa0)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000002d30)}}], 0x1, 0x0) connect(r1, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) sendmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000003040), 0x0, 0x80000000}}, {{&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @host=0x2}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000001380)="9c", 0x1}], 0x1, &(0x7f0000001440)}}], 0x2, 0x0) 2018/04/21 01:40:39 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) 2018/04/21 01:40:39 executing program 0: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0xb37a, 0x5, 0x0, 0xffffffffffffff01}, {0x7, 0x0, 0xfff, 0xf9f}, {0x200, 0xfffffffffffffffc, 0x10001, 0x5ac}, {0xb3, 0x8, 0x1}]}, 0x10) r1 = socket(0x18, 0x0, 0x1) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000004fc4)=[{{&(0x7f0000003000)=@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x80, &(0x7f0000004fa0)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000002d30)}}], 0x1, 0x0) connect(r1, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) sendmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000003040), 0x0, 0x80000000}}, {{&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @host=0x2}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000001380)="9c", 0x1}], 0x1, &(0x7f0000001440)}}], 0x2, 0x0) 2018/04/21 01:40:39 executing program 6: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'bridge0\x00'}}, 0x1e) sendmsg(r0, &(0x7f00000002c0)={&(0x7f00000000c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000480)}, 0x0) 2018/04/21 01:40:39 executing program 7: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f2, &(0x7f0000000040)={"65716c0021d7ff06c4e75b00", &(0x7f0000000040)=ANY=[]}) 2018/04/21 01:40:39 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) 2018/04/21 01:40:39 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000080)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000700)=""/159, 0x9f}, 0x12040) 2018/04/21 01:40:39 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/21 01:40:39 executing program 6: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'bridge0\x00'}}, 0x1e) sendmsg(r0, &(0x7f00000002c0)={&(0x7f00000000c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000480)}, 0x0) 2018/04/21 01:40:39 executing program 0: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0/control/file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000024ff0)='./file0/control\x00', 0x0) symlink(&(0x7f0000c0e000)='./file0/file0\x00', &(0x7f0000640000)='./file0/control/file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x0, 0x0, 0x0, 0x0, {0x10}, [@IPVS_CMD_ATTR_DAEMON={0x4, 0x3}]}, 0x18}, 0x1}, 0x0) rmdir(&(0x7f0000000000)='./file0/control\x00') 2018/04/21 01:40:39 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000019c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes-fixed-time)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) 2018/04/21 01:40:39 executing program 3: syz_emit_ethernet(0x275, &(0x7f0000000280)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "a1965b", 0x23f, 0x3f, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[@hopopts={0x0, 0x2, [], [@ra={0x5, 0x2}, @jumbo={0xc2, 0x4}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1={0x0, 0x1}, @ra={0x5, 0x2}]}, @dstopts={0x0, 0x25, [], [@calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @generic={0x0, 0xb4, "52ddb7c56ae9c5b514b0c7aa0e1ad59be42e679d8a2cb8ea137b99698f31a0978e009da6408165278f291135f7e3087a58d92556051ee6b05cdebff22de258376da62050a3def63c041f9b1eef98d4b77ea23e111fda1d614df0c1bb11914ae7a6cc73e2434d467df67a776bb2eb168b4947e60970c04045df136ccd708baea9d3d1aff35d693383c7f8da912ae0c64e0f34cdf809332513e2133944668e3cf2a45fa64279f6d45674345ee417bcbc18477aa28a"}, @pad1={0x0, 0x1}, @enc_lim={0x4, 0x1, 0xc0}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x10}}, @jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x13}}]}, @dstopts={0x2b, 0x1, [], [@pad1={0x0, 0x1}, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x6}]}, @srh={0x0, 0xa, 0x4, 0x5, 0x39, 0x9, 0x200, [@mcast2={0xff, 0x2, [], 0x1}, @loopback={0x0, 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}]}, @fragment={0x6f, 0x0, 0x6, 0x1ff, 0x0, 0x8000, 0x67}, @hopopts={0x0, 0x3, [], [@ra={0x5, 0x2, 0xc21}, @jumbo={0xc2, 0x4, 0x7}, @pad1={0x0, 0x1}, @calipso={0x7, 0x10, {0x6, 0x2, 0x1, 0x8, [0x3]}}]}], @dccp={{0x4e24, 0x4e22, 0x4, 0x1, 0x8, 0x0, 0x0, 0xd, 0x100000001, "697eb8", 0x10001, "f4f64e"}, "cfb348012e5114b26cd414121c161827bb0f7f8d7b7698c91ba5e5ac3aec5ccf68525aaea86350216eccf51bc121e6bd0d6168226f190dc26053bfb9585b6c"}}}}}}, 0x0) 2018/04/21 01:40:40 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000080)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000700)=""/159, 0x9f}, 0x12040) 2018/04/21 01:40:40 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) 2018/04/21 01:40:40 executing program 7: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f2, &(0x7f0000000040)={"65716c0021d7ff06c4e75b00", &(0x7f0000000040)=ANY=[]}) 2018/04/21 01:40:40 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000019c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes-fixed-time)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) 2018/04/21 01:40:40 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write(r1, &(0x7f0000000300)='y', 0x1) recvmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)=""/47, 0x2f}], 0x1, &(0x7f00000001c0)=""/48, 0x30}, 0x0) 2018/04/21 01:40:40 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/21 01:40:40 executing program 3: syz_emit_ethernet(0x275, &(0x7f0000000280)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "a1965b", 0x23f, 0x3f, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[@hopopts={0x0, 0x2, [], [@ra={0x5, 0x2}, @jumbo={0xc2, 0x4}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1={0x0, 0x1}, @ra={0x5, 0x2}]}, @dstopts={0x0, 0x25, [], [@calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @generic={0x0, 0xb4, "52ddb7c56ae9c5b514b0c7aa0e1ad59be42e679d8a2cb8ea137b99698f31a0978e009da6408165278f291135f7e3087a58d92556051ee6b05cdebff22de258376da62050a3def63c041f9b1eef98d4b77ea23e111fda1d614df0c1bb11914ae7a6cc73e2434d467df67a776bb2eb168b4947e60970c04045df136ccd708baea9d3d1aff35d693383c7f8da912ae0c64e0f34cdf809332513e2133944668e3cf2a45fa64279f6d45674345ee417bcbc18477aa28a"}, @pad1={0x0, 0x1}, @enc_lim={0x4, 0x1, 0xc0}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x10}}, @jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x13}}]}, @dstopts={0x2b, 0x1, [], [@pad1={0x0, 0x1}, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x6}]}, @srh={0x0, 0xa, 0x4, 0x5, 0x39, 0x9, 0x200, [@mcast2={0xff, 0x2, [], 0x1}, @loopback={0x0, 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}]}, @fragment={0x6f, 0x0, 0x6, 0x1ff, 0x0, 0x8000, 0x67}, @hopopts={0x0, 0x3, [], [@ra={0x5, 0x2, 0xc21}, @jumbo={0xc2, 0x4, 0x7}, @pad1={0x0, 0x1}, @calipso={0x7, 0x10, {0x6, 0x2, 0x1, 0x8, [0x3]}}]}], @dccp={{0x4e24, 0x4e22, 0x4, 0x1, 0x8, 0x0, 0x0, 0xd, 0x100000001, "697eb8", 0x10001, "f4f64e"}, "cfb348012e5114b26cd414121c161827bb0f7f8d7b7698c91ba5e5ac3aec5ccf68525aaea86350216eccf51bc121e6bd0d6168226f190dc26053bfb9585b6c"}}}}}}, 0x0) 2018/04/21 01:40:40 executing program 0: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0/control/file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000024ff0)='./file0/control\x00', 0x0) symlink(&(0x7f0000c0e000)='./file0/file0\x00', &(0x7f0000640000)='./file0/control/file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x0, 0x0, 0x0, 0x0, {0x10}, [@IPVS_CMD_ATTR_DAEMON={0x4, 0x3}]}, 0x18}, 0x1}, 0x0) rmdir(&(0x7f0000000000)='./file0/control\x00') 2018/04/21 01:40:40 executing program 7: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0/control/file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000024ff0)='./file0/control\x00', 0x0) symlink(&(0x7f0000c0e000)='./file0/file0\x00', &(0x7f0000640000)='./file0/control/file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x0, 0x0, 0x0, 0x0, {0x10}, [@IPVS_CMD_ATTR_DAEMON={0x4, 0x3}]}, 0x18}, 0x1}, 0x0) rmdir(&(0x7f0000000000)='./file0/control\x00') 2018/04/21 01:40:40 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/21 01:40:40 executing program 3: syz_emit_ethernet(0x275, &(0x7f0000000280)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "a1965b", 0x23f, 0x3f, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[@hopopts={0x0, 0x2, [], [@ra={0x5, 0x2}, @jumbo={0xc2, 0x4}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1={0x0, 0x1}, @ra={0x5, 0x2}]}, @dstopts={0x0, 0x25, [], [@calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @generic={0x0, 0xb4, "52ddb7c56ae9c5b514b0c7aa0e1ad59be42e679d8a2cb8ea137b99698f31a0978e009da6408165278f291135f7e3087a58d92556051ee6b05cdebff22de258376da62050a3def63c041f9b1eef98d4b77ea23e111fda1d614df0c1bb11914ae7a6cc73e2434d467df67a776bb2eb168b4947e60970c04045df136ccd708baea9d3d1aff35d693383c7f8da912ae0c64e0f34cdf809332513e2133944668e3cf2a45fa64279f6d45674345ee417bcbc18477aa28a"}, @pad1={0x0, 0x1}, @enc_lim={0x4, 0x1, 0xc0}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x10}}, @jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x13}}]}, @dstopts={0x2b, 0x1, [], [@pad1={0x0, 0x1}, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x6}]}, @srh={0x0, 0xa, 0x4, 0x5, 0x39, 0x9, 0x200, [@mcast2={0xff, 0x2, [], 0x1}, @loopback={0x0, 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}]}, @fragment={0x6f, 0x0, 0x6, 0x1ff, 0x0, 0x8000, 0x67}, @hopopts={0x0, 0x3, [], [@ra={0x5, 0x2, 0xc21}, @jumbo={0xc2, 0x4, 0x7}, @pad1={0x0, 0x1}, @calipso={0x7, 0x10, {0x6, 0x2, 0x1, 0x8, [0x3]}}]}], @dccp={{0x4e24, 0x4e22, 0x4, 0x1, 0x8, 0x0, 0x0, 0xd, 0x100000001, "697eb8", 0x10001, "f4f64e"}, "cfb348012e5114b26cd414121c161827bb0f7f8d7b7698c91ba5e5ac3aec5ccf68525aaea86350216eccf51bc121e6bd0d6168226f190dc26053bfb9585b6c"}}}}}}, 0x0) 2018/04/21 01:40:40 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000080)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000700)=""/159, 0x9f}, 0x12040) 2018/04/21 01:40:40 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) 2018/04/21 01:40:40 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000019c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes-fixed-time)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) 2018/04/21 01:40:40 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000080)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000700)=""/159, 0x9f}, 0x12040) 2018/04/21 01:40:40 executing program 5: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0/control/file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000024ff0)='./file0/control\x00', 0x0) symlink(&(0x7f0000c0e000)='./file0/file0\x00', &(0x7f0000640000)='./file0/control/file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x0, 0x0, 0x0, 0x0, {0x10}, [@IPVS_CMD_ATTR_DAEMON={0x4, 0x3}]}, 0x18}, 0x1}, 0x0) rmdir(&(0x7f0000000000)='./file0/control\x00') 2018/04/21 01:40:40 executing program 3: syz_emit_ethernet(0x275, &(0x7f0000000280)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "a1965b", 0x23f, 0x3f, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[@hopopts={0x0, 0x2, [], [@ra={0x5, 0x2}, @jumbo={0xc2, 0x4}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1={0x0, 0x1}, @ra={0x5, 0x2}]}, @dstopts={0x0, 0x25, [], [@calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @generic={0x0, 0xb4, "52ddb7c56ae9c5b514b0c7aa0e1ad59be42e679d8a2cb8ea137b99698f31a0978e009da6408165278f291135f7e3087a58d92556051ee6b05cdebff22de258376da62050a3def63c041f9b1eef98d4b77ea23e111fda1d614df0c1bb11914ae7a6cc73e2434d467df67a776bb2eb168b4947e60970c04045df136ccd708baea9d3d1aff35d693383c7f8da912ae0c64e0f34cdf809332513e2133944668e3cf2a45fa64279f6d45674345ee417bcbc18477aa28a"}, @pad1={0x0, 0x1}, @enc_lim={0x4, 0x1, 0xc0}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x10}}, @jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x13}}]}, @dstopts={0x2b, 0x1, [], [@pad1={0x0, 0x1}, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x6}]}, @srh={0x0, 0xa, 0x4, 0x5, 0x39, 0x9, 0x200, [@mcast2={0xff, 0x2, [], 0x1}, @loopback={0x0, 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}]}, @fragment={0x6f, 0x0, 0x6, 0x1ff, 0x0, 0x8000, 0x67}, @hopopts={0x0, 0x3, [], [@ra={0x5, 0x2, 0xc21}, @jumbo={0xc2, 0x4, 0x7}, @pad1={0x0, 0x1}, @calipso={0x7, 0x10, {0x6, 0x2, 0x1, 0x8, [0x3]}}]}], @dccp={{0x4e24, 0x4e22, 0x4, 0x1, 0x8, 0x0, 0x0, 0xd, 0x100000001, "697eb8", 0x10001, "f4f64e"}, "cfb348012e5114b26cd414121c161827bb0f7f8d7b7698c91ba5e5ac3aec5ccf68525aaea86350216eccf51bc121e6bd0d6168226f190dc26053bfb9585b6c"}}}}}}, 0x0) 2018/04/21 01:40:40 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write(r1, &(0x7f0000000300)='y', 0x1) recvmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)=""/47, 0x2f}], 0x1, &(0x7f00000001c0)=""/48, 0x30}, 0x0) 2018/04/21 01:40:40 executing program 0: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0/control/file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000024ff0)='./file0/control\x00', 0x0) symlink(&(0x7f0000c0e000)='./file0/file0\x00', &(0x7f0000640000)='./file0/control/file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x0, 0x0, 0x0, 0x0, {0x10}, [@IPVS_CMD_ATTR_DAEMON={0x4, 0x3}]}, 0x18}, 0x1}, 0x0) rmdir(&(0x7f0000000000)='./file0/control\x00') 2018/04/21 01:40:40 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/21 01:40:40 executing program 7: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0/control/file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000024ff0)='./file0/control\x00', 0x0) symlink(&(0x7f0000c0e000)='./file0/file0\x00', &(0x7f0000640000)='./file0/control/file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x0, 0x0, 0x0, 0x0, {0x10}, [@IPVS_CMD_ATTR_DAEMON={0x4, 0x3}]}, 0x18}, 0x1}, 0x0) rmdir(&(0x7f0000000000)='./file0/control\x00') 2018/04/21 01:40:40 executing program 1: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff}) socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) bind$unix(r1, &(0x7f0000d77000)=@abs, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) 2018/04/21 01:40:40 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000140), 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000010000)={0x8004, 0x1d, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000240)='/dev/ion\x00', &(0x7f0000000280)='^{{\x00', &(0x7f00000002c0)='*ppp0-system()\x00', &(0x7f0000000300)='/posix_acl_access[selfkeyring-\x00', &(0x7f0000000340)='system\x00', &(0x7f0000000380)='/dev/ion\x00', &(0x7f00000003c0)='/dev/binder#\x00'], &(0x7f0000000540)=[&(0x7f0000000440)='\'\x00', &(0x7f0000000480)='/dev/binder#\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='/dev/ion\x00']) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in6={0xa, 0x4e21, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0xc9}, @in6={0xa, 0x4e24, 0xfff, @local={0xfe, 0x80, [], 0xaa}, 0x81}, @in={0x2, 0x4e20, @multicast1=0xe0000001}], 0x68) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x90001, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000080)="c9a09b54e75a96bf61", &(0x7f0000000100)="8b180622343e79f19bac5a8b629b9bafafda8d93e4881e4f6305badebddc742e79fd66889d6ed15aaef1daa073217f7ae4a2e831617edefdaa26453ead5e6819ee2e933ed5f41562188feee7741c3c8496a36c70ed8bb85c24ac05948075aa158c4f8e09f7c6d378180bdc8686ecacaa3bbea279a4c96d92375c45e3890b7365cfd8294b276349909f385c5ff7e47d3a6bfcd87e86150d5139f6cc716fed9031c04d1fa6eb704508d3d921370431efa73b0b204da1165ca0", 0x2}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000640), 0x4) 2018/04/21 01:40:40 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write(r1, &(0x7f0000000300)='y', 0x1) recvmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)=""/47, 0x2f}], 0x1, &(0x7f00000001c0)=""/48, 0x30}, 0x0) 2018/04/21 01:40:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001fd0)={0x44, 0x0, &(0x7f0000008f04)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000008fa8), &(0x7f0000004000)=[0x0, 0x0, 0x0, 0x30]}}], 0x0, 0x0, &(0x7f0000008fc7)}) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x14, 0x0, &(0x7f0000004000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000bf80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x222, 0x118, &(0x7f0000777000)=[@fd={0x66642a85}], &(0x7f000000b000)}}}], 0x0, 0x0, &(0x7f000053f000)}) 2018/04/21 01:40:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f0000000080)='./file0/"ile0\x00', 0x0) 2018/04/21 01:40:40 executing program 5: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0/control/file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000024ff0)='./file0/control\x00', 0x0) symlink(&(0x7f0000c0e000)='./file0/file0\x00', &(0x7f0000640000)='./file0/control/file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x0, 0x0, 0x0, 0x0, {0x10}, [@IPVS_CMD_ATTR_DAEMON={0x4, 0x3}]}, 0x18}, 0x1}, 0x0) rmdir(&(0x7f0000000000)='./file0/control\x00') 2018/04/21 01:40:40 executing program 7: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0/control/file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000024ff0)='./file0/control\x00', 0x0) symlink(&(0x7f0000c0e000)='./file0/file0\x00', &(0x7f0000640000)='./file0/control/file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x0, 0x0, 0x0, 0x0, {0x10}, [@IPVS_CMD_ATTR_DAEMON={0x4, 0x3}]}, 0x18}, 0x1}, 0x0) rmdir(&(0x7f0000000000)='./file0/control\x00') [ 163.842774] sock: process `syz-executor4' is using obsolete setsockopt SO_BSDCOMPAT [ 163.903426] binder: 12702:12710 ERROR: BC_REGISTER_LOOPER called without request [ 164.689570] binder: 12702:12710 got transaction with invalid fd, -1 [ 164.696111] binder: 12702:12710 transaction failed 29201/-9, size 546-280 line 3068 [ 164.703944] binder: send failed reply for transaction 25 to 12702:12720 [ 164.712707] binder_alloc: binder_alloc_mmap_handler: 12702 20000000-20002000 already mapped failed -16 [ 164.723651] binder: BINDER_SET_CONTEXT_MGR already set [ 164.723659] binder: 12702:12720 ERROR: BC_REGISTER_LOOPER called without request 2018/04/21 01:40:41 executing program 0: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0/control/file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000024ff0)='./file0/control\x00', 0x0) symlink(&(0x7f0000c0e000)='./file0/file0\x00', &(0x7f0000640000)='./file0/control/file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x0, 0x0, 0x0, 0x0, {0x10}, [@IPVS_CMD_ATTR_DAEMON={0x4, 0x3}]}, 0x18}, 0x1}, 0x0) rmdir(&(0x7f0000000000)='./file0/control\x00') 2018/04/21 01:40:41 executing program 1: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff}) socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) bind$unix(r1, &(0x7f0000d77000)=@abs, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) 2018/04/21 01:40:41 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write(r1, &(0x7f0000000300)='y', 0x1) recvmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)=""/47, 0x2f}], 0x1, &(0x7f00000001c0)=""/48, 0x30}, 0x0) 2018/04/21 01:40:41 executing program 5: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0/control/file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000024ff0)='./file0/control\x00', 0x0) symlink(&(0x7f0000c0e000)='./file0/file0\x00', &(0x7f0000640000)='./file0/control/file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x0, 0x0, 0x0, 0x0, {0x10}, [@IPVS_CMD_ATTR_DAEMON={0x4, 0x3}]}, 0x18}, 0x1}, 0x0) rmdir(&(0x7f0000000000)='./file0/control\x00') 2018/04/21 01:40:41 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f00001f9fe0)}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x80da14, 0x5, 0x20000000}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2018/04/21 01:40:41 executing program 7: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x200, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000000740)={[{@discard='discard', 0x2c}]}) 2018/04/21 01:40:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001fd0)={0x44, 0x0, &(0x7f0000008f04)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000008fa8), &(0x7f0000004000)=[0x0, 0x0, 0x0, 0x30]}}], 0x0, 0x0, &(0x7f0000008fc7)}) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x14, 0x0, &(0x7f0000004000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000bf80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x222, 0x118, &(0x7f0000777000)=[@fd={0x66642a85}], &(0x7f000000b000)}}}], 0x0, 0x0, &(0x7f000053f000)}) 2018/04/21 01:40:41 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000140), 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000010000)={0x8004, 0x1d, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000240)='/dev/ion\x00', &(0x7f0000000280)='^{{\x00', &(0x7f00000002c0)='*ppp0-system()\x00', &(0x7f0000000300)='/posix_acl_access[selfkeyring-\x00', &(0x7f0000000340)='system\x00', &(0x7f0000000380)='/dev/ion\x00', &(0x7f00000003c0)='/dev/binder#\x00'], &(0x7f0000000540)=[&(0x7f0000000440)='\'\x00', &(0x7f0000000480)='/dev/binder#\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='/dev/ion\x00']) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in6={0xa, 0x4e21, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0xc9}, @in6={0xa, 0x4e24, 0xfff, @local={0xfe, 0x80, [], 0xaa}, 0x81}, @in={0x2, 0x4e20, @multicast1=0xe0000001}], 0x68) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x90001, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000080)="c9a09b54e75a96bf61", &(0x7f0000000100)="8b180622343e79f19bac5a8b629b9bafafda8d93e4881e4f6305badebddc742e79fd66889d6ed15aaef1daa073217f7ae4a2e831617edefdaa26453ead5e6819ee2e933ed5f41562188feee7741c3c8496a36c70ed8bb85c24ac05948075aa158c4f8e09f7c6d378180bdc8686ecacaa3bbea279a4c96d92375c45e3890b7365cfd8294b276349909f385c5ff7e47d3a6bfcd87e86150d5139f6cc716fed9031c04d1fa6eb704508d3d921370431efa73b0b204da1165ca0", 0x2}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000640), 0x4) [ 164.728362] binder: 12702:12720 unknown command 76 [ 164.729005] binder: 12702:12710 ioctl 40046207 0 returned -16 [ 164.736602] binder: 12702:12720 ioctl c0306201 2000a000 returned -22 [ 164.741635] binder: 12702:12721 got reply transaction with no transaction stack [ 164.761393] binder: 12702:12721 transaction failed 29201/-71, size 546-280 line 2763 [ 164.779313] binder: undelivered TRANSACTION_ERROR: 29201 [ 164.811905] binder: undelivered TRANSACTION_ERROR: 29190 [ 164.817524] binder: undelivered TRANSACTION_COMPLETE [ 164.822806] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/21 01:40:41 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000140), 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000010000)={0x8004, 0x1d, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000240)='/dev/ion\x00', &(0x7f0000000280)='^{{\x00', &(0x7f00000002c0)='*ppp0-system()\x00', &(0x7f0000000300)='/posix_acl_access[selfkeyring-\x00', &(0x7f0000000340)='system\x00', &(0x7f0000000380)='/dev/ion\x00', &(0x7f00000003c0)='/dev/binder#\x00'], &(0x7f0000000540)=[&(0x7f0000000440)='\'\x00', &(0x7f0000000480)='/dev/binder#\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='/dev/ion\x00']) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in6={0xa, 0x4e21, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0xc9}, @in6={0xa, 0x4e24, 0xfff, @local={0xfe, 0x80, [], 0xaa}, 0x81}, @in={0x2, 0x4e20, @multicast1=0xe0000001}], 0x68) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x90001, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000080)="c9a09b54e75a96bf61", &(0x7f0000000100)="8b180622343e79f19bac5a8b629b9bafafda8d93e4881e4f6305badebddc742e79fd66889d6ed15aaef1daa073217f7ae4a2e831617edefdaa26453ead5e6819ee2e933ed5f41562188feee7741c3c8496a36c70ed8bb85c24ac05948075aa158c4f8e09f7c6d378180bdc8686ecacaa3bbea279a4c96d92375c45e3890b7365cfd8294b276349909f385c5ff7e47d3a6bfcd87e86150d5139f6cc716fed9031c04d1fa6eb704508d3d921370431efa73b0b204da1165ca0", 0x2}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000640), 0x4) 2018/04/21 01:40:41 executing program 1: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff}) socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) bind$unix(r1, &(0x7f0000d77000)=@abs, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) 2018/04/21 01:40:41 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f00001f9fe0)}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x80da14, 0x5, 0x20000000}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') [ 164.853325] attempt to access beyond end of device [ 164.858635] loop7: rw=4096, want=136, limit=1 [ 164.863215] gfs2: error 10 reading superblock [ 164.876089] binder: 12737:12739 ERROR: BC_REGISTER_LOOPER called without request 2018/04/21 01:40:41 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000140), 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000010000)={0x8004, 0x1d, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000240)='/dev/ion\x00', &(0x7f0000000280)='^{{\x00', &(0x7f00000002c0)='*ppp0-system()\x00', &(0x7f0000000300)='/posix_acl_access[selfkeyring-\x00', &(0x7f0000000340)='system\x00', &(0x7f0000000380)='/dev/ion\x00', &(0x7f00000003c0)='/dev/binder#\x00'], &(0x7f0000000540)=[&(0x7f0000000440)='\'\x00', &(0x7f0000000480)='/dev/binder#\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='/dev/ion\x00']) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in6={0xa, 0x4e21, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0xc9}, @in6={0xa, 0x4e24, 0xfff, @local={0xfe, 0x80, [], 0xaa}, 0x81}, @in={0x2, 0x4e20, @multicast1=0xe0000001}], 0x68) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x90001, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000080)="c9a09b54e75a96bf61", &(0x7f0000000100)="8b180622343e79f19bac5a8b629b9bafafda8d93e4881e4f6305badebddc742e79fd66889d6ed15aaef1daa073217f7ae4a2e831617edefdaa26453ead5e6819ee2e933ed5f41562188feee7741c3c8496a36c70ed8bb85c24ac05948075aa158c4f8e09f7c6d378180bdc8686ecacaa3bbea279a4c96d92375c45e3890b7365cfd8294b276349909f385c5ff7e47d3a6bfcd87e86150d5139f6cc716fed9031c04d1fa6eb704508d3d921370431efa73b0b204da1165ca0", 0x2}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000640), 0x4) [ 165.000174] sock: process `syz-executor6' is using obsolete setsockopt SO_BSDCOMPAT [ 165.026490] sock: process `syz-executor5' is using obsolete setsockopt SO_BSDCOMPAT 2018/04/21 01:40:42 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000140), 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000010000)={0x8004, 0x1d, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000240)='/dev/ion\x00', &(0x7f0000000280)='^{{\x00', &(0x7f00000002c0)='*ppp0-system()\x00', &(0x7f0000000300)='/posix_acl_access[selfkeyring-\x00', &(0x7f0000000340)='system\x00', &(0x7f0000000380)='/dev/ion\x00', &(0x7f00000003c0)='/dev/binder#\x00'], &(0x7f0000000540)=[&(0x7f0000000440)='\'\x00', &(0x7f0000000480)='/dev/binder#\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='/dev/ion\x00']) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in6={0xa, 0x4e21, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0xc9}, @in6={0xa, 0x4e24, 0xfff, @local={0xfe, 0x80, [], 0xaa}, 0x81}, @in={0x2, 0x4e20, @multicast1=0xe0000001}], 0x68) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x90001, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000080)="c9a09b54e75a96bf61", &(0x7f0000000100)="8b180622343e79f19bac5a8b629b9bafafda8d93e4881e4f6305badebddc742e79fd66889d6ed15aaef1daa073217f7ae4a2e831617edefdaa26453ead5e6819ee2e933ed5f41562188feee7741c3c8496a36c70ed8bb85c24ac05948075aa158c4f8e09f7c6d378180bdc8686ecacaa3bbea279a4c96d92375c45e3890b7365cfd8294b276349909f385c5ff7e47d3a6bfcd87e86150d5139f6cc716fed9031c04d1fa6eb704508d3d921370431efa73b0b204da1165ca0", 0x2}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000640), 0x4) 2018/04/21 01:40:42 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000140), 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000010000)={0x8004, 0x1d, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000240)='/dev/ion\x00', &(0x7f0000000280)='^{{\x00', &(0x7f00000002c0)='*ppp0-system()\x00', &(0x7f0000000300)='/posix_acl_access[selfkeyring-\x00', &(0x7f0000000340)='system\x00', &(0x7f0000000380)='/dev/ion\x00', &(0x7f00000003c0)='/dev/binder#\x00'], &(0x7f0000000540)=[&(0x7f0000000440)='\'\x00', &(0x7f0000000480)='/dev/binder#\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='/dev/ion\x00']) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in6={0xa, 0x4e21, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0xc9}, @in6={0xa, 0x4e24, 0xfff, @local={0xfe, 0x80, [], 0xaa}, 0x81}, @in={0x2, 0x4e20, @multicast1=0xe0000001}], 0x68) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x90001, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000080)="c9a09b54e75a96bf61", &(0x7f0000000100)="8b180622343e79f19bac5a8b629b9bafafda8d93e4881e4f6305badebddc742e79fd66889d6ed15aaef1daa073217f7ae4a2e831617edefdaa26453ead5e6819ee2e933ed5f41562188feee7741c3c8496a36c70ed8bb85c24ac05948075aa158c4f8e09f7c6d378180bdc8686ecacaa3bbea279a4c96d92375c45e3890b7365cfd8294b276349909f385c5ff7e47d3a6bfcd87e86150d5139f6cc716fed9031c04d1fa6eb704508d3d921370431efa73b0b204da1165ca0", 0x2}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000640), 0x4) 2018/04/21 01:40:42 executing program 7: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x200, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000000740)={[{@discard='discard', 0x2c}]}) 2018/04/21 01:40:42 executing program 1: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff}) socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) bind$unix(r1, &(0x7f0000d77000)=@abs, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) 2018/04/21 01:40:42 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f00001f9fe0)}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x80da14, 0x5, 0x20000000}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2018/04/21 01:40:42 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000140), 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000010000)={0x8004, 0x1d, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000240)='/dev/ion\x00', &(0x7f0000000280)='^{{\x00', &(0x7f00000002c0)='*ppp0-system()\x00', &(0x7f0000000300)='/posix_acl_access[selfkeyring-\x00', &(0x7f0000000340)='system\x00', &(0x7f0000000380)='/dev/ion\x00', &(0x7f00000003c0)='/dev/binder#\x00'], &(0x7f0000000540)=[&(0x7f0000000440)='\'\x00', &(0x7f0000000480)='/dev/binder#\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='/dev/ion\x00']) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in6={0xa, 0x4e21, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0xc9}, @in6={0xa, 0x4e24, 0xfff, @local={0xfe, 0x80, [], 0xaa}, 0x81}, @in={0x2, 0x4e20, @multicast1=0xe0000001}], 0x68) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x90001, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000080)="c9a09b54e75a96bf61", &(0x7f0000000100)="8b180622343e79f19bac5a8b629b9bafafda8d93e4881e4f6305badebddc742e79fd66889d6ed15aaef1daa073217f7ae4a2e831617edefdaa26453ead5e6819ee2e933ed5f41562188feee7741c3c8496a36c70ed8bb85c24ac05948075aa158c4f8e09f7c6d378180bdc8686ecacaa3bbea279a4c96d92375c45e3890b7365cfd8294b276349909f385c5ff7e47d3a6bfcd87e86150d5139f6cc716fed9031c04d1fa6eb704508d3d921370431efa73b0b204da1165ca0", 0x2}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000640), 0x4) 2018/04/21 01:40:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001fd0)={0x44, 0x0, &(0x7f0000008f04)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000008fa8), &(0x7f0000004000)=[0x0, 0x0, 0x0, 0x30]}}], 0x0, 0x0, &(0x7f0000008fc7)}) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x14, 0x0, &(0x7f0000004000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000bf80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x222, 0x118, &(0x7f0000777000)=[@fd={0x66642a85}], &(0x7f000000b000)}}}], 0x0, 0x0, &(0x7f000053f000)}) 2018/04/21 01:40:42 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000140), 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000010000)={0x8004, 0x1d, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000240)='/dev/ion\x00', &(0x7f0000000280)='^{{\x00', &(0x7f00000002c0)='*ppp0-system()\x00', &(0x7f0000000300)='/posix_acl_access[selfkeyring-\x00', &(0x7f0000000340)='system\x00', &(0x7f0000000380)='/dev/ion\x00', &(0x7f00000003c0)='/dev/binder#\x00'], &(0x7f0000000540)=[&(0x7f0000000440)='\'\x00', &(0x7f0000000480)='/dev/binder#\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='/dev/ion\x00']) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in6={0xa, 0x4e21, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0xc9}, @in6={0xa, 0x4e24, 0xfff, @local={0xfe, 0x80, [], 0xaa}, 0x81}, @in={0x2, 0x4e20, @multicast1=0xe0000001}], 0x68) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x90001, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000080)="c9a09b54e75a96bf61", &(0x7f0000000100)="8b180622343e79f19bac5a8b629b9bafafda8d93e4881e4f6305badebddc742e79fd66889d6ed15aaef1daa073217f7ae4a2e831617edefdaa26453ead5e6819ee2e933ed5f41562188feee7741c3c8496a36c70ed8bb85c24ac05948075aa158c4f8e09f7c6d378180bdc8686ecacaa3bbea279a4c96d92375c45e3890b7365cfd8294b276349909f385c5ff7e47d3a6bfcd87e86150d5139f6cc716fed9031c04d1fa6eb704508d3d921370431efa73b0b204da1165ca0", 0x2}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000640), 0x4) [ 165.648724] binder: 12737:12739 got transaction with invalid fd, -1 [ 165.655672] binder: 12737:12739 transaction failed 29201/-9, size 546-280 line 3068 [ 165.663574] binder: send failed reply for transaction 29 to 12737:12762 [ 165.680011] binder: undelivered TRANSACTION_ERROR: 29190 [ 165.685620] binder: undelivered TRANSACTION_COMPLETE [ 165.690780] binder: undelivered TRANSACTION_ERROR: 29201 [ 165.705762] sock: process `syz-executor0' is using obsolete setsockopt SO_BSDCOMPAT [ 165.710969] sock: process `syz-executor5' is using obsolete setsockopt SO_BSDCOMPAT [ 165.718163] sock: process `syz-executor6' is using obsolete setsockopt SO_BSDCOMPAT [ 165.744109] attempt to access beyond end of device [ 165.749202] loop7: rw=4096, want=136, limit=1 [ 165.753761] gfs2: error 10 reading superblock 2018/04/21 01:40:42 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000140), 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000010000)={0x8004, 0x1d, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000240)='/dev/ion\x00', &(0x7f0000000280)='^{{\x00', &(0x7f00000002c0)='*ppp0-system()\x00', &(0x7f0000000300)='/posix_acl_access[selfkeyring-\x00', &(0x7f0000000340)='system\x00', &(0x7f0000000380)='/dev/ion\x00', &(0x7f00000003c0)='/dev/binder#\x00'], &(0x7f0000000540)=[&(0x7f0000000440)='\'\x00', &(0x7f0000000480)='/dev/binder#\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='/dev/ion\x00']) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in6={0xa, 0x4e21, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0xc9}, @in6={0xa, 0x4e24, 0xfff, @local={0xfe, 0x80, [], 0xaa}, 0x81}, @in={0x2, 0x4e20, @multicast1=0xe0000001}], 0x68) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x90001, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000080)="c9a09b54e75a96bf61", &(0x7f0000000100)="8b180622343e79f19bac5a8b629b9bafafda8d93e4881e4f6305badebddc742e79fd66889d6ed15aaef1daa073217f7ae4a2e831617edefdaa26453ead5e6819ee2e933ed5f41562188feee7741c3c8496a36c70ed8bb85c24ac05948075aa158c4f8e09f7c6d378180bdc8686ecacaa3bbea279a4c96d92375c45e3890b7365cfd8294b276349909f385c5ff7e47d3a6bfcd87e86150d5139f6cc716fed9031c04d1fa6eb704508d3d921370431efa73b0b204da1165ca0", 0x2}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000640), 0x4) 2018/04/21 01:40:42 executing program 7: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x200, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000000740)={[{@discard='discard', 0x2c}]}) 2018/04/21 01:40:42 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000140), 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000010000)={0x8004, 0x1d, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000240)='/dev/ion\x00', &(0x7f0000000280)='^{{\x00', &(0x7f00000002c0)='*ppp0-system()\x00', &(0x7f0000000300)='/posix_acl_access[selfkeyring-\x00', &(0x7f0000000340)='system\x00', &(0x7f0000000380)='/dev/ion\x00', &(0x7f00000003c0)='/dev/binder#\x00'], &(0x7f0000000540)=[&(0x7f0000000440)='\'\x00', &(0x7f0000000480)='/dev/binder#\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='/dev/ion\x00']) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in6={0xa, 0x4e21, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0xc9}, @in6={0xa, 0x4e24, 0xfff, @local={0xfe, 0x80, [], 0xaa}, 0x81}, @in={0x2, 0x4e20, @multicast1=0xe0000001}], 0x68) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x90001, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000080)="c9a09b54e75a96bf61", &(0x7f0000000100)="8b180622343e79f19bac5a8b629b9bafafda8d93e4881e4f6305badebddc742e79fd66889d6ed15aaef1daa073217f7ae4a2e831617edefdaa26453ead5e6819ee2e933ed5f41562188feee7741c3c8496a36c70ed8bb85c24ac05948075aa158c4f8e09f7c6d378180bdc8686ecacaa3bbea279a4c96d92375c45e3890b7365cfd8294b276349909f385c5ff7e47d3a6bfcd87e86150d5139f6cc716fed9031c04d1fa6eb704508d3d921370431efa73b0b204da1165ca0", 0x2}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000640), 0x4) 2018/04/21 01:40:42 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000140)="3f010000f70800000000000094bc", 0xe, 0x0, &(0x7f0000005fe4)={0xa, 0x0, 0x4, @dev={0xfe, 0x80}}, 0x1c) [ 165.803806] binder: 12780:12781 ERROR: BC_REGISTER_LOOPER called without request 2018/04/21 01:40:42 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000140), 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000010000)={0x8004, 0x1d, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000240)='/dev/ion\x00', &(0x7f0000000280)='^{{\x00', &(0x7f00000002c0)='*ppp0-system()\x00', &(0x7f0000000300)='/posix_acl_access[selfkeyring-\x00', &(0x7f0000000340)='system\x00', &(0x7f0000000380)='/dev/ion\x00', &(0x7f00000003c0)='/dev/binder#\x00'], &(0x7f0000000540)=[&(0x7f0000000440)='\'\x00', &(0x7f0000000480)='/dev/binder#\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='/dev/ion\x00']) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in6={0xa, 0x4e21, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0xc9}, @in6={0xa, 0x4e24, 0xfff, @local={0xfe, 0x80, [], 0xaa}, 0x81}, @in={0x2, 0x4e20, @multicast1=0xe0000001}], 0x68) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x90001, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000080)="c9a09b54e75a96bf61", &(0x7f0000000100)="8b180622343e79f19bac5a8b629b9bafafda8d93e4881e4f6305badebddc742e79fd66889d6ed15aaef1daa073217f7ae4a2e831617edefdaa26453ead5e6819ee2e933ed5f41562188feee7741c3c8496a36c70ed8bb85c24ac05948075aa158c4f8e09f7c6d378180bdc8686ecacaa3bbea279a4c96d92375c45e3890b7365cfd8294b276349909f385c5ff7e47d3a6bfcd87e86150d5139f6cc716fed9031c04d1fa6eb704508d3d921370431efa73b0b204da1165ca0", 0x2}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000640), 0x4) 2018/04/21 01:40:42 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000140), 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000010000)={0x8004, 0x1d, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000240)='/dev/ion\x00', &(0x7f0000000280)='^{{\x00', &(0x7f00000002c0)='*ppp0-system()\x00', &(0x7f0000000300)='/posix_acl_access[selfkeyring-\x00', &(0x7f0000000340)='system\x00', &(0x7f0000000380)='/dev/ion\x00', &(0x7f00000003c0)='/dev/binder#\x00'], &(0x7f0000000540)=[&(0x7f0000000440)='\'\x00', &(0x7f0000000480)='/dev/binder#\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='/dev/ion\x00']) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in6={0xa, 0x4e21, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0xc9}, @in6={0xa, 0x4e24, 0xfff, @local={0xfe, 0x80, [], 0xaa}, 0x81}, @in={0x2, 0x4e20, @multicast1=0xe0000001}], 0x68) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x90001, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000080)="c9a09b54e75a96bf61", &(0x7f0000000100)="8b180622343e79f19bac5a8b629b9bafafda8d93e4881e4f6305badebddc742e79fd66889d6ed15aaef1daa073217f7ae4a2e831617edefdaa26453ead5e6819ee2e933ed5f41562188feee7741c3c8496a36c70ed8bb85c24ac05948075aa158c4f8e09f7c6d378180bdc8686ecacaa3bbea279a4c96d92375c45e3890b7365cfd8294b276349909f385c5ff7e47d3a6bfcd87e86150d5139f6cc716fed9031c04d1fa6eb704508d3d921370431efa73b0b204da1165ca0", 0x2}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000640), 0x4) 2018/04/21 01:40:42 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f00001f9fe0)}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x80da14, 0x5, 0x20000000}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') [ 165.877278] attempt to access beyond end of device [ 165.882382] loop7: rw=4096, want=136, limit=1 [ 165.886940] gfs2: error 10 reading superblock 2018/04/21 01:40:42 executing program 7: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x200, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000000740)={[{@discard='discard', 0x2c}]}) [ 166.103882] attempt to access beyond end of device [ 166.108989] loop7: rw=4096, want=136, limit=1 [ 166.113550] gfs2: error 10 reading superblock 2018/04/21 01:40:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000140)="3f010000f70800000000000094bc", 0xe, 0x0, &(0x7f0000005fe4)={0xa, 0x0, 0x4, @dev={0xfe, 0x80}}, 0x1c) 2018/04/21 01:40:43 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000140), 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000010000)={0x8004, 0x1d, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000240)='/dev/ion\x00', &(0x7f0000000280)='^{{\x00', &(0x7f00000002c0)='*ppp0-system()\x00', &(0x7f0000000300)='/posix_acl_access[selfkeyring-\x00', &(0x7f0000000340)='system\x00', &(0x7f0000000380)='/dev/ion\x00', &(0x7f00000003c0)='/dev/binder#\x00'], &(0x7f0000000540)=[&(0x7f0000000440)='\'\x00', &(0x7f0000000480)='/dev/binder#\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='/dev/ion\x00']) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in6={0xa, 0x4e21, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0xc9}, @in6={0xa, 0x4e24, 0xfff, @local={0xfe, 0x80, [], 0xaa}, 0x81}, @in={0x2, 0x4e20, @multicast1=0xe0000001}], 0x68) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x90001, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000080)="c9a09b54e75a96bf61", &(0x7f0000000100)="8b180622343e79f19bac5a8b629b9bafafda8d93e4881e4f6305badebddc742e79fd66889d6ed15aaef1daa073217f7ae4a2e831617edefdaa26453ead5e6819ee2e933ed5f41562188feee7741c3c8496a36c70ed8bb85c24ac05948075aa158c4f8e09f7c6d378180bdc8686ecacaa3bbea279a4c96d92375c45e3890b7365cfd8294b276349909f385c5ff7e47d3a6bfcd87e86150d5139f6cc716fed9031c04d1fa6eb704508d3d921370431efa73b0b204da1165ca0", 0x2}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000640), 0x4) 2018/04/21 01:40:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10}, 0xc, &(0x7f0000000e40)={&(0x7f0000000000)={0x28, r1, 0x30f, 0x0, 0x0, {0x8}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}]}, 0x28}, 0x1}, 0x0) 2018/04/21 01:40:43 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00003d1ffc)='bbr\x00', 0x4) sendmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}, 'ip6tnl0\x00'}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000010c0)="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", 0x89c}], 0x1}}], 0x1, 0x4000) recvfrom$inet(r0, &(0x7f00009be000)=""/11, 0xe8, 0x0, 0x0, 0xffffffffffffff4e) shutdown(r0, 0x1) 2018/04/21 01:40:43 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000088f000)='b\n\x00', 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x7011, r0, 0x0) ftruncate(r0, 0x0) 2018/04/21 01:40:43 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000423ff8)='pagemap\x00') fcntl$setlease(r0, 0x400, 0x1) fcntl$setlease(r0, 0x400, 0x1) 2018/04/21 01:40:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001fd0)={0x44, 0x0, &(0x7f0000008f04)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000008fa8), &(0x7f0000004000)=[0x0, 0x0, 0x0, 0x30]}}], 0x0, 0x0, &(0x7f0000008fc7)}) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x14, 0x0, &(0x7f0000004000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000bf80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x222, 0x118, &(0x7f0000777000)=[@fd={0x66642a85}], &(0x7f000000b000)}}}], 0x0, 0x0, &(0x7f000053f000)}) 2018/04/21 01:40:43 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x4a, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000080), &(0x7f0000000000)) [ 166.572181] binder: 12780:12781 got transaction with invalid fd, -1 [ 166.579328] binder: 12780:12781 transaction failed 29201/-9, size 546-280 line 3068 [ 166.587176] binder: send failed reply for transaction 32 to 12780:12821 [ 166.603277] binder: undelivered TRANSACTION_ERROR: 29190 [ 166.608856] binder: undelivered TRANSACTION_COMPLETE [ 166.614029] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/21 01:40:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000140)="3f010000f70800000000000094bc", 0xe, 0x0, &(0x7f0000005fe4)={0xa, 0x0, 0x4, @dev={0xfe, 0x80}}, 0x1c) [ 166.650194] netlink: 'syz-executor5': attribute type 1 has an invalid length. [ 166.687947] binder: 12840:12841 ERROR: BC_REGISTER_LOOPER called without request 2018/04/21 01:40:43 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000f84ff0)={&(0x7f0000f88fa0)={0x2, 0x5, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2}}]}, 0x60}, 0x1}, 0x0) 2018/04/21 01:40:43 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000088f000)='b\n\x00', 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x7011, r0, 0x0) ftruncate(r0, 0x0) 2018/04/21 01:40:43 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000423ff8)='pagemap\x00') fcntl$setlease(r0, 0x400, 0x1) fcntl$setlease(r0, 0x400, 0x1) [ 166.726176] netlink: 'syz-executor5': attribute type 1 has an invalid length. 2018/04/21 01:40:43 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x4a, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000080), &(0x7f0000000000)) 2018/04/21 01:40:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000140)="3f010000f70800000000000094bc", 0xe, 0x0, &(0x7f0000005fe4)={0xa, 0x0, 0x4, @dev={0xfe, 0x80}}, 0x1c) 2018/04/21 01:40:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10}, 0xc, &(0x7f0000000e40)={&(0x7f0000000000)={0x28, r1, 0x30f, 0x0, 0x0, {0x8}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}]}, 0x28}, 0x1}, 0x0) 2018/04/21 01:40:43 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00003d1ffc)='bbr\x00', 0x4) sendmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}, 'ip6tnl0\x00'}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000010c0)="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", 0x89c}], 0x1}}], 0x1, 0x4000) recvfrom$inet(r0, &(0x7f00009be000)=""/11, 0xe8, 0x0, 0x0, 0xffffffffffffff4e) shutdown(r0, 0x1) [ 166.927649] netlink: 'syz-executor5': attribute type 1 has an invalid length. 2018/04/21 01:40:44 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000423ff8)='pagemap\x00') fcntl$setlease(r0, 0x400, 0x1) fcntl$setlease(r0, 0x400, 0x1) 2018/04/21 01:40:44 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000088f000)='b\n\x00', 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x7011, r0, 0x0) ftruncate(r0, 0x0) 2018/04/21 01:40:44 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000f84ff0)={&(0x7f0000f88fa0)={0x2, 0x5, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2}}]}, 0x60}, 0x1}, 0x0) 2018/04/21 01:40:44 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00003d1ffc)='bbr\x00', 0x4) sendmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}, 'ip6tnl0\x00'}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000010c0)="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", 0x89c}], 0x1}}], 0x1, 0x4000) recvfrom$inet(r0, &(0x7f00009be000)=""/11, 0xe8, 0x0, 0x0, 0xffffffffffffff4e) shutdown(r0, 0x1) 2018/04/21 01:40:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10}, 0xc, &(0x7f0000000e40)={&(0x7f0000000000)={0x28, r1, 0x30f, 0x0, 0x0, {0x8}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}]}, 0x28}, 0x1}, 0x0) 2018/04/21 01:40:44 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00003d1ffc)='bbr\x00', 0x4) sendmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}, 'ip6tnl0\x00'}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000010c0)="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", 0x89c}], 0x1}}], 0x1, 0x4000) recvfrom$inet(r0, &(0x7f00009be000)=""/11, 0xe8, 0x0, 0x0, 0xffffffffffffff4e) shutdown(r0, 0x1) 2018/04/21 01:40:44 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x4a, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000080), &(0x7f0000000000)) 2018/04/21 01:40:44 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00003d1ffc)='bbr\x00', 0x4) sendmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}, 'ip6tnl0\x00'}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000010c0)="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", 0x89c}], 0x1}}], 0x1, 0x4000) recvfrom$inet(r0, &(0x7f00009be000)=""/11, 0xe8, 0x0, 0x0, 0xffffffffffffff4e) shutdown(r0, 0x1) [ 167.479400] binder: 12840:12841 got transaction with invalid fd, -1 [ 167.485930] binder: 12840:12841 transaction failed 29201/-9, size 546-280 line 3068 [ 167.493781] binder: send failed reply for transaction 35 to 12840:12882 [ 167.509930] binder: undelivered TRANSACTION_ERROR: 29190 [ 167.515514] binder: undelivered TRANSACTION_COMPLETE [ 167.520675] binder: undelivered TRANSACTION_ERROR: 29201 [ 167.555715] netlink: 'syz-executor5': attribute type 1 has an invalid length. 2018/04/21 01:40:44 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000f84ff0)={&(0x7f0000f88fa0)={0x2, 0x5, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2}}]}, 0x60}, 0x1}, 0x0) 2018/04/21 01:40:44 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000423ff8)='pagemap\x00') fcntl$setlease(r0, 0x400, 0x1) fcntl$setlease(r0, 0x400, 0x1) 2018/04/21 01:40:44 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000088f000)='b\n\x00', 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x7011, r0, 0x0) ftruncate(r0, 0x0) 2018/04/21 01:40:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10}, 0xc, &(0x7f0000000e40)={&(0x7f0000000000)={0x28, r1, 0x30f, 0x0, 0x0, {0x8}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}]}, 0x28}, 0x1}, 0x0) 2018/04/21 01:40:44 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00003d1ffc)='bbr\x00', 0x4) sendmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}, 'ip6tnl0\x00'}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000010c0)="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", 0x89c}], 0x1}}], 0x1, 0x4000) recvfrom$inet(r0, &(0x7f00009be000)=""/11, 0xe8, 0x0, 0x0, 0xffffffffffffff4e) shutdown(r0, 0x1) 2018/04/21 01:40:44 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00003d1ffc)='bbr\x00', 0x4) sendmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}, 'ip6tnl0\x00'}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000010c0)="9421e5271f45907f567d604a09fe27abfa55e2aebecfe4a0aeda13b3d2418870405797686467855ad166a77fa809f72ab92d438b38975596f98c0c03126989f5a4a3fe4878335988dfb98b11d880cc928c21fccdcf2086d98e2ac4ab265ff234ba0a86ee14bbb2bf4cc210f6ca6a5d3d18d3110ac82704ac8a979bebe6ea1a803cb5a21babf0a28c6741f5493a7189c764564aa039257ce92830f1a25bb6fb553231195be0ff72269d4b8503dbb0bc6c23f0341aa626735a002006f6c2b036efa5d1e087ee6181ffb3d0f5f569629e1691681449dc33e4b96e7d71acec3270c46c74442fbb78a39abcddd7c12b184b60f369e4cbf65bddc6e709130c8664607bf74f8e51b570d3a12155be268339d9e2012ee5e7f8ac4696119e847f2fc96f6006cbda28c502d7ee34fcabbbb5c303f7cd3292aabb74a7bff1f76fce1b1fe13482fda1408973de9868e96c630ff08bd68c3a98d07ce0662997755f039a7ee45bdae739d3f3b1cbd5ecfa8825b540b6417c730ec4a8204ce2ba6ebd0c9452b0cc1273bbd591314867c54abafc48697fed81bfeec349729da076218770bb7ba8a2aedca9000638018a28abcaa3dc6642db8097039f0f9f6fdd1ab481507e5796d65b2a81bd38b11c518feed59fce3147bb2bd31518c6032745185a44a98ec2efe3f8eb27709c2e70cfef9a971f97159e74868d6a55e1a8e6e7b500d7c116f02594a58e3dceb86175af56c7502287ddab530acb67386725e0d6b2e317cb0b87affd30d4ff210024287c19d27033b7a11bf18d1ce1e23f618476b15c3a5574fdc0f238f2ec1c3cd2784fd3d8235278bd957c929021d97da58459f921a47002a4841ff77262b7150c5fbda7f8bf6801c22adfb0bc96f7a2d8527aaf00ae5b663eb0f69914dc722b2d7b1e4861ed66168b7c6afa56fff36de7c842f3d24ecc65d25f24917f0867f6a2fb7c5a02335ff1870d35c3aba978208c118fb5ed56f102cf9bfde60786175bc25ebba02aaa4cbbdc95afa96c3449e53c5ea7e92bdabc8ae8b28370cdefc009698f8f870da37e1b188a5439428b619618179900e03df2d5926bd0a69fe94b5553ce84323a03b371d35d4984daa8e4f52cbc75d05dbd12d3bdcc5125ea53559ae82593a6a8d9812ea99d4166451edc55e5dd97f98b7e5c6527658765d14c9c5be3fc4153881d666dbf5eb45c1cbde2781a985f59e7e5aab7d9398dcc21e1d7495047a5afb84727aadc86854edd5a5a645ca3715b2c78ef32702231aa8be45cf97ac787765bbb631f6a357d292bbe97e7d3ec6d15b82f0985f7c0fe679b9788674b80312b5f365dbcf1a8eb5e295084485dcc92f2b905cdded6e2e81cfc7e9d29ec61fd893d120c31b9101770f4cb2e38a8a518295d373f9e6ba8a7226542c67a2ea423f1a32722260ad533435f903933a70906b10e7e5efac4ba3830e242919997a34044cb831a59186eeb68a93ff9eac431e938b48b810a08aab9730597e196127e4b64a6fd8b431a79f8253b031a59c22e3eeeeb5267441e8c962c8db6ba0bc5b4cc3291aa1672049cec15d0272d4441cbb2412b4a3456935403429aeb7644edc9ef26a9096c87632c4458335949fd2a27fa89c78353ae5adab7594eff5b7e8cd8bc43cc602f914e61b04d8c6e24bd7ef078e3b1b02f61df5c6e6f1648fa6a6022c045390ba8c61b73538f8975142eeba57a52d0d038014010a05ec1e16691a81a748bb222068f08b593a5b3f421767c6611fd3799794be1b0aa2b4d66f65bb4c6ee7a17c44dca1bd6a3fe2159b0ad427097f63f6f8df4852e66b34bc787dc2e236308e56d70e608f97ee4da5b631eaa26582d9bbc86e9f51554f2eec09bbb497fd114e200465d9fb75426a84f7d1ef4b967763e628774f59eeac514fc0d83e952b54b91696e80ce73c6d8b7ef4cd2225fb5ad6f837fa9ddd5428cfe1b7c8113c5fdec44dfbc08b4dcd8deeb7ee0a20063994de4bbdc2a54b4522fab89f43122becda26248b2fc4c9b40fc772a54405c23d248c228c557f7d6c7829928c908babf440101171defbf93b88b2df9c01402bf7ba72be3c28100a83f747160bf64769155329af77b1588c65e7eb81b45c2341976a003a15477b239601e890fee9b3d03dd6db89bb8e3815fd9d6eae54ec94821dca6a9204a448b1a3e3f95aac1fc2e739cf72c9c2c7e9d718d8f03d00fe4a9c1161d0eb24c46c9f0167b6277854f80a8af9540a8ee3ffa0c8648be1cf9436061a92f4b219eb20647d9ba686ec9abc218aa0a9e6188924929e149564e2fb48df003c3c9f064323a07a4a91b4988e37662a380318add9717c93decccf70540b2fdfeb278c5e9c4b36d50de76cc15f2214cc73f4a70fff7a44cd98d32c5e3b65f60acb8f5ca8cd189e2c8ceb331351af5295663f3d89bc9f4e3eb97a9c66d0ad36c006f4b366eb143c3d55276a43daedef2e624b1976b25ae440173cdba5de98b701a1cb6eda6d5ef401fac7d139ad19bf15d42013333a3d96287ec8caecd6c8cb6e78e1de8fc9740efcff01fe54faeec096615b152e765b8dea9c7b4aad8aca2a8c66cc8659e6d8f3ecf4f706a61b7fe1d4cc83f154254fc5c95ca6f84ed01b692a5e62eb9f3cfefa538d3afb478ad094edbc0f399ecb989aa46fb13191c0c1b5a0eea7a2b550ec1b0dd2d10dd2a5ed8f1f8e83139d76c2cb8eb7e047e683309ce903f3cb773d2ad6cbc2cad67b34ebf8411e1b2bf23897b0793f82df3eb09ac88c306a2d2e4f5958e12ee894049cc0815ac3d22634a5b444fbb80bdff04587aaad6c5e77382799e3770eab3254881d0d059444e073f228d1ca2c1d157463e11783fcbe08ec2bfda0073acfdc2ec80a759137d6468e9f3712f3c97d7d254f7f56e3a1f6bc68b2a79a0e5201555b6872bd0b7e8a63bd8bc2bf87afde9dff9516e67b191f974d3e70df8521a28730f4e3ef7da6064437a2733edbc886ab62d96d075be506a948cf58e5c7a1fd95d1f2b0493ff5e81e79d742fc97c22b8fe7ec1cee5f585e13ede78d3c7e9dba5d4154a80b8523a87a7aaf37f4f40e1fd1fc2d320ee0e079b7d80a05d42334df689cee8dcb964d0e72af76ede33b57a49a6aa14b068b45d035171", 0x89c}], 0x1}}], 0x1, 0x4000) recvfrom$inet(r0, &(0x7f00009be000)=""/11, 0xe8, 0x0, 0x0, 0xffffffffffffff4e) shutdown(r0, 0x1) 2018/04/21 01:40:44 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x4a, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000080), &(0x7f0000000000)) 2018/04/21 01:40:44 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00003d1ffc)='bbr\x00', 0x4) sendmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}, 'ip6tnl0\x00'}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000010c0)="9421e5271f45907f567d604a09fe27abfa55e2aebecfe4a0aeda13b3d2418870405797686467855ad166a77fa809f72ab92d438b38975596f98c0c03126989f5a4a3fe4878335988dfb98b11d880cc928c21fccdcf2086d98e2ac4ab265ff234ba0a86ee14bbb2bf4cc210f6ca6a5d3d18d3110ac82704ac8a979bebe6ea1a803cb5a21babf0a28c6741f5493a7189c764564aa039257ce92830f1a25bb6fb553231195be0ff72269d4b8503dbb0bc6c23f0341aa626735a002006f6c2b036efa5d1e087ee6181ffb3d0f5f569629e1691681449dc33e4b96e7d71acec3270c46c74442fbb78a39abcddd7c12b184b60f369e4cbf65bddc6e709130c8664607bf74f8e51b570d3a12155be268339d9e2012ee5e7f8ac4696119e847f2fc96f6006cbda28c502d7ee34fcabbbb5c303f7cd3292aabb74a7bff1f76fce1b1fe13482fda1408973de9868e96c630ff08bd68c3a98d07ce0662997755f039a7ee45bdae739d3f3b1cbd5ecfa8825b540b6417c730ec4a8204ce2ba6ebd0c9452b0cc1273bbd591314867c54abafc48697fed81bfeec349729da076218770bb7ba8a2aedca9000638018a28abcaa3dc6642db8097039f0f9f6fdd1ab481507e5796d65b2a81bd38b11c518feed59fce3147bb2bd31518c6032745185a44a98ec2efe3f8eb27709c2e70cfef9a971f97159e74868d6a55e1a8e6e7b500d7c116f02594a58e3dceb86175af56c7502287ddab530acb67386725e0d6b2e317cb0b87affd30d4ff210024287c19d27033b7a11bf18d1ce1e23f618476b15c3a5574fdc0f238f2ec1c3cd2784fd3d8235278bd957c929021d97da58459f921a47002a4841ff77262b7150c5fbda7f8bf6801c22adfb0bc96f7a2d8527aaf00ae5b663eb0f69914dc722b2d7b1e4861ed66168b7c6afa56fff36de7c842f3d24ecc65d25f24917f0867f6a2fb7c5a02335ff1870d35c3aba978208c118fb5ed56f102cf9bfde60786175bc25ebba02aaa4cbbdc95afa96c3449e53c5ea7e92bdabc8ae8b28370cdefc009698f8f870da37e1b188a5439428b619618179900e03df2d5926bd0a69fe94b5553ce84323a03b371d35d4984daa8e4f52cbc75d05dbd12d3bdcc5125ea53559ae82593a6a8d9812ea99d4166451edc55e5dd97f98b7e5c6527658765d14c9c5be3fc4153881d666dbf5eb45c1cbde2781a985f59e7e5aab7d9398dcc21e1d7495047a5afb84727aadc86854edd5a5a645ca3715b2c78ef32702231aa8be45cf97ac787765bbb631f6a357d292bbe97e7d3ec6d15b82f0985f7c0fe679b9788674b80312b5f365dbcf1a8eb5e295084485dcc92f2b905cdded6e2e81cfc7e9d29ec61fd893d120c31b9101770f4cb2e38a8a518295d373f9e6ba8a7226542c67a2ea423f1a32722260ad533435f903933a70906b10e7e5efac4ba3830e242919997a34044cb831a59186eeb68a93ff9eac431e938b48b810a08aab9730597e196127e4b64a6fd8b431a79f8253b031a59c22e3eeeeb5267441e8c962c8db6ba0bc5b4cc3291aa1672049cec15d0272d4441cbb2412b4a3456935403429aeb7644edc9ef26a9096c87632c4458335949fd2a27fa89c78353ae5adab7594eff5b7e8cd8bc43cc602f914e61b04d8c6e24bd7ef078e3b1b02f61df5c6e6f1648fa6a6022c045390ba8c61b73538f8975142eeba57a52d0d038014010a05ec1e16691a81a748bb222068f08b593a5b3f421767c6611fd3799794be1b0aa2b4d66f65bb4c6ee7a17c44dca1bd6a3fe2159b0ad427097f63f6f8df4852e66b34bc787dc2e236308e56d70e608f97ee4da5b631eaa26582d9bbc86e9f51554f2eec09bbb497fd114e200465d9fb75426a84f7d1ef4b967763e628774f59eeac514fc0d83e952b54b91696e80ce73c6d8b7ef4cd2225fb5ad6f837fa9ddd5428cfe1b7c8113c5fdec44dfbc08b4dcd8deeb7ee0a20063994de4bbdc2a54b4522fab89f43122becda26248b2fc4c9b40fc772a54405c23d248c228c557f7d6c7829928c908babf440101171defbf93b88b2df9c01402bf7ba72be3c28100a83f747160bf64769155329af77b1588c65e7eb81b45c2341976a003a15477b239601e890fee9b3d03dd6db89bb8e3815fd9d6eae54ec94821dca6a9204a448b1a3e3f95aac1fc2e739cf72c9c2c7e9d718d8f03d00fe4a9c1161d0eb24c46c9f0167b6277854f80a8af9540a8ee3ffa0c8648be1cf9436061a92f4b219eb20647d9ba686ec9abc218aa0a9e6188924929e149564e2fb48df003c3c9f064323a07a4a91b4988e37662a380318add9717c93decccf70540b2fdfeb278c5e9c4b36d50de76cc15f2214cc73f4a70fff7a44cd98d32c5e3b65f60acb8f5ca8cd189e2c8ceb331351af5295663f3d89bc9f4e3eb97a9c66d0ad36c006f4b366eb143c3d55276a43daedef2e624b1976b25ae440173cdba5de98b701a1cb6eda6d5ef401fac7d139ad19bf15d42013333a3d96287ec8caecd6c8cb6e78e1de8fc9740efcff01fe54faeec096615b152e765b8dea9c7b4aad8aca2a8c66cc8659e6d8f3ecf4f706a61b7fe1d4cc83f154254fc5c95ca6f84ed01b692a5e62eb9f3cfefa538d3afb478ad094edbc0f399ecb989aa46fb13191c0c1b5a0eea7a2b550ec1b0dd2d10dd2a5ed8f1f8e83139d76c2cb8eb7e047e683309ce903f3cb773d2ad6cbc2cad67b34ebf8411e1b2bf23897b0793f82df3eb09ac88c306a2d2e4f5958e12ee894049cc0815ac3d22634a5b444fbb80bdff04587aaad6c5e77382799e3770eab3254881d0d059444e073f228d1ca2c1d157463e11783fcbe08ec2bfda0073acfdc2ec80a759137d6468e9f3712f3c97d7d254f7f56e3a1f6bc68b2a79a0e5201555b6872bd0b7e8a63bd8bc2bf87afde9dff9516e67b191f974d3e70df8521a28730f4e3ef7da6064437a2733edbc886ab62d96d075be506a948cf58e5c7a1fd95d1f2b0493ff5e81e79d742fc97c22b8fe7ec1cee5f585e13ede78d3c7e9dba5d4154a80b8523a87a7aaf37f4f40e1fd1fc2d320ee0e079b7d80a05d42334df689cee8dcb964d0e72af76ede33b57a49a6aa14b068b45d035171", 0x89c}], 0x1}}], 0x1, 0x4000) recvfrom$inet(r0, &(0x7f00009be000)=""/11, 0xe8, 0x0, 0x0, 0xffffffffffffff4e) shutdown(r0, 0x1) [ 167.752798] netlink: 'syz-executor5': attribute type 1 has an invalid length. 2018/04/21 01:40:44 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000f84ff0)={&(0x7f0000f88fa0)={0x2, 0x5, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2}}]}, 0x60}, 0x1}, 0x0) 2018/04/21 01:40:44 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00003d1ffc)='bbr\x00', 0x4) sendmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}, 'ip6tnl0\x00'}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000010c0)="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", 0x89c}], 0x1}}], 0x1, 0x4000) recvfrom$inet(r0, &(0x7f00009be000)=""/11, 0xe8, 0x0, 0x0, 0xffffffffffffff4e) shutdown(r0, 0x1) 2018/04/21 01:40:44 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000505000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000cdc000)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="2664f30fbc790766b9930300000f320f01d10f07f21298cab466b8840900000f23c80f21f866350c0090000f23f80fae2d660f06f36f66b9210a000066b8f5ffffff66baff7f00000f30", 0x4a}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bfefbf)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000753ff0), 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x663]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/21 01:40:44 executing program 0: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) clone(0x200, &(0x7f00000003c0), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000b40000)) mknod(&(0x7f0000000380)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='syscall\x00') read$eventfd(r1, &(0x7f00000004c0), 0x8) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240), &(0x7f0000000580)) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x62101, 0x0) 2018/04/21 01:40:44 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00003d1ffc)='bbr\x00', 0x4) sendmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}, 'ip6tnl0\x00'}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000010c0)="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", 0x89c}], 0x1}}], 0x1, 0x4000) recvfrom$inet(r0, &(0x7f00009be000)=""/11, 0xe8, 0x0, 0x0, 0xffffffffffffff4e) shutdown(r0, 0x1) 2018/04/21 01:40:44 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00003d1ffc)='bbr\x00', 0x4) sendmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}, 'ip6tnl0\x00'}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000010c0)="9421e5271f45907f567d604a09fe27abfa55e2aebecfe4a0aeda13b3d2418870405797686467855ad166a77fa809f72ab92d438b38975596f98c0c03126989f5a4a3fe4878335988dfb98b11d880cc928c21fccdcf2086d98e2ac4ab265ff234ba0a86ee14bbb2bf4cc210f6ca6a5d3d18d3110ac82704ac8a979bebe6ea1a803cb5a21babf0a28c6741f5493a7189c764564aa039257ce92830f1a25bb6fb553231195be0ff72269d4b8503dbb0bc6c23f0341aa626735a002006f6c2b036efa5d1e087ee6181ffb3d0f5f569629e1691681449dc33e4b96e7d71acec3270c46c74442fbb78a39abcddd7c12b184b60f369e4cbf65bddc6e709130c8664607bf74f8e51b570d3a12155be268339d9e2012ee5e7f8ac4696119e847f2fc96f6006cbda28c502d7ee34fcabbbb5c303f7cd3292aabb74a7bff1f76fce1b1fe13482fda1408973de9868e96c630ff08bd68c3a98d07ce0662997755f039a7ee45bdae739d3f3b1cbd5ecfa8825b540b6417c730ec4a8204ce2ba6ebd0c9452b0cc1273bbd591314867c54abafc48697fed81bfeec349729da076218770bb7ba8a2aedca9000638018a28abcaa3dc6642db8097039f0f9f6fdd1ab481507e5796d65b2a81bd38b11c518feed59fce3147bb2bd31518c6032745185a44a98ec2efe3f8eb27709c2e70cfef9a971f97159e74868d6a55e1a8e6e7b500d7c116f02594a58e3dceb86175af56c7502287ddab530acb67386725e0d6b2e317cb0b87affd30d4ff210024287c19d27033b7a11bf18d1ce1e23f618476b15c3a5574fdc0f238f2ec1c3cd2784fd3d8235278bd957c929021d97da58459f921a47002a4841ff77262b7150c5fbda7f8bf6801c22adfb0bc96f7a2d8527aaf00ae5b663eb0f69914dc722b2d7b1e4861ed66168b7c6afa56fff36de7c842f3d24ecc65d25f24917f0867f6a2fb7c5a02335ff1870d35c3aba978208c118fb5ed56f102cf9bfde60786175bc25ebba02aaa4cbbdc95afa96c3449e53c5ea7e92bdabc8ae8b28370cdefc009698f8f870da37e1b188a5439428b619618179900e03df2d5926bd0a69fe94b5553ce84323a03b371d35d4984daa8e4f52cbc75d05dbd12d3bdcc5125ea53559ae82593a6a8d9812ea99d4166451edc55e5dd97f98b7e5c6527658765d14c9c5be3fc4153881d666dbf5eb45c1cbde2781a985f59e7e5aab7d9398dcc21e1d7495047a5afb84727aadc86854edd5a5a645ca3715b2c78ef32702231aa8be45cf97ac787765bbb631f6a357d292bbe97e7d3ec6d15b82f0985f7c0fe679b9788674b80312b5f365dbcf1a8eb5e295084485dcc92f2b905cdded6e2e81cfc7e9d29ec61fd893d120c31b9101770f4cb2e38a8a518295d373f9e6ba8a7226542c67a2ea423f1a32722260ad533435f903933a70906b10e7e5efac4ba3830e242919997a34044cb831a59186eeb68a93ff9eac431e938b48b810a08aab9730597e196127e4b64a6fd8b431a79f8253b031a59c22e3eeeeb5267441e8c962c8db6ba0bc5b4cc3291aa1672049cec15d0272d4441cbb2412b4a3456935403429aeb7644edc9ef26a9096c87632c4458335949fd2a27fa89c78353ae5adab7594eff5b7e8cd8bc43cc602f914e61b04d8c6e24bd7ef078e3b1b02f61df5c6e6f1648fa6a6022c045390ba8c61b73538f8975142eeba57a52d0d038014010a05ec1e16691a81a748bb222068f08b593a5b3f421767c6611fd3799794be1b0aa2b4d66f65bb4c6ee7a17c44dca1bd6a3fe2159b0ad427097f63f6f8df4852e66b34bc787dc2e236308e56d70e608f97ee4da5b631eaa26582d9bbc86e9f51554f2eec09bbb497fd114e200465d9fb75426a84f7d1ef4b967763e628774f59eeac514fc0d83e952b54b91696e80ce73c6d8b7ef4cd2225fb5ad6f837fa9ddd5428cfe1b7c8113c5fdec44dfbc08b4dcd8deeb7ee0a20063994de4bbdc2a54b4522fab89f43122becda26248b2fc4c9b40fc772a54405c23d248c228c557f7d6c7829928c908babf440101171defbf93b88b2df9c01402bf7ba72be3c28100a83f747160bf64769155329af77b1588c65e7eb81b45c2341976a003a15477b239601e890fee9b3d03dd6db89bb8e3815fd9d6eae54ec94821dca6a9204a448b1a3e3f95aac1fc2e739cf72c9c2c7e9d718d8f03d00fe4a9c1161d0eb24c46c9f0167b6277854f80a8af9540a8ee3ffa0c8648be1cf9436061a92f4b219eb20647d9ba686ec9abc218aa0a9e6188924929e149564e2fb48df003c3c9f064323a07a4a91b4988e37662a380318add9717c93decccf70540b2fdfeb278c5e9c4b36d50de76cc15f2214cc73f4a70fff7a44cd98d32c5e3b65f60acb8f5ca8cd189e2c8ceb331351af5295663f3d89bc9f4e3eb97a9c66d0ad36c006f4b366eb143c3d55276a43daedef2e624b1976b25ae440173cdba5de98b701a1cb6eda6d5ef401fac7d139ad19bf15d42013333a3d96287ec8caecd6c8cb6e78e1de8fc9740efcff01fe54faeec096615b152e765b8dea9c7b4aad8aca2a8c66cc8659e6d8f3ecf4f706a61b7fe1d4cc83f154254fc5c95ca6f84ed01b692a5e62eb9f3cfefa538d3afb478ad094edbc0f399ecb989aa46fb13191c0c1b5a0eea7a2b550ec1b0dd2d10dd2a5ed8f1f8e83139d76c2cb8eb7e047e683309ce903f3cb773d2ad6cbc2cad67b34ebf8411e1b2bf23897b0793f82df3eb09ac88c306a2d2e4f5958e12ee894049cc0815ac3d22634a5b444fbb80bdff04587aaad6c5e77382799e3770eab3254881d0d059444e073f228d1ca2c1d157463e11783fcbe08ec2bfda0073acfdc2ec80a759137d6468e9f3712f3c97d7d254f7f56e3a1f6bc68b2a79a0e5201555b6872bd0b7e8a63bd8bc2bf87afde9dff9516e67b191f974d3e70df8521a28730f4e3ef7da6064437a2733edbc886ab62d96d075be506a948cf58e5c7a1fd95d1f2b0493ff5e81e79d742fc97c22b8fe7ec1cee5f585e13ede78d3c7e9dba5d4154a80b8523a87a7aaf37f4f40e1fd1fc2d320ee0e079b7d80a05d42334df689cee8dcb964d0e72af76ede33b57a49a6aa14b068b45d035171", 0x89c}], 0x1}}], 0x1, 0x4000) recvfrom$inet(r0, &(0x7f00009be000)=""/11, 0xe8, 0x0, 0x0, 0xffffffffffffff4e) shutdown(r0, 0x1) 2018/04/21 01:40:44 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000012000), 0x4) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001effd)='/', r1, &(0x7f0000d06ff8)='./file0\x00') renameat2(r1, &(0x7f0000000080)='./file0/', r1, &(0x7f000016517f)='./file0/', 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="020a0000028000000000c3a979f45905958abe5d683a8c3f8f000000000000"], 0x1f}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020e00e38dfbbc000002000000000000"], 0x10}, 0x1}, 0x20000000) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) close(r0) r2 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x1, 0x400000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x0, 0xe2, 0xdd, &(0x7f0000000280)="1538a4055c531cc1aa2847918b676256bcc4ff55bcfe4a60af2888901fb9a268796eb52b63dc758fae31f56b132ee4d72a9b90ede3d1dc5ead27da50c30c15bd873442dcd216784cb36a5e7f3f5e4c2e48ab8aff179d2c88779af408e6c1a6d8be346474f97e744e850f4519d0b9bf9a275cbf4c8a1cfcc55e8afe7c2ef559db4bc3209eaae6799d8803297cbc4845dc9606c4d510e01e96862b0a56f5db80365b5f0b897537c83d28a6255a52d0c4f9e2f71617facdd3170636c5c407786e0dd63a259ffdd743b5afb24c953784adc74e6c02aed7c8061ba9c4a729accf173efd8b", &(0x7f0000000380)=""/221, 0x0, 0x65}, 0x28) 2018/04/21 01:40:44 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x3f, 0x0, 0x0, 0x0, "47889008fa119973e7fb2061e13927dff527bb55fd1a24f27310ff3ac1e89a73dc34db1434d7fe6e421fb356"}}) 2018/04/21 01:40:44 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001200)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(%tr(aes-aesni),sha224)\x00'}, 0x58) 2018/04/21 01:40:44 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000012000), 0x4) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001effd)='/', r1, &(0x7f0000d06ff8)='./file0\x00') renameat2(r1, &(0x7f0000000080)='./file0/', r1, &(0x7f000016517f)='./file0/', 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="020a0000028000000000c3a979f45905958abe5d683a8c3f8f000000000000"], 0x1f}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020e00e38dfbbc000002000000000000"], 0x10}, 0x1}, 0x20000000) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) close(r0) r2 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x1, 0x400000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x0, 0xe2, 0xdd, &(0x7f0000000280)="1538a4055c531cc1aa2847918b676256bcc4ff55bcfe4a60af2888901fb9a268796eb52b63dc758fae31f56b132ee4d72a9b90ede3d1dc5ead27da50c30c15bd873442dcd216784cb36a5e7f3f5e4c2e48ab8aff179d2c88779af408e6c1a6d8be346474f97e744e850f4519d0b9bf9a275cbf4c8a1cfcc55e8afe7c2ef559db4bc3209eaae6799d8803297cbc4845dc9606c4d510e01e96862b0a56f5db80365b5f0b897537c83d28a6255a52d0c4f9e2f71617facdd3170636c5c407786e0dd63a259ffdd743b5afb24c953784adc74e6c02aed7c8061ba9c4a729accf173efd8b", &(0x7f0000000380)=""/221, 0x0, 0x65}, 0x28) 2018/04/21 01:40:44 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x3f, 0x0, 0x0, 0x0, "47889008fa119973e7fb2061e13927dff527bb55fd1a24f27310ff3ac1e89a73dc34db1434d7fe6e421fb356"}}) 2018/04/21 01:40:44 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001200)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(%tr(aes-aesni),sha224)\x00'}, 0x58) 2018/04/21 01:40:44 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000012000), 0x4) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001effd)='/', r1, &(0x7f0000d06ff8)='./file0\x00') renameat2(r1, &(0x7f0000000080)='./file0/', r1, &(0x7f000016517f)='./file0/', 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="020a0000028000000000c3a979f45905958abe5d683a8c3f8f000000000000"], 0x1f}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020e00e38dfbbc000002000000000000"], 0x10}, 0x1}, 0x20000000) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) close(r0) r2 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x1, 0x400000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x0, 0xe2, 0xdd, &(0x7f0000000280)="1538a4055c531cc1aa2847918b676256bcc4ff55bcfe4a60af2888901fb9a268796eb52b63dc758fae31f56b132ee4d72a9b90ede3d1dc5ead27da50c30c15bd873442dcd216784cb36a5e7f3f5e4c2e48ab8aff179d2c88779af408e6c1a6d8be346474f97e744e850f4519d0b9bf9a275cbf4c8a1cfcc55e8afe7c2ef559db4bc3209eaae6799d8803297cbc4845dc9606c4d510e01e96862b0a56f5db80365b5f0b897537c83d28a6255a52d0c4f9e2f71617facdd3170636c5c407786e0dd63a259ffdd743b5afb24c953784adc74e6c02aed7c8061ba9c4a729accf173efd8b", &(0x7f0000000380)=""/221, 0x0, 0x65}, 0x28) 2018/04/21 01:40:44 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00003d1ffc)='bbr\x00', 0x4) sendmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}, 'ip6tnl0\x00'}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000010c0)="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", 0x89c}], 0x1}}], 0x1, 0x4000) recvfrom$inet(r0, &(0x7f00009be000)=""/11, 0xe8, 0x0, 0x0, 0xffffffffffffff4e) shutdown(r0, 0x1) 2018/04/21 01:40:45 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x3}, 0x10) sendmmsg(r1, &(0x7f0000001b00)=[{{&(0x7f0000000180)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)}}, {{&(0x7f0000000680)=@sco={0x1f}, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000000000000d010000798b1673"], 0x10}}], 0x2, 0x0) 2018/04/21 01:40:45 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000505000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000cdc000)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="2664f30fbc790766b9930300000f320f01d10f07f21298cab466b8840900000f23c80f21f866350c0090000f23f80fae2d660f06f36f66b9210a000066b8f5ffffff66baff7f00000f30", 0x4a}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bfefbf)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000753ff0), 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x663]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/21 01:40:45 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x3f, 0x0, 0x0, 0x0, "47889008fa119973e7fb2061e13927dff527bb55fd1a24f27310ff3ac1e89a73dc34db1434d7fe6e421fb356"}}) 2018/04/21 01:40:45 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000012000), 0x4) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001effd)='/', r1, &(0x7f0000d06ff8)='./file0\x00') renameat2(r1, &(0x7f0000000080)='./file0/', r1, &(0x7f000016517f)='./file0/', 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="020a0000028000000000c3a979f45905958abe5d683a8c3f8f000000000000"], 0x1f}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020e00e38dfbbc000002000000000000"], 0x10}, 0x1}, 0x20000000) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) close(r0) r2 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x1, 0x400000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x0, 0xe2, 0xdd, &(0x7f0000000280)="1538a4055c531cc1aa2847918b676256bcc4ff55bcfe4a60af2888901fb9a268796eb52b63dc758fae31f56b132ee4d72a9b90ede3d1dc5ead27da50c30c15bd873442dcd216784cb36a5e7f3f5e4c2e48ab8aff179d2c88779af408e6c1a6d8be346474f97e744e850f4519d0b9bf9a275cbf4c8a1cfcc55e8afe7c2ef559db4bc3209eaae6799d8803297cbc4845dc9606c4d510e01e96862b0a56f5db80365b5f0b897537c83d28a6255a52d0c4f9e2f71617facdd3170636c5c407786e0dd63a259ffdd743b5afb24c953784adc74e6c02aed7c8061ba9c4a729accf173efd8b", &(0x7f0000000380)=""/221, 0x0, 0x65}, 0x28) 2018/04/21 01:40:45 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001200)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(%tr(aes-aesni),sha224)\x00'}, 0x58) 2018/04/21 01:40:45 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000012000), 0x4) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001effd)='/', r1, &(0x7f0000d06ff8)='./file0\x00') renameat2(r1, &(0x7f0000000080)='./file0/', r1, &(0x7f000016517f)='./file0/', 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="020a0000028000000000c3a979f45905958abe5d683a8c3f8f000000000000"], 0x1f}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020e00e38dfbbc000002000000000000"], 0x10}, 0x1}, 0x20000000) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) close(r0) r2 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x1, 0x400000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x0, 0xe2, 0xdd, &(0x7f0000000280)="1538a4055c531cc1aa2847918b676256bcc4ff55bcfe4a60af2888901fb9a268796eb52b63dc758fae31f56b132ee4d72a9b90ede3d1dc5ead27da50c30c15bd873442dcd216784cb36a5e7f3f5e4c2e48ab8aff179d2c88779af408e6c1a6d8be346474f97e744e850f4519d0b9bf9a275cbf4c8a1cfcc55e8afe7c2ef559db4bc3209eaae6799d8803297cbc4845dc9606c4d510e01e96862b0a56f5db80365b5f0b897537c83d28a6255a52d0c4f9e2f71617facdd3170636c5c407786e0dd63a259ffdd743b5afb24c953784adc74e6c02aed7c8061ba9c4a729accf173efd8b", &(0x7f0000000380)=""/221, 0x0, 0x65}, 0x28) 2018/04/21 01:40:45 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x3f, 0x0, 0x0, 0x0, "47889008fa119973e7fb2061e13927dff527bb55fd1a24f27310ff3ac1e89a73dc34db1434d7fe6e421fb356"}}) 2018/04/21 01:40:45 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x3}, 0x10) sendmmsg(r1, &(0x7f0000001b00)=[{{&(0x7f0000000180)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)}}, {{&(0x7f0000000680)=@sco={0x1f}, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000000000000d010000798b1673"], 0x10}}], 0x2, 0x0) 2018/04/21 01:40:45 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00003d1ffc)='bbr\x00', 0x4) sendmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}, 'ip6tnl0\x00'}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000010c0)="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", 0x89c}], 0x1}}], 0x1, 0x4000) recvfrom$inet(r0, &(0x7f00009be000)=""/11, 0xe8, 0x0, 0x0, 0xffffffffffffff4e) shutdown(r0, 0x1) 2018/04/21 01:40:45 executing program 0: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) clone(0x200, &(0x7f00000003c0), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000b40000)) mknod(&(0x7f0000000380)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='syscall\x00') read$eventfd(r1, &(0x7f00000004c0), 0x8) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240), &(0x7f0000000580)) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x62101, 0x0) 2018/04/21 01:40:45 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000012000), 0x4) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001effd)='/', r1, &(0x7f0000d06ff8)='./file0\x00') renameat2(r1, &(0x7f0000000080)='./file0/', r1, &(0x7f000016517f)='./file0/', 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="020a0000028000000000c3a979f45905958abe5d683a8c3f8f000000000000"], 0x1f}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020e00e38dfbbc000002000000000000"], 0x10}, 0x1}, 0x20000000) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) close(r0) r2 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x1, 0x400000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x0, 0xe2, 0xdd, &(0x7f0000000280)="1538a4055c531cc1aa2847918b676256bcc4ff55bcfe4a60af2888901fb9a268796eb52b63dc758fae31f56b132ee4d72a9b90ede3d1dc5ead27da50c30c15bd873442dcd216784cb36a5e7f3f5e4c2e48ab8aff179d2c88779af408e6c1a6d8be346474f97e744e850f4519d0b9bf9a275cbf4c8a1cfcc55e8afe7c2ef559db4bc3209eaae6799d8803297cbc4845dc9606c4d510e01e96862b0a56f5db80365b5f0b897537c83d28a6255a52d0c4f9e2f71617facdd3170636c5c407786e0dd63a259ffdd743b5afb24c953784adc74e6c02aed7c8061ba9c4a729accf173efd8b", &(0x7f0000000380)=""/221, 0x0, 0x65}, 0x28) 2018/04/21 01:40:45 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000505000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000cdc000)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="2664f30fbc790766b9930300000f320f01d10f07f21298cab466b8840900000f23c80f21f866350c0090000f23f80fae2d660f06f36f66b9210a000066b8f5ffffff66baff7f00000f30", 0x4a}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bfefbf)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000753ff0), 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x663]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/21 01:40:45 executing program 7: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) clone(0x200, &(0x7f00000003c0), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000b40000)) mknod(&(0x7f0000000380)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='syscall\x00') read$eventfd(r1, &(0x7f00000004c0), 0x8) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240), &(0x7f0000000580)) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x62101, 0x0) 2018/04/21 01:40:45 executing program 4: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) clone(0x200, &(0x7f00000003c0), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000b40000)) mknod(&(0x7f0000000380)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='syscall\x00') read$eventfd(r1, &(0x7f00000004c0), 0x8) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240), &(0x7f0000000580)) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x62101, 0x0) 2018/04/21 01:40:45 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001200)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(%tr(aes-aesni),sha224)\x00'}, 0x58) 2018/04/21 01:40:45 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000505000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000cdc000)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="2664f30fbc790766b9930300000f320f01d10f07f21298cab466b8840900000f23c80f21f866350c0090000f23f80fae2d660f06f36f66b9210a000066b8f5ffffff66baff7f00000f30", 0x4a}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bfefbf)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000753ff0), 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x663]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/21 01:40:45 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000012000), 0x4) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001effd)='/', r1, &(0x7f0000d06ff8)='./file0\x00') renameat2(r1, &(0x7f0000000080)='./file0/', r1, &(0x7f000016517f)='./file0/', 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="020a0000028000000000c3a979f45905958abe5d683a8c3f8f000000000000"], 0x1f}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020e00e38dfbbc000002000000000000"], 0x10}, 0x1}, 0x20000000) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) close(r0) r2 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x1, 0x400000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x0, 0xe2, 0xdd, &(0x7f0000000280)="1538a4055c531cc1aa2847918b676256bcc4ff55bcfe4a60af2888901fb9a268796eb52b63dc758fae31f56b132ee4d72a9b90ede3d1dc5ead27da50c30c15bd873442dcd216784cb36a5e7f3f5e4c2e48ab8aff179d2c88779af408e6c1a6d8be346474f97e744e850f4519d0b9bf9a275cbf4c8a1cfcc55e8afe7c2ef559db4bc3209eaae6799d8803297cbc4845dc9606c4d510e01e96862b0a56f5db80365b5f0b897537c83d28a6255a52d0c4f9e2f71617facdd3170636c5c407786e0dd63a259ffdd743b5afb24c953784adc74e6c02aed7c8061ba9c4a729accf173efd8b", &(0x7f0000000380)=""/221, 0x0, 0x65}, 0x28) 2018/04/21 01:40:45 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x3}, 0x10) sendmmsg(r1, &(0x7f0000001b00)=[{{&(0x7f0000000180)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)}}, {{&(0x7f0000000680)=@sco={0x1f}, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000000000000d010000798b1673"], 0x10}}], 0x2, 0x0) 2018/04/21 01:40:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) r3 = dup2(r2, r2) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000700)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 01:40:46 executing program 1: prctl$void(0x21) 2018/04/21 01:40:46 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x3}, 0x10) sendmmsg(r1, &(0x7f0000001b00)=[{{&(0x7f0000000180)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)}}, {{&(0x7f0000000680)=@sco={0x1f}, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000000000000d010000798b1673"], 0x10}}], 0x2, 0x0) 2018/04/21 01:40:46 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000042ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f00007ed000), 0x2b) 2018/04/21 01:40:46 executing program 6: syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000001000)='/dev/snd/midiC#D#\x00', 0x2, 0x0) eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 2018/04/21 01:40:46 executing program 1: prctl$void(0x21) 2018/04/21 01:40:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) r3 = dup2(r2, r2) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000700)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 01:40:46 executing program 0: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) clone(0x200, &(0x7f00000003c0), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000b40000)) mknod(&(0x7f0000000380)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='syscall\x00') read$eventfd(r1, &(0x7f00000004c0), 0x8) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240), &(0x7f0000000580)) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x62101, 0x0) 2018/04/21 01:40:46 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000042ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f00007ed000), 0x2b) 2018/04/21 01:40:46 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000042ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f00007ed000), 0x2b) 2018/04/21 01:40:47 executing program 4: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) clone(0x200, &(0x7f00000003c0), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000b40000)) mknod(&(0x7f0000000380)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='syscall\x00') read$eventfd(r1, &(0x7f00000004c0), 0x8) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240), &(0x7f0000000580)) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x62101, 0x0) 2018/04/21 01:40:47 executing program 0: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) clone(0x200, &(0x7f00000003c0), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000b40000)) mknod(&(0x7f0000000380)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='syscall\x00') read$eventfd(r1, &(0x7f00000004c0), 0x8) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240), &(0x7f0000000580)) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x62101, 0x0) 2018/04/21 01:40:47 executing program 7: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) clone(0x200, &(0x7f00000003c0), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000b40000)) mknod(&(0x7f0000000380)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='syscall\x00') read$eventfd(r1, &(0x7f00000004c0), 0x8) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240), &(0x7f0000000580)) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x62101, 0x0) 2018/04/21 01:40:47 executing program 1: prctl$void(0x21) 2018/04/21 01:40:47 executing program 6: syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000001000)='/dev/snd/midiC#D#\x00', 0x2, 0x0) eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 2018/04/21 01:40:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) r3 = dup2(r2, r2) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000700)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 01:40:47 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000042ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f00007ed000), 0x2b) 2018/04/21 01:40:47 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000042ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f00007ed000), 0x2b) 2018/04/21 01:40:47 executing program 1: prctl$void(0x21) 2018/04/21 01:40:47 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000042ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f00007ed000), 0x2b) 2018/04/21 01:40:47 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000042ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f00007ed000), 0x2b) 2018/04/21 01:40:47 executing program 6: syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000001000)='/dev/snd/midiC#D#\x00', 0x2, 0x0) eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 2018/04/21 01:40:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) r3 = dup2(r2, r2) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000700)={"8a927799b01a029f25061eda96dd379385fc78b28fcbf8eb8455a6fb67a8de46d4d40000a01a47191dc792f414ac8437036bb34b6632c980073c4cdc084a1966c440f15811d016f5b50e90810603f10aea61134de09d8f0e9ab67e4bb4b3c5199cadf58ab550c72a7eb011b622072532229fbc9d9c4d1e045191ee2b0d584c8fd736ee3e7d73d5267b674281395000b90f0d692d30ecfb806326f17f0a7a24aa58b111193c5f100bb2e1f3874a807d63dfb58775215937ae2b62b46c6d5816f2fc52eeab0000000000000003252929e628ad2c34a0ef717fb2504d9bd66eabce002faf0512145c072f3087a5566c38fda729442c3ebd62e970a9a3eb242747993601a1a186b8376d39c69c4ce503b2638feeae79436a9708b3bb19f38377382ea7b4c9c2d674b80ef220109f8fa8200de4794547b4da6430ac512116d358949a298812c5d54017aa2fc8b814ecf28c41d4c83474ba93a8ad32b16371b42350bf984abb465228cfd848e54abc383d21d0a3315f1b8599efa1bf10bd30a1371757b13aed4a19db7c777995fd42ad446d9d2755f8552563c7639ce00da8ee3ece9ded52625aa3f0a1d7b76b32536d39eeae158271064ea79bddf1032b6e6ac794f37ec9d0c3bc4923cc7b631c6df64f28d75d99443d6653db3c6b7961190e8f82a233000001002ce4f47168ef93f01aef51c60000000000000006af34b21ed8437a371c0b427cd8c90000010000000000b5bff60a0c4f4793cd6638a2a23d68cb6e86925599fbc1361b8ce27b41d79027894b6c0003cc97a64088edf383a51eef947915369bdd4fc3cded2663d17515838f8fbba284c5b4ffc5251019eaee59d117d34c7be50fbd33ceb4508cfa4eecb7d6bb11fc4a114a13542dee77b2651783f6a504000000000000005105d1ddb56f1ac26584547d8d5cecb3c672068cc7ab31ddc5ae0a253b587d712c6113acdf49fa0100de0f7b3717528e35b7e70733538a8eec8fb17616d2198d02ba4e7690fab7933b676deddb27755d6a8f29c643dfff0e4bd7c2b13b7a57a3120cb2cbb70200339dc0862dafad481a63e7f90d14c54803d8b100e0ad5cae9a0a7b2f329c3b0000000000000002f4b2eebf5bcd4268012c26ca447751ef7df01c13c7cb674ff41cb3c7f6890300e86bda845164825e28b9fb719e695a9eb9710f924aefde1c96bebe4274594038347691a088f9bcaeba90315d3b3cfc24388cc15dffeda1bd610582c5b74fa6bfe789ce440f71871a5e8b85000000005806743e8e075b8624686feb21dbdb9afd74dd0067d82a72c099a2d52a599494388cb56cdb5ef91b0980f9128e689e07e98b2ed59e1537fc7de144dc2030374b0f5fcfd8f2ef242803f7bcbc07145f65b8912a4a335b858de8ac2f4276cb102ec89d0a5aac3d6a33e0075506a1fd25799f1637b1bafaf09954ef"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 01:40:47 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000042ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f00007ed000), 0x2b) 2018/04/21 01:40:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) r3 = dup2(r2, r2) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000700)={"8a927799b01a029f25061eda96dd379385fc78b28fcbf8eb8455a6fb67a8de46d4d40000a01a47191dc792f414ac8437036bb34b6632c980073c4cdc084a1966c440f15811d016f5b50e90810603f10aea61134de09d8f0e9ab67e4bb4b3c5199cadf58ab550c72a7eb011b622072532229fbc9d9c4d1e045191ee2b0d584c8fd736ee3e7d73d5267b674281395000b90f0d692d30ecfb806326f17f0a7a24aa58b111193c5f100bb2e1f3874a807d63dfb58775215937ae2b62b46c6d5816f2fc52eeab0000000000000003252929e628ad2c34a0ef717fb2504d9bd66eabce002faf0512145c072f3087a5566c38fda729442c3ebd62e970a9a3eb242747993601a1a186b8376d39c69c4ce503b2638feeae79436a9708b3bb19f38377382ea7b4c9c2d674b80ef220109f8fa8200de4794547b4da6430ac512116d358949a298812c5d54017aa2fc8b814ecf28c41d4c83474ba93a8ad32b16371b42350bf984abb465228cfd848e54abc383d21d0a3315f1b8599efa1bf10bd30a1371757b13aed4a19db7c777995fd42ad446d9d2755f8552563c7639ce00da8ee3ece9ded52625aa3f0a1d7b76b32536d39eeae158271064ea79bddf1032b6e6ac794f37ec9d0c3bc4923cc7b631c6df64f28d75d99443d6653db3c6b7961190e8f82a233000001002ce4f47168ef93f01aef51c60000000000000006af34b21ed8437a371c0b427cd8c90000010000000000b5bff60a0c4f4793cd6638a2a23d68cb6e86925599fbc1361b8ce27b41d79027894b6c0003cc97a64088edf383a51eef947915369bdd4fc3cded2663d17515838f8fbba284c5b4ffc5251019eaee59d117d34c7be50fbd33ceb4508cfa4eecb7d6bb11fc4a114a13542dee77b2651783f6a504000000000000005105d1ddb56f1ac26584547d8d5cecb3c672068cc7ab31ddc5ae0a253b587d712c6113acdf49fa0100de0f7b3717528e35b7e70733538a8eec8fb17616d2198d02ba4e7690fab7933b676deddb27755d6a8f29c643dfff0e4bd7c2b13b7a57a3120cb2cbb70200339dc0862dafad481a63e7f90d14c54803d8b100e0ad5cae9a0a7b2f329c3b0000000000000002f4b2eebf5bcd4268012c26ca447751ef7df01c13c7cb674ff41cb3c7f6890300e86bda845164825e28b9fb719e695a9eb9710f924aefde1c96bebe4274594038347691a088f9bcaeba90315d3b3cfc24388cc15dffeda1bd610582c5b74fa6bfe789ce440f71871a5e8b85000000005806743e8e075b8624686feb21dbdb9afd74dd0067d82a72c099a2d52a599494388cb56cdb5ef91b0980f9128e689e07e98b2ed59e1537fc7de144dc2030374b0f5fcfd8f2ef242803f7bcbc07145f65b8912a4a335b858de8ac2f4276cb102ec89d0a5aac3d6a33e0075506a1fd25799f1637b1bafaf09954ef"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 01:40:47 executing program 2: r0 = memfd_create(&(0x7f0000000080)="0010", 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x12, r0, 0x0) setgroups(0x1, &(0x7f00000004c0)=[0x0]) 2018/04/21 01:40:48 executing program 4: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) clone(0x200, &(0x7f00000003c0), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000b40000)) mknod(&(0x7f0000000380)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='syscall\x00') read$eventfd(r1, &(0x7f00000004c0), 0x8) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240), &(0x7f0000000580)) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x62101, 0x0) 2018/04/21 01:40:49 executing program 6: syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000001000)='/dev/snd/midiC#D#\x00', 0x2, 0x0) eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 2018/04/21 01:40:49 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f000068b000)='io\x00') bind$alg(r0, &(0x7f0000d59fa8)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000140), 0x1) 2018/04/21 01:40:49 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000042ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f00007ed000), 0x2b) 2018/04/21 01:40:49 executing program 2: r0 = memfd_create(&(0x7f0000000080)="0010", 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x12, r0, 0x0) setgroups(0x1, &(0x7f00000004c0)=[0x0]) 2018/04/21 01:40:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) r3 = dup2(r2, r2) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000700)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 01:40:49 executing program 7: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) clone(0x200, &(0x7f00000003c0), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000b40000)) mknod(&(0x7f0000000380)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='syscall\x00') read$eventfd(r1, &(0x7f00000004c0), 0x8) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240), &(0x7f0000000580)) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x62101, 0x0) 2018/04/21 01:40:49 executing program 0: r0 = memfd_create(&(0x7f0000000080)="0010", 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x12, r0, 0x0) setgroups(0x1, &(0x7f00000004c0)=[0x0]) 2018/04/21 01:40:49 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000080), 0x3) 2018/04/21 01:40:49 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000042ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f00007ed000), 0x2b) 2018/04/21 01:40:49 executing program 0: r0 = memfd_create(&(0x7f0000000080)="0010", 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x12, r0, 0x0) setgroups(0x1, &(0x7f00000004c0)=[0x0]) 2018/04/21 01:40:49 executing program 2: r0 = memfd_create(&(0x7f0000000080)="0010", 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x12, r0, 0x0) setgroups(0x1, &(0x7f00000004c0)=[0x0]) 2018/04/21 01:40:49 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f000068b000)='io\x00') bind$alg(r0, &(0x7f0000d59fa8)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000140), 0x1) 2018/04/21 01:40:50 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f000068b000)='io\x00') bind$alg(r0, &(0x7f0000d59fa8)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000140), 0x1) 2018/04/21 01:40:50 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000080), 0x3) 2018/04/21 01:40:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) r3 = dup2(r2, r2) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000700)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 01:40:50 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x396, 0x200007ff, &(0x7f0000003e00)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) read(r0, &(0x7f0000000080)=""/218, 0xda) recvfrom$inet(r0, &(0x7f0000000200)=""/160, 0xa0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x10030) writev(r0, &(0x7f0000df9000)=[{&(0x7f0000354ff8)='\'', 0x1}], 0x1) 2018/04/21 01:40:50 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00004da000), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000007affc), 0x4) dup2(r1, r2) 2018/04/21 01:40:50 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1000000000001, 0x5, 0x8400000000003, 0xffffffff00000005}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x28, &(0x7f0000000380)}, 0x9) 2018/04/21 01:40:50 executing program 0: r0 = memfd_create(&(0x7f0000000080)="0010", 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x12, r0, 0x0) setgroups(0x1, &(0x7f00000004c0)=[0x0]) 2018/04/21 01:40:50 executing program 2: r0 = memfd_create(&(0x7f0000000080)="0010", 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x12, r0, 0x0) setgroups(0x1, &(0x7f00000004c0)=[0x0]) 2018/04/21 01:40:50 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000008000)={0xa, 0x0, 0xb, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 2018/04/21 01:40:50 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00080000ec050000130200001200000000090000000200000001000024d96443e10000001e000000000000000010ec0302000100526549734572334673", 0x3d, 0x10000}], 0x0, &(0x7f0000011400)) 2018/04/21 01:40:50 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000080), 0x3) 2018/04/21 01:40:50 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1000000000001, 0x5, 0x8400000000003, 0xffffffff00000005}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x28, &(0x7f0000000380)}, 0x9) 2018/04/21 01:40:50 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0x100000162) write$sndseq(r1, &(0x7f0000000140)=[{}], 0x30) dup2(r0, r2) 2018/04/21 01:40:50 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f000068b000)='io\x00') bind$alg(r0, &(0x7f0000d59fa8)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000140), 0x1) [ 173.683890] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 173.692460] REISERFS warning (device loop0): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 173.704580] REISERFS warning (device loop0): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 173.716521] REISERFS warning (device loop0): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 173.767940] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 173.776610] REISERFS warning (device loop0): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 173.788741] REISERFS warning (device loop0): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 173.800678] REISERFS warning (device loop0): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to 2018/04/21 01:40:51 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00004da000), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000007affc), 0x4) dup2(r1, r2) 2018/04/21 01:40:51 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1000000000001, 0x5, 0x8400000000003, 0xffffffff00000005}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x28, &(0x7f0000000380)}, 0x9) 2018/04/21 01:40:51 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000080), 0x3) 2018/04/21 01:40:51 executing program 3: r0 = eventfd2(0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) writev(r0, &(0x7f00000000c0), 0x10000000000001dc) 2018/04/21 01:40:51 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000008000)={0xa, 0x0, 0xb, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 2018/04/21 01:40:51 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00080000ec050000130200001200000000090000000200000001000024d96443e10000001e000000000000000010ec0302000100526549734572334673", 0x3d, 0x10000}], 0x0, &(0x7f0000011400)) 2018/04/21 01:40:51 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0x100000162) write$sndseq(r1, &(0x7f0000000140)=[{}], 0x30) dup2(r0, r2) 2018/04/21 01:40:51 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x396, 0x200007ff, &(0x7f0000003e00)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) read(r0, &(0x7f0000000080)=""/218, 0xda) recvfrom$inet(r0, &(0x7f0000000200)=""/160, 0xa0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x10030) writev(r0, &(0x7f0000df9000)=[{&(0x7f0000354ff8)='\'', 0x1}], 0x1) 2018/04/21 01:40:51 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00004da000), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000007affc), 0x4) dup2(r1, r2) 2018/04/21 01:40:51 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1000000000001, 0x5, 0x8400000000003, 0xffffffff00000005}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x28, &(0x7f0000000380)}, 0x9) [ 174.576629] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 174.585222] REISERFS warning (device loop0): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 174.597357] REISERFS warning (device loop0): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 174.609299] REISERFS warning (device loop0): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to 2018/04/21 01:40:51 executing program 3: r0 = eventfd2(0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) writev(r0, &(0x7f00000000c0), 0x10000000000001dc) 2018/04/21 01:40:51 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00004da000), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000007affc), 0x4) dup2(r1, r2) 2018/04/21 01:40:51 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0x100000162) write$sndseq(r1, &(0x7f0000000140)=[{}], 0x30) dup2(r0, r2) 2018/04/21 01:40:51 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00080000ec050000130200001200000000090000000200000001000024d96443e10000001e000000000000000010ec0302000100526549734572334673", 0x3d, 0x10000}], 0x0, &(0x7f0000011400)) 2018/04/21 01:40:51 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000008000)={0xa, 0x0, 0xb, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 2018/04/21 01:40:51 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00004da000), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000007affc), 0x4) dup2(r1, r2) 2018/04/21 01:40:51 executing program 3: r0 = eventfd2(0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) writev(r0, &(0x7f00000000c0), 0x10000000000001dc) 2018/04/21 01:40:51 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00004da000), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000007affc), 0x4) dup2(r1, r2) 2018/04/21 01:40:51 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00004da000), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000007affc), 0x4) dup2(r1, r2) [ 174.839502] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 174.848306] REISERFS warning (device loop0): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 174.860436] REISERFS warning (device loop0): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 174.872361] REISERFS warning (device loop0): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to 2018/04/21 01:40:51 executing program 3: r0 = eventfd2(0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) writev(r0, &(0x7f00000000c0), 0x10000000000001dc) 2018/04/21 01:40:51 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x396, 0x200007ff, &(0x7f0000003e00)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) read(r0, &(0x7f0000000080)=""/218, 0xda) recvfrom$inet(r0, &(0x7f0000000200)=""/160, 0xa0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x10030) writev(r0, &(0x7f0000df9000)=[{&(0x7f0000354ff8)='\'', 0x1}], 0x1) 2018/04/21 01:40:51 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000008000)={0xa, 0x0, 0xb, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 2018/04/21 01:40:52 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0x100000162) write$sndseq(r1, &(0x7f0000000140)=[{}], 0x30) dup2(r0, r2) 2018/04/21 01:40:52 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x396, 0x200007ff, &(0x7f0000003e00)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) read(r0, &(0x7f0000000080)=""/218, 0xda) recvfrom$inet(r0, &(0x7f0000000200)=""/160, 0xa0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x10030) writev(r0, &(0x7f0000df9000)=[{&(0x7f0000354ff8)='\'', 0x1}], 0x1) 2018/04/21 01:40:52 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0x100000162) write$sndseq(r1, &(0x7f0000000140)=[{}], 0x30) dup2(r0, r2) 2018/04/21 01:40:52 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000008000)={0xa, 0x0, 0xb, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 2018/04/21 01:40:52 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="ed3ad35189f5", [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000080)) 2018/04/21 01:40:52 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00080000ec050000130200001200000000090000000200000001000024d96443e10000001e000000000000000010ec0302000100526549734572334673", 0x3d, 0x10000}], 0x0, &(0x7f0000011400)) 2018/04/21 01:40:52 executing program 2: syz_emit_ethernet(0x7e, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4305, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000200)) 2018/04/21 01:40:52 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x396, 0x200007ff, &(0x7f0000003e00)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) read(r0, &(0x7f0000000080)=""/218, 0xda) recvfrom$inet(r0, &(0x7f0000000200)=""/160, 0xa0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x10030) writev(r0, &(0x7f0000df9000)=[{&(0x7f0000354ff8)='\'', 0x1}], 0x1) 2018/04/21 01:40:52 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="ed3ad35189f5", [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000080)) 2018/04/21 01:40:52 executing program 2: syz_emit_ethernet(0x7e, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4305, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000200)) [ 175.857704] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 175.866292] REISERFS warning (device loop0): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 175.878450] REISERFS warning (device loop0): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 175.890402] REISERFS warning (device loop0): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to 2018/04/21 01:40:52 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000008000)={0xa, 0x0, 0xb, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 2018/04/21 01:40:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000180)="ba2000ed66b91b0300000f32baf80c66b87ecc538266efbafc0cb85d75ef0f547056baf80c66b8063c098466efbafc0cb0b9ee0f0098f9ff0f001166b8488100000f23d80f21f86635400000f00f23f8ba4100ec813e8b000018", 0x5a}], 0x1, 0x10, &(0x7f0000000240), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/21 01:40:52 executing program 2: syz_emit_ethernet(0x7e, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4305, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000200)) 2018/04/21 01:40:52 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="ed3ad35189f5", [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000080)) 2018/04/21 01:40:52 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000008000)={0xa, 0x0, 0xb, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 2018/04/21 01:40:52 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="ed3ad35189f5", [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000080)) 2018/04/21 01:40:53 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0x100000162) write$sndseq(r1, &(0x7f0000000140)=[{}], 0x30) dup2(r0, r2) 2018/04/21 01:40:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000180)="ba2000ed66b91b0300000f32baf80c66b87ecc538266efbafc0cb85d75ef0f547056baf80c66b8063c098466efbafc0cb0b9ee0f0098f9ff0f001166b8488100000f23d80f21f86635400000f00f23f8ba4100ec813e8b000018", 0x5a}], 0x1, 0x10, &(0x7f0000000240), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/21 01:40:53 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x396, 0x200007ff, &(0x7f0000003e00)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) read(r0, &(0x7f0000000080)=""/218, 0xda) recvfrom$inet(r0, &(0x7f0000000200)=""/160, 0xa0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x10030) writev(r0, &(0x7f0000df9000)=[{&(0x7f0000354ff8)='\'', 0x1}], 0x1) 2018/04/21 01:40:53 executing program 2: syz_emit_ethernet(0x7e, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4305, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000200)) 2018/04/21 01:40:53 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x40a02, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x94ffffff, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x30) 2018/04/21 01:40:53 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0x100000162) write$sndseq(r1, &(0x7f0000000140)=[{}], 0x30) dup2(r0, r2) 2018/04/21 01:40:53 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') pread64(r0, &(0x7f0000000040)=""/100, 0x64, 0x0) 2018/04/21 01:40:53 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x396, 0x200007ff, &(0x7f0000003e00)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) read(r0, &(0x7f0000000080)=""/218, 0xda) recvfrom$inet(r0, &(0x7f0000000200)=""/160, 0xa0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x10030) writev(r0, &(0x7f0000df9000)=[{&(0x7f0000354ff8)='\'', 0x1}], 0x1) 2018/04/21 01:40:53 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x40a02, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x94ffffff, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x30) 2018/04/21 01:40:53 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x40a02, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x94ffffff, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x30) 2018/04/21 01:40:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='/\x00', 0x0, 0x0, &(0x7f0000000300), 0x28030, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, [0x36, 0x0]}, 0x2c}]}) 2018/04/21 01:40:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000180)="ba2000ed66b91b0300000f32baf80c66b87ecc538266efbafc0cb85d75ef0f547056baf80c66b8063c098466efbafc0cb0b9ee0f0098f9ff0f001166b8488100000f23d80f21f86635400000f00f23f8ba4100ec813e8b000018", 0x5a}], 0x1, 0x10, &(0x7f0000000240), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/21 01:40:53 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x40a02, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x94ffffff, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x30) 2018/04/21 01:40:53 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x40a02, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x94ffffff, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x30) 2018/04/21 01:40:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000180)="ba2000ed66b91b0300000f32baf80c66b87ecc538266efbafc0cb85d75ef0f547056baf80c66b8063c098466efbafc0cb0b9ee0f0098f9ff0f001166b8488100000f23d80f21f86635400000f00f23f8ba4100ec813e8b000018", 0x5a}], 0x1, 0x10, &(0x7f0000000240), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/21 01:40:53 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x40a02, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x94ffffff, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x30) [ 176.990558] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=6 [ 177.018689] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=6 2018/04/21 01:40:54 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000004000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000008000)={{&(0x7f0000cf7000/0x4000)=nil, 0x4000}, 0x7fffdf308000, 0xffff8000}) 2018/04/21 01:40:54 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000007a0a00fffffffffd6301"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x46f, &(0x7f0000000300)=""/187}, 0x48) 2018/04/21 01:40:54 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x40a02, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x94ffffff, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x30) 2018/04/21 01:40:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='/\x00', 0x0, 0x0, &(0x7f0000000300), 0x28030, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, [0x36, 0x0]}, 0x2c}]}) 2018/04/21 01:40:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f000006e000)="7f", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) ptrace$setopts(0x4206, r1, 0x5, 0x10) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 2018/04/21 01:40:54 executing program 0: r0 = memfd_create(&(0x7f0000000240)='-G\\%(\x00', 0x3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) fcntl$addseals(r0, 0x409, 0xb) 2018/04/21 01:40:54 executing program 6: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb52904e5446532020202000040200000000000000f8000000000000000000000000000080008000ff070000000000000800000000000000ff01000000000000f600000002", 0x45}, {&(0x7f000007e100), 0x0, 0x1ffde0}], 0x0, &(0x7f000007e200)) 2018/04/21 01:40:54 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000080)=0x0) io_submit(r1, 0x2, &(0x7f00000004c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0)}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)}]) 2018/04/21 01:40:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000400)) [ 177.634755] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=6 [ 177.753336] __ntfs_warning: 5 callbacks suppressed [ 177.753346] ntfs: (device loop6): is_boot_sector_ntfs(): Invalid end of sector marker. [ 177.769825] ntfs: (device loop6): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 177.777765] ntfs: (device loop6): ntfs_read_inode_mount(): Failed to lookup attribute list attribute. You should run chkdsk. [ 177.789156] ntfs: (device loop6): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 177.797420] ntfs: (device loop6): ntfs_fill_super(): Failed to load essential metadata. [ 177.822158] ntfs: (device loop6): is_boot_sector_ntfs(): Invalid end of sector marker. [ 177.831222] ntfs: (device loop6): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 177.839012] ntfs: (device loop6): ntfs_read_inode_mount(): Failed to lookup attribute list attribute. You should run chkdsk. [ 177.850418] ntfs: (device loop6): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 177.858691] ntfs: (device loop6): ntfs_fill_super(): Failed to load essential metadata. 2018/04/21 01:40:55 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000004000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000008000)={{&(0x7f0000cf7000/0x4000)=nil, 0x4000}, 0x7fffdf308000, 0xffff8000}) 2018/04/21 01:40:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='/\x00', 0x0, 0x0, &(0x7f0000000300), 0x28030, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, [0x36, 0x0]}, 0x2c}]}) 2018/04/21 01:40:55 executing program 0: r0 = memfd_create(&(0x7f0000000240)='-G\\%(\x00', 0x3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) fcntl$addseals(r0, 0x409, 0xb) 2018/04/21 01:40:55 executing program 6: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb52904e5446532020202000040200000000000000f8000000000000000000000000000080008000ff070000000000000800000000000000ff01000000000000f600000002", 0x45}, {&(0x7f000007e100), 0x0, 0x1ffde0}], 0x0, &(0x7f000007e200)) 2018/04/21 01:40:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f000006e000)="7f", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) ptrace$setopts(0x4206, r1, 0x5, 0x10) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 2018/04/21 01:40:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000400)) 2018/04/21 01:40:55 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000080)=0x0) io_submit(r1, 0x2, &(0x7f00000004c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0)}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)}]) 2018/04/21 01:40:55 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000007a0a00fffffffffd6301"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x46f, &(0x7f0000000300)=""/187}, 0x48) 2018/04/21 01:40:55 executing program 0: r0 = memfd_create(&(0x7f0000000240)='-G\\%(\x00', 0x3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) fcntl$addseals(r0, 0x409, 0xb) 2018/04/21 01:40:55 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000004000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000008000)={{&(0x7f0000cf7000/0x4000)=nil, 0x4000}, 0x7fffdf308000, 0xffff8000}) 2018/04/21 01:40:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000400)) 2018/04/21 01:40:55 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000007a0a00fffffffffd6301"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x46f, &(0x7f0000000300)=""/187}, 0x48) [ 178.585912] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=6 2018/04/21 01:40:55 executing program 6: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb52904e5446532020202000040200000000000000f8000000000000000000000000000080008000ff070000000000000800000000000000ff01000000000000f600000002", 0x45}, {&(0x7f000007e100), 0x0, 0x1ffde0}], 0x0, &(0x7f000007e200)) 2018/04/21 01:40:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='/\x00', 0x0, 0x0, &(0x7f0000000300), 0x28030, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, [0x36, 0x0]}, 0x2c}]}) [ 178.840111] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=6 2018/04/21 01:40:56 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000080)=0x0) io_submit(r1, 0x2, &(0x7f00000004c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0)}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)}]) 2018/04/21 01:40:56 executing program 0: r0 = memfd_create(&(0x7f0000000240)='-G\\%(\x00', 0x3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) fcntl$addseals(r0, 0x409, 0xb) 2018/04/21 01:40:56 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000004000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000008000)={{&(0x7f0000cf7000/0x4000)=nil, 0x4000}, 0x7fffdf308000, 0xffff8000}) 2018/04/21 01:40:56 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000007a0a00fffffffffd6301"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x46f, &(0x7f0000000300)=""/187}, 0x48) 2018/04/21 01:40:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000400)) 2018/04/21 01:40:56 executing program 6: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb52904e5446532020202000040200000000000000f8000000000000000000000000000080008000ff070000000000000800000000000000ff01000000000000f600000002", 0x45}, {&(0x7f000007e100), 0x0, 0x1ffde0}], 0x0, &(0x7f000007e200)) 2018/04/21 01:40:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f000006e000)="7f", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) ptrace$setopts(0x4206, r1, 0x5, 0x10) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 2018/04/21 01:40:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f000006e000)="7f", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) ptrace$setopts(0x4206, r1, 0x5, 0x10) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 2018/04/21 01:40:56 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f000006e000)="7f", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) ptrace$setopts(0x4206, r1, 0x5, 0x10) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 2018/04/21 01:40:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f000006e000)="7f", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) ptrace$setopts(0x4206, r1, 0x5, 0x10) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 2018/04/21 01:40:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f000006e000)="7f", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) ptrace$setopts(0x4206, r1, 0x5, 0x10) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 2018/04/21 01:40:56 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x54001c84, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000a00000/0x600000)=nil, 0x5000) 2018/04/21 01:40:56 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3b, &(0x7f0000000080), &(0x7f0000013000)=0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/04/21 01:40:56 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000080)=0x0) io_submit(r1, 0x2, &(0x7f00000004c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0)}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)}]) 2018/04/21 01:40:56 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x54001c84, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000a00000/0x600000)=nil, 0x5000) 2018/04/21 01:40:56 executing program 5: mkdir(&(0x7f000022d000)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='tmpfs\x00', 0x0, &(0x7f0000ebcffe)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000480)='./file0/bus\x00', 0x0) rename(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='./file0/file0\x00') 2018/04/21 01:40:56 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x54001c84, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000a00000/0x600000)=nil, 0x5000) 2018/04/21 01:40:56 executing program 5: mkdir(&(0x7f000022d000)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='tmpfs\x00', 0x0, &(0x7f0000ebcffe)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000480)='./file0/bus\x00', 0x0) rename(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='./file0/file0\x00') 2018/04/21 01:40:56 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x54001c84, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000a00000/0x600000)=nil, 0x5000) 2018/04/21 01:40:56 executing program 5: mkdir(&(0x7f000022d000)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='tmpfs\x00', 0x0, &(0x7f0000ebcffe)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000480)='./file0/bus\x00', 0x0) rename(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='./file0/file0\x00') 2018/04/21 01:40:56 executing program 2: mkdir(&(0x7f000022d000)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='tmpfs\x00', 0x0, &(0x7f0000ebcffe)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000480)='./file0/bus\x00', 0x0) rename(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='./file0/file0\x00') 2018/04/21 01:40:57 executing program 5: mkdir(&(0x7f000022d000)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='tmpfs\x00', 0x0, &(0x7f0000ebcffe)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000480)='./file0/bus\x00', 0x0) rename(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='./file0/file0\x00') 2018/04/21 01:40:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f000006e000)="7f", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) ptrace$setopts(0x4206, r1, 0x5, 0x10) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 2018/04/21 01:40:57 executing program 2: mkdir(&(0x7f000022d000)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='tmpfs\x00', 0x0, &(0x7f0000ebcffe)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000480)='./file0/bus\x00', 0x0) rename(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='./file0/file0\x00') 2018/04/21 01:40:57 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f000006e000)="7f", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) ptrace$setopts(0x4206, r1, 0x5, 0x10) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 2018/04/21 01:40:58 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f000006e000)="7f", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) ptrace$setopts(0x4206, r1, 0x5, 0x10) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 2018/04/21 01:40:58 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @loopback=0x7f000001}, {0x2, 0x0, @multicast1=0xe0000001}, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x2e, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)="6c6f3a00000600"}) 2018/04/21 01:40:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f000006e000)="7f", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) ptrace$setopts(0x4206, r1, 0x5, 0x10) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 2018/04/21 01:40:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f000006e000)="7f", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) ptrace$setopts(0x4206, r1, 0x5, 0x10) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 2018/04/21 01:40:58 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3b, &(0x7f0000000080), &(0x7f0000013000)=0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/04/21 01:40:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000bc0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003e40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000a80)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000140)={0x60, r1, 0x921, 0x0, 0x0, {0x1}, [{{0x8, 0x1, r2}, {0x44, 0x2, [{0x51, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4}}, {0x8, 0x6}}}]}}]}, 0x60}, 0x1}, 0x0) 2018/04/21 01:40:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f000006e000)="7f", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) ptrace$setopts(0x4206, r1, 0x5, 0x10) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 2018/04/21 01:40:58 executing program 2: mkdir(&(0x7f000022d000)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='tmpfs\x00', 0x0, &(0x7f0000ebcffe)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000480)='./file0/bus\x00', 0x0) rename(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='./file0/file0\x00') 2018/04/21 01:40:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000bc0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003e40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000a80)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000140)={0x60, r1, 0x921, 0x0, 0x0, {0x1}, [{{0x8, 0x1, r2}, {0x44, 0x2, [{0x51, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4}}, {0x8, 0x6}}}]}}]}, 0x60}, 0x1}, 0x0) 2018/04/21 01:40:58 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @loopback=0x7f000001}, {0x2, 0x0, @multicast1=0xe0000001}, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x2e, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)="6c6f3a00000600"}) 2018/04/21 01:40:58 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f00003b8000)={0x10}, 0xc, &(0x7f00001ab000)={&(0x7f000084afd8)=@bridge_dellink={0x20, 0x11, 0x5c0dbf2e43ee85c7, 0x0, 0x0, {0x7}}, 0x20}, 0x1}, 0x0) 2018/04/21 01:40:58 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @loopback=0x7f000001}, {0x2, 0x0, @multicast1=0xe0000001}, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x2e, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)="6c6f3a00000600"}) 2018/04/21 01:40:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000bc0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003e40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000a80)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000140)={0x60, r1, 0x921, 0x0, 0x0, {0x1}, [{{0x8, 0x1, r2}, {0x44, 0x2, [{0x51, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4}}, {0x8, 0x6}}}]}}]}, 0x60}, 0x1}, 0x0) 2018/04/21 01:40:58 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f00003b8000)={0x10}, 0xc, &(0x7f00001ab000)={&(0x7f000084afd8)=@bridge_dellink={0x20, 0x11, 0x5c0dbf2e43ee85c7, 0x0, 0x0, {0x7}}, 0x20}, 0x1}, 0x0) 2018/04/21 01:40:58 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @loopback=0x7f000001}, {0x2, 0x0, @multicast1=0xe0000001}, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x2e, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)="6c6f3a00000600"}) 2018/04/21 01:40:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000bc0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003e40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000a80)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000140)={0x60, r1, 0x921, 0x0, 0x0, {0x1}, [{{0x8, 0x1, r2}, {0x44, 0x2, [{0x51, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4}}, {0x8, 0x6}}}]}}]}, 0x60}, 0x1}, 0x0) 2018/04/21 01:40:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f000006e000)="7f", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) ptrace$setopts(0x4206, r1, 0x5, 0x10) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 2018/04/21 01:40:59 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f00003b8000)={0x10}, 0xc, &(0x7f00001ab000)={&(0x7f000084afd8)=@bridge_dellink={0x20, 0x11, 0x5c0dbf2e43ee85c7, 0x0, 0x0, {0x7}}, 0x20}, 0x1}, 0x0) 2018/04/21 01:40:59 executing program 4: socket$inet6_sctp(0xa, 0x0, 0x84) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setitimer(0x0, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00008d6000), 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='attr/exec\x00') r1 = semget(0xffffffffffffffff, 0x4, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x480, 0x140, 0x140, 0x140, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000480), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @mac=@link_local={0x1, 0x80, 0xc2}, @multicast2=0xe0000002, @multicast1=0xe0000001}}}, {{@arp={@rand_addr, @multicast2=0xe0000002, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syzkaller1\x00', 'lo\x00'}, 0xf0, 0x118}, @unspec=@STANDARD={0x28}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2=0xe0000002, @multicast1=0xe0000001}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4d0) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000300)=0xe8) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000400)={{0x0, r2}}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2018/04/21 01:40:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {}, 0x8, {0x2, 0x0, @rand_addr}, 'syzkaller0\x00'}) r2 = socket(0x1000100000010, 0x2, 0x0) write(r2, &(0x7f0000000000)="1f0000001e0007f1ffffffe60802007702000600536b8d3d6c39080001454a", 0x1f) 2018/04/21 01:40:59 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3b, &(0x7f0000000080), &(0x7f0000013000)=0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/04/21 01:40:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f000006e000)="7f", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) ptrace$setopts(0x4206, r1, 0x5, 0x10) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 2018/04/21 01:40:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f000006e000)="7f", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) ptrace$setopts(0x4206, r1, 0x5, 0x10) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 2018/04/21 01:40:59 executing program 7: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x4, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, &(0x7f00000002c0)="fc"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000180)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f00000001c0)="79c8043c6ccb55ca6862aca6ef67049803539d252b8e60508820fc32d4ab0dd2d9f45b45168a3aeae2a18666f6a05aea6327c9e75b5f125706c853cdf16ec9e31eafd8f25a5e9cf7"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}}], 0x0, 0x0, &(0x7f0000000480)}) 2018/04/21 01:40:59 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f00003b8000)={0x10}, 0xc, &(0x7f00001ab000)={&(0x7f000084afd8)=@bridge_dellink={0x20, 0x11, 0x5c0dbf2e43ee85c7, 0x0, 0x0, {0x7}}, 0x20}, 0x1}, 0x0) 2018/04/21 01:40:59 executing program 5: io_setup(0xba, &(0x7f0000000000)=0x0) r1 = socket(0x2, 0x803, 0xff) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000180), 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)}]) 2018/04/21 01:40:59 executing program 4: socket$inet6_sctp(0xa, 0x0, 0x84) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setitimer(0x0, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00008d6000), 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='attr/exec\x00') r1 = semget(0xffffffffffffffff, 0x4, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x480, 0x140, 0x140, 0x140, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000480), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @mac=@link_local={0x1, 0x80, 0xc2}, @multicast2=0xe0000002, @multicast1=0xe0000001}}}, {{@arp={@rand_addr, @multicast2=0xe0000002, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syzkaller1\x00', 'lo\x00'}, 0xf0, 0x118}, @unspec=@STANDARD={0x28}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2=0xe0000002, @multicast1=0xe0000001}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4d0) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000300)=0xe8) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000400)={{0x0, r2}}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2018/04/21 01:40:59 executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setitimer(0x0, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00008d6000), 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='attr/exec\x00') r1 = semget(0xffffffffffffffff, 0x4, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x480, 0x140, 0x140, 0x140, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000480), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @mac=@link_local={0x1, 0x80, 0xc2}, @multicast2=0xe0000002, @multicast1=0xe0000001}}}, {{@arp={@rand_addr, @multicast2=0xe0000002, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syzkaller1\x00', 'lo\x00'}, 0xf0, 0x118}, @unspec=@STANDARD={0x28}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2=0xe0000002, @multicast1=0xe0000001}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4d0) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000300)=0xe8) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000400)={{0x0, r2}}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2018/04/21 01:40:59 executing program 5: io_setup(0xba, &(0x7f0000000000)=0x0) r1 = socket(0x2, 0x803, 0xff) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000180), 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)}]) 2018/04/21 01:40:59 executing program 4: socket$inet6_sctp(0xa, 0x0, 0x84) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setitimer(0x0, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00008d6000), 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='attr/exec\x00') r1 = semget(0xffffffffffffffff, 0x4, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x480, 0x140, 0x140, 0x140, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000480), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @mac=@link_local={0x1, 0x80, 0xc2}, @multicast2=0xe0000002, @multicast1=0xe0000001}}}, {{@arp={@rand_addr, @multicast2=0xe0000002, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syzkaller1\x00', 'lo\x00'}, 0xf0, 0x118}, @unspec=@STANDARD={0x28}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2=0xe0000002, @multicast1=0xe0000001}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4d0) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000300)=0xe8) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000400)={{0x0, r2}}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2018/04/21 01:40:59 executing program 5: io_setup(0xba, &(0x7f0000000000)=0x0) r1 = socket(0x2, 0x803, 0xff) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000180), 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)}]) 2018/04/21 01:40:59 executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setitimer(0x0, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00008d6000), 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='attr/exec\x00') r1 = semget(0xffffffffffffffff, 0x4, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x480, 0x140, 0x140, 0x140, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000480), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @mac=@link_local={0x1, 0x80, 0xc2}, @multicast2=0xe0000002, @multicast1=0xe0000001}}}, {{@arp={@rand_addr, @multicast2=0xe0000002, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syzkaller1\x00', 'lo\x00'}, 0xf0, 0x118}, @unspec=@STANDARD={0x28}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2=0xe0000002, @multicast1=0xe0000001}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4d0) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000300)=0xe8) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000400)={{0x0, r2}}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 183.398806] binder_alloc: binder_alloc_mmap_handler: 13735 20ffb000-20ffd000 already mapped failed -16 [ 183.419376] binder: BINDER_SET_CONTEXT_MGR already set [ 183.427513] binder_alloc: 13735: binder_alloc_buf, no vma [ 183.427765] binder: 13735:13737 ioctl 40046207 0 returned -16 [ 183.433519] binder: 13735:13784 transaction failed 29189/-3, size 0-0 line 2963 2018/04/21 01:41:00 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3b, &(0x7f0000000080), &(0x7f0000013000)=0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/04/21 01:41:00 executing program 0: r0 = fanotify_init(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000000)) 2018/04/21 01:41:00 executing program 7: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x4, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, &(0x7f00000002c0)="fc"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000180)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f00000001c0)="79c8043c6ccb55ca6862aca6ef67049803539d252b8e60508820fc32d4ab0dd2d9f45b45168a3aeae2a18666f6a05aea6327c9e75b5f125706c853cdf16ec9e31eafd8f25a5e9cf7"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}}], 0x0, 0x0, &(0x7f0000000480)}) 2018/04/21 01:41:00 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x4, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, &(0x7f00000002c0)="fc"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000180)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f00000001c0)="79c8043c6ccb55ca6862aca6ef67049803539d252b8e60508820fc32d4ab0dd2d9f45b45168a3aeae2a18666f6a05aea6327c9e75b5f125706c853cdf16ec9e31eafd8f25a5e9cf7"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}}], 0x0, 0x0, &(0x7f0000000480)}) 2018/04/21 01:41:00 executing program 5: io_setup(0xba, &(0x7f0000000000)=0x0) r1 = socket(0x2, 0x803, 0xff) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000180), 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)}]) 2018/04/21 01:41:00 executing program 4: socket$inet6_sctp(0xa, 0x0, 0x84) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setitimer(0x0, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00008d6000), 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='attr/exec\x00') r1 = semget(0xffffffffffffffff, 0x4, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x480, 0x140, 0x140, 0x140, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000480), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @mac=@link_local={0x1, 0x80, 0xc2}, @multicast2=0xe0000002, @multicast1=0xe0000001}}}, {{@arp={@rand_addr, @multicast2=0xe0000002, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syzkaller1\x00', 'lo\x00'}, 0xf0, 0x118}, @unspec=@STANDARD={0x28}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2=0xe0000002, @multicast1=0xe0000001}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4d0) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000300)=0xe8) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000400)={{0x0, r2}}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2018/04/21 01:41:00 executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setitimer(0x0, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00008d6000), 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='attr/exec\x00') r1 = semget(0xffffffffffffffff, 0x4, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x480, 0x140, 0x140, 0x140, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000480), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @mac=@link_local={0x1, 0x80, 0xc2}, @multicast2=0xe0000002, @multicast1=0xe0000001}}}, {{@arp={@rand_addr, @multicast2=0xe0000002, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syzkaller1\x00', 'lo\x00'}, 0xf0, 0x118}, @unspec=@STANDARD={0x28}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2=0xe0000002, @multicast1=0xe0000001}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4d0) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000300)=0xe8) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000400)={{0x0, r2}}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2018/04/21 01:41:00 executing program 3: syz_emit_ethernet(0x2e, &(0x7f0000000480)={@random="b100485caa2a", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000003, '\b\a\x00\x00'}}}}}, &(0x7f00000004c0)) [ 183.451971] binder: 13735:13784 got reply transaction with no transaction stack [ 183.459698] binder: 13735:13784 transaction failed 29201/-71, size 0-0 line 2763 [ 183.479515] binder: undelivered TRANSACTION_ERROR: 29201 [ 183.485268] binder: undelivered TRANSACTION_COMPLETE 2018/04/21 01:41:00 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x4, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, &(0x7f00000002c0)="fc"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000180)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f00000001c0)="79c8043c6ccb55ca6862aca6ef67049803539d252b8e60508820fc32d4ab0dd2d9f45b45168a3aeae2a18666f6a05aea6327c9e75b5f125706c853cdf16ec9e31eafd8f25a5e9cf7"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}}], 0x0, 0x0, &(0x7f0000000480)}) 2018/04/21 01:41:00 executing program 0: r0 = fanotify_init(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000000)) 2018/04/21 01:41:00 executing program 3: syz_emit_ethernet(0x2e, &(0x7f0000000480)={@random="b100485caa2a", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000003, '\b\a\x00\x00'}}}}}, &(0x7f00000004c0)) 2018/04/21 01:41:00 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x4, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, &(0x7f00000002c0)="fc"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000180)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f00000001c0)="79c8043c6ccb55ca6862aca6ef67049803539d252b8e60508820fc32d4ab0dd2d9f45b45168a3aeae2a18666f6a05aea6327c9e75b5f125706c853cdf16ec9e31eafd8f25a5e9cf7"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}}], 0x0, 0x0, &(0x7f0000000480)}) 2018/04/21 01:41:00 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x4, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, &(0x7f00000002c0)="fc"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000180)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f00000001c0)="79c8043c6ccb55ca6862aca6ef67049803539d252b8e60508820fc32d4ab0dd2d9f45b45168a3aeae2a18666f6a05aea6327c9e75b5f125706c853cdf16ec9e31eafd8f25a5e9cf7"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 183.623278] binder: BINDER_SET_CONTEXT_MGR already set [ 183.639493] binder: 13806:13808 ioctl 40046207 0 returned -16 [ 183.772687] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/21 01:41:00 executing program 0: r0 = fanotify_init(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000000)) 2018/04/21 01:41:00 executing program 3: syz_emit_ethernet(0x2e, &(0x7f0000000480)={@random="b100485caa2a", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000003, '\b\a\x00\x00'}}}}}, &(0x7f00000004c0)) [ 183.798837] binder: 13812:13817 ioctl 40046207 0 returned -16 [ 183.816100] binder: BINDER_SET_CONTEXT_MGR already set [ 183.823296] binder: BINDER_SET_CONTEXT_MGR already set [ 183.826516] binder: 13818:13823 ioctl 40046207 0 returned -16 [ 183.829405] binder: 13822:13824 ioctl 40046207 0 returned -16 2018/04/21 01:41:00 executing program 0: r0 = fanotify_init(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000000)) [ 184.379059] binder: undelivered TRANSACTION_COMPLETE [ 184.384388] binder: send failed reply for transaction 44 to 13806:13808 [ 184.391765] binder: send failed reply for transaction 45 to 13812:13817 [ 184.398897] binder: send failed reply for transaction 46 to 13818:13823 [ 184.406186] binder: send failed reply for transaction 47 to 13822:13824 [ 184.421687] binder: 13806:13838 got reply transaction with no transaction stack [ 184.429422] binder: 13806:13838 transaction failed 29201/-71, size 0-0 line 2763 [ 184.549884] binder: undelivered TRANSACTION_ERROR: 29201 [ 184.557298] binder: 13812:13841 got reply transaction with no transaction stack [ 184.564896] binder: 13812:13841 transaction failed 29201/-71, size 0-0 line 2763 [ 184.606813] binder: 13818:13842 got reply transaction with no transaction stack [ 184.610921] binder: 13822:13843 got reply transaction with no transaction stack [ 184.614377] binder: 13818:13842 transaction failed 29201/-71, size 0-0 line 2763 [ 184.621860] binder: 13822:13843 transaction failed 29201/-71, size 0-0 line 2763 [ 184.685886] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/21 01:41:01 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x4, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, &(0x7f00000002c0)="fc"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000180)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f00000001c0)="79c8043c6ccb55ca6862aca6ef67049803539d252b8e60508820fc32d4ab0dd2d9f45b45168a3aeae2a18666f6a05aea6327c9e75b5f125706c853cdf16ec9e31eafd8f25a5e9cf7"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}}], 0x0, 0x0, &(0x7f0000000480)}) 2018/04/21 01:41:01 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x4, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, &(0x7f00000002c0)="fc"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000180)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f00000001c0)="79c8043c6ccb55ca6862aca6ef67049803539d252b8e60508820fc32d4ab0dd2d9f45b45168a3aeae2a18666f6a05aea6327c9e75b5f125706c853cdf16ec9e31eafd8f25a5e9cf7"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}}], 0x0, 0x0, &(0x7f0000000480)}) 2018/04/21 01:41:01 executing program 7: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x4, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, &(0x7f00000002c0)="fc"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000180)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f00000001c0)="79c8043c6ccb55ca6862aca6ef67049803539d252b8e60508820fc32d4ab0dd2d9f45b45168a3aeae2a18666f6a05aea6327c9e75b5f125706c853cdf16ec9e31eafd8f25a5e9cf7"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}}], 0x0, 0x0, &(0x7f0000000480)}) 2018/04/21 01:41:01 executing program 6: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="400000000200000019000000dc0100002c000000010000000000000000000000002000000020000040000000000000003d5cbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000001c0)) 2018/04/21 01:41:01 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x4, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, &(0x7f00000002c0)="fc"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000180)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f00000001c0)="79c8043c6ccb55ca6862aca6ef67049803539d252b8e60508820fc32d4ab0dd2d9f45b45168a3aeae2a18666f6a05aea6327c9e75b5f125706c853cdf16ec9e31eafd8f25a5e9cf7"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}}], 0x0, 0x0, &(0x7f0000000480)}) 2018/04/21 01:41:01 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x4, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, &(0x7f00000002c0)="fc"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000180)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f00000001c0)="79c8043c6ccb55ca6862aca6ef67049803539d252b8e60508820fc32d4ab0dd2d9f45b45168a3aeae2a18666f6a05aea6327c9e75b5f125706c853cdf16ec9e31eafd8f25a5e9cf7"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}}], 0x0, 0x0, &(0x7f0000000480)}) 2018/04/21 01:41:01 executing program 3: syz_emit_ethernet(0x2e, &(0x7f0000000480)={@random="b100485caa2a", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000003, '\b\a\x00\x00'}}}}}, &(0x7f00000004c0)) 2018/04/21 01:41:01 executing program 0: get_mempolicy(&(0x7f000000c000), &(0x7f0000fd5000), 0x7ffd, &(0x7f0000000000/0x2000)=nil, 0x1aa) [ 184.736382] binder: undelivered TRANSACTION_ERROR: 29201 [ 184.753802] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/21 01:41:01 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) read(r0, &(0x7f0000e6d000)=""/384, 0x180) signalfd(r0, &(0x7f0000432ff8)={0xfffffffffffffffe}, 0x8) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) 2018/04/21 01:41:01 executing program 0: get_mempolicy(&(0x7f000000c000), &(0x7f0000fd5000), 0x7ffd, &(0x7f0000000000/0x2000)=nil, 0x1aa) [ 184.818954] binder: BINDER_SET_CONTEXT_MGR already set [ 184.836416] binder: 13849:13852 ioctl 40046207 0 returned -16 [ 184.843105] binder: BINDER_SET_CONTEXT_MGR already set [ 184.856204] binder: 13846:13858 ioctl 40046207 0 returned -16 [ 184.863144] EXT4-fs (loop6): can't read group descriptor 0 2018/04/21 01:41:01 executing program 6: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="400000000200000019000000dc0100002c000000010000000000000000000000002000000020000040000000000000003d5cbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000001c0)) [ 184.890995] EXT4-fs (loop6): can't read group descriptor 0 [ 184.918399] binder: BINDER_SET_CONTEXT_MGR already set [ 184.925169] binder: 13860:13864 ioctl 40046207 0 returned -16 [ 184.985083] binder: BINDER_SET_CONTEXT_MGR already set [ 184.990725] binder: 13866:13869 ioctl 40046207 0 returned -16 2018/04/21 01:41:01 executing program 0: get_mempolicy(&(0x7f000000c000), &(0x7f0000fd5000), 0x7ffd, &(0x7f0000000000/0x2000)=nil, 0x1aa) 2018/04/21 01:41:01 executing program 6: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="400000000200000019000000dc0100002c000000010000000000000000000000002000000020000040000000000000003d5cbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000001c0)) [ 185.092252] EXT4-fs (loop6): can't read group descriptor 0 2018/04/21 01:41:01 executing program 0: get_mempolicy(&(0x7f000000c000), &(0x7f0000fd5000), 0x7ffd, &(0x7f0000000000/0x2000)=nil, 0x1aa) 2018/04/21 01:41:02 executing program 6: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="400000000200000019000000dc0100002c000000010000000000000000000000002000000020000040000000000000003d5cbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000001c0)) 2018/04/21 01:41:02 executing program 0: sendto$unix(0xffffffffffffffff, &(0x7f0000000080)="6b7c57267380755c", 0x8, 0x0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8000000000000060, &(0x7f0000000040), 0x0) [ 185.276484] EXT4-fs (loop6): can't read group descriptor 0 [ 185.443912] EXT4-fs (loop6): can't read group descriptor 0 [ 185.610146] binder: 13849:13908 got reply transaction with no transaction stack [ 185.617763] binder: 13849:13908 transaction failed 29201/-71, size 0-0 line 2763 [ 185.628384] binder: 13846:13910 got reply transaction with no transaction stack [ 185.635904] binder: 13846:13910 transaction failed 29201/-71, size 0-0 line 2763 [ 185.638532] binder: undelivered TRANSACTION_COMPLETE [ 185.648816] binder: send failed reply for transaction 55 to 13849:13852 [ 185.655646] binder: send failed reply for transaction 56 to 13846:13858 [ 185.662468] binder: send failed reply for transaction 57 to 13860:13864 [ 185.669302] binder: send failed reply for transaction 58 to 13866:13869 [ 185.683767] binder: undelivered TRANSACTION_ERROR: 29201 [ 185.692503] binder: undelivered TRANSACTION_ERROR: 29201 [ 185.715090] binder: 13860:13911 got reply transaction with no transaction stack [ 185.722760] binder: 13860:13911 transaction failed 29201/-71, size 0-0 line 2763 [ 185.781965] binder: 13866:13912 got reply transaction with no transaction stack [ 185.789600] binder: 13866:13912 transaction failed 29201/-71, size 0-0 line 2763 [ 185.855957] binder: undelivered TRANSACTION_ERROR: 29201 [ 185.913975] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/21 01:41:02 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x4, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, &(0x7f00000002c0)="fc"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000180)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f00000001c0)="79c8043c6ccb55ca6862aca6ef67049803539d252b8e60508820fc32d4ab0dd2d9f45b45168a3aeae2a18666f6a05aea6327c9e75b5f125706c853cdf16ec9e31eafd8f25a5e9cf7"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}}], 0x0, 0x0, &(0x7f0000000480)}) 2018/04/21 01:41:02 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) read(r0, &(0x7f0000e6d000)=""/384, 0x180) signalfd(r0, &(0x7f0000432ff8)={0xfffffffffffffffe}, 0x8) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) 2018/04/21 01:41:02 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x4, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, &(0x7f00000002c0)="fc"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000180)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f00000001c0)="79c8043c6ccb55ca6862aca6ef67049803539d252b8e60508820fc32d4ab0dd2d9f45b45168a3aeae2a18666f6a05aea6327c9e75b5f125706c853cdf16ec9e31eafd8f25a5e9cf7"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}}], 0x0, 0x0, &(0x7f0000000480)}) 2018/04/21 01:41:02 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x4, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, &(0x7f00000002c0)="fc"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000180)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f00000001c0)="79c8043c6ccb55ca6862aca6ef67049803539d252b8e60508820fc32d4ab0dd2d9f45b45168a3aeae2a18666f6a05aea6327c9e75b5f125706c853cdf16ec9e31eafd8f25a5e9cf7"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}}], 0x0, 0x0, &(0x7f0000000480)}) 2018/04/21 01:41:02 executing program 0: sendto$unix(0xffffffffffffffff, &(0x7f0000000080)="6b7c57267380755c", 0x8, 0x0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8000000000000060, &(0x7f0000000040), 0x0) 2018/04/21 01:41:02 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x4, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, &(0x7f00000002c0)="fc"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000180)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f00000001c0)="79c8043c6ccb55ca6862aca6ef67049803539d252b8e60508820fc32d4ab0dd2d9f45b45168a3aeae2a18666f6a05aea6327c9e75b5f125706c853cdf16ec9e31eafd8f25a5e9cf7"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}}], 0x0, 0x0, &(0x7f0000000480)}) 2018/04/21 01:41:02 executing program 6: capset(&(0x7f0000594ff8)={0x19980330}, &(0x7f0000244000)) setgid(0x0) 2018/04/21 01:41:02 executing program 7: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x4, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, &(0x7f00000002c0)="fc"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000180)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f00000001c0)="79c8043c6ccb55ca6862aca6ef67049803539d252b8e60508820fc32d4ab0dd2d9f45b45168a3aeae2a18666f6a05aea6327c9e75b5f125706c853cdf16ec9e31eafd8f25a5e9cf7"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 186.110427] binder: BINDER_SET_CONTEXT_MGR already set [ 186.130392] binder: BINDER_SET_CONTEXT_MGR already set [ 186.136000] binder: BINDER_SET_CONTEXT_MGR already set [ 186.138467] binder: 13922:13929 ioctl 40046207 0 returned -16 [ 186.144118] binder: 13923:13931 ioctl 40046207 0 returned -16 [ 186.154239] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/21 01:41:02 executing program 0: sendto$unix(0xffffffffffffffff, &(0x7f0000000080)="6b7c57267380755c", 0x8, 0x0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8000000000000060, &(0x7f0000000040), 0x0) 2018/04/21 01:41:02 executing program 6: capset(&(0x7f0000594ff8)={0x19980330}, &(0x7f0000244000)) setgid(0x0) [ 186.154619] binder: 13925:13932 ioctl 40046207 0 returned -16 [ 186.164476] binder: 13926:13930 ioctl 40046207 0 returned -16 2018/04/21 01:41:03 executing program 0: sendto$unix(0xffffffffffffffff, &(0x7f0000000080)="6b7c57267380755c", 0x8, 0x0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8000000000000060, &(0x7f0000000040), 0x0) 2018/04/21 01:41:03 executing program 6: capset(&(0x7f0000594ff8)={0x19980330}, &(0x7f0000244000)) setgid(0x0) 2018/04/21 01:41:03 executing program 6: capset(&(0x7f0000594ff8)={0x19980330}, &(0x7f0000244000)) setgid(0x0) 2018/04/21 01:41:03 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) read(r0, &(0x7f0000e6d000)=""/384, 0x180) signalfd(r0, &(0x7f0000432ff8)={0xfffffffffffffffe}, 0x8) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) 2018/04/21 01:41:03 executing program 6: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) read(r0, &(0x7f0000e6d000)=""/384, 0x180) signalfd(r0, &(0x7f0000432ff8)={0xfffffffffffffffe}, 0x8) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) [ 186.908855] binder: 13922:13959 got reply transaction with no transaction stack [ 186.916486] binder: 13922:13959 transaction failed 29201/-71, size 0-0 line 2763 [ 186.921330] binder: 13926:13961 got reply transaction with no transaction stack [ 186.927918] binder: 13925:13963 got reply transaction with no transaction stack [ 186.931623] binder: 13926:13961 transaction failed 29201/-71, size 0-0 line 2763 [ 186.931750] binder: 13923:13962 got reply transaction with no transaction stack 2018/04/21 01:41:03 executing program 1: r0 = socket(0x200000000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="2400000024007f0000001200000401000d0ff6ff010000000000f300f1ffffff1300ff10", 0x24) [ 186.939137] binder: 13925:13963 transaction failed 29201/-71, size 0-0 line 2763 [ 186.958106] binder: undelivered TRANSACTION_COMPLETE [ 186.961864] binder: 13923:13962 transaction failed 29201/-71, size 0-0 line 2763 [ 186.974944] binder: send failed reply for transaction 66 to 13923:13931 [ 186.981839] binder: send failed reply for transaction 67 to 13922:13929 [ 186.988685] binder: send failed reply for transaction 68 to 13925:13932 [ 186.995519] binder: send failed reply for transaction 69 to 13926:13930 [ 187.021816] binder: undelivered TRANSACTION_ERROR: 29201 [ 187.036278] binder: undelivered TRANSACTION_ERROR: 29201 [ 187.045416] binder: undelivered TRANSACTION_ERROR: 29201 [ 187.051617] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/21 01:41:04 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) listen(r0, 0x0) listen(r0, 0x9) 2018/04/21 01:41:04 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000001b80)=@query_route={0x5, 0x10, 0xfa00, {&(0x7f0000000440)}}, 0x18) 2018/04/21 01:41:04 executing program 1: r0 = socket(0x200000000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="2400000024007f0000001200000401000d0ff6ff010000000000f300f1ffffff1300ff10", 0x24) 2018/04/21 01:41:04 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) 2018/04/21 01:41:04 executing program 6: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) read(r0, &(0x7f0000e6d000)=""/384, 0x180) signalfd(r0, &(0x7f0000432ff8)={0xfffffffffffffffe}, 0x8) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) 2018/04/21 01:41:04 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) read(r0, &(0x7f0000e6d000)=""/384, 0x180) signalfd(r0, &(0x7f0000432ff8)={0xfffffffffffffffe}, 0x8) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) 2018/04/21 01:41:04 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) read(r0, &(0x7f0000e6d000)=""/384, 0x180) signalfd(r0, &(0x7f0000432ff8)={0xfffffffffffffffe}, 0x8) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) 2018/04/21 01:41:04 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x3, 0x4d0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, &(0x7f0000000240), &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x11, 0x0, 0x0, 'bpq0\x00', 'syz_tun\x00', 'sit0\x00', '\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @empty, [], 0x70, 0xe8, 0x118}, [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}, @common=@ERROR={'ERROR\x00', 0x20, {"ae316641a7a254ea8876227698dec7d11e79df7f68f2b62115c4b117b814"}}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}, {{{0x15, 0x0, 0x0, 'ip6gre0\x00', 'bridge0\x00', 'tunl0\x00', 'bpq0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x130, 0x130, 0x178, [@ip6={'ip6\x00', 0x50, {{@mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}}}}, @limit={'limit\x00', 0x20}]}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "73797e6b61b7000200", 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x128, 0x160, 0x1b0, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, @mark_m={'mark_m\x00', 0x18}]}, [@common=@dnat={'dnat\x00', 0x10, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x548) 2018/04/21 01:41:04 executing program 1: r0 = socket(0x200000000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="2400000024007f0000001200000401000d0ff6ff010000000000f300f1ffffff1300ff10", 0x24) 2018/04/21 01:41:04 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x3, 0x4d0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, &(0x7f0000000240), &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x11, 0x0, 0x0, 'bpq0\x00', 'syz_tun\x00', 'sit0\x00', '\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @empty, [], 0x70, 0xe8, 0x118}, [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}, @common=@ERROR={'ERROR\x00', 0x20, {"ae316641a7a254ea8876227698dec7d11e79df7f68f2b62115c4b117b814"}}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}, {{{0x15, 0x0, 0x0, 'ip6gre0\x00', 'bridge0\x00', 'tunl0\x00', 'bpq0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x130, 0x130, 0x178, [@ip6={'ip6\x00', 0x50, {{@mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}}}}, @limit={'limit\x00', 0x20}]}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "73797e6b61b7000200", 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x128, 0x160, 0x1b0, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, @mark_m={'mark_m\x00', 0x18}]}, [@common=@dnat={'dnat\x00', 0x10, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x548) 2018/04/21 01:41:04 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) 2018/04/21 01:41:05 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) listen(r0, 0x0) listen(r0, 0x9) 2018/04/21 01:41:05 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000001b80)=@query_route={0x5, 0x10, 0xfa00, {&(0x7f0000000440)}}, 0x18) 2018/04/21 01:41:05 executing program 1: r0 = socket(0x200000000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="2400000024007f0000001200000401000d0ff6ff010000000000f300f1ffffff1300ff10", 0x24) 2018/04/21 01:41:05 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) 2018/04/21 01:41:05 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x3, 0x4d0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, &(0x7f0000000240), &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x11, 0x0, 0x0, 'bpq0\x00', 'syz_tun\x00', 'sit0\x00', '\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @empty, [], 0x70, 0xe8, 0x118}, [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}, @common=@ERROR={'ERROR\x00', 0x20, {"ae316641a7a254ea8876227698dec7d11e79df7f68f2b62115c4b117b814"}}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}, {{{0x15, 0x0, 0x0, 'ip6gre0\x00', 'bridge0\x00', 'tunl0\x00', 'bpq0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x130, 0x130, 0x178, [@ip6={'ip6\x00', 0x50, {{@mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}}}}, @limit={'limit\x00', 0x20}]}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "73797e6b61b7000200", 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x128, 0x160, 0x1b0, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, @mark_m={'mark_m\x00', 0x18}]}, [@common=@dnat={'dnat\x00', 0x10, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x548) 2018/04/21 01:41:05 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) read(r0, &(0x7f0000e6d000)=""/384, 0x180) signalfd(r0, &(0x7f0000432ff8)={0xfffffffffffffffe}, 0x8) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) 2018/04/21 01:41:05 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) read(r0, &(0x7f0000e6d000)=""/384, 0x180) signalfd(r0, &(0x7f0000432ff8)={0xfffffffffffffffe}, 0x8) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) 2018/04/21 01:41:05 executing program 6: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) read(r0, &(0x7f0000e6d000)=""/384, 0x180) signalfd(r0, &(0x7f0000432ff8)={0xfffffffffffffffe}, 0x8) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) 2018/04/21 01:41:05 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) listen(r0, 0x0) listen(r0, 0x9) 2018/04/21 01:41:05 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) 2018/04/21 01:41:05 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x3, 0x4d0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, &(0x7f0000000240), &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x11, 0x0, 0x0, 'bpq0\x00', 'syz_tun\x00', 'sit0\x00', '\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @empty, [], 0x70, 0xe8, 0x118}, [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}, @common=@ERROR={'ERROR\x00', 0x20, {"ae316641a7a254ea8876227698dec7d11e79df7f68f2b62115c4b117b814"}}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}, {{{0x15, 0x0, 0x0, 'ip6gre0\x00', 'bridge0\x00', 'tunl0\x00', 'bpq0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x130, 0x130, 0x178, [@ip6={'ip6\x00', 0x50, {{@mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}}}}, @limit={'limit\x00', 0x20}]}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, "73797e6b61b7000200", 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x128, 0x160, 0x1b0, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, @mark_m={'mark_m\x00', 0x18}]}, [@common=@dnat={'dnat\x00', 0x10, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x548) 2018/04/21 01:41:05 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) listen(r0, 0x0) listen(r0, 0x9) 2018/04/21 01:41:05 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000001b80)=@query_route={0x5, 0x10, 0xfa00, {&(0x7f0000000440)}}, 0x18) 2018/04/21 01:41:05 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) listen(r0, 0x0) listen(r0, 0x9) 2018/04/21 01:41:05 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) 2018/04/21 01:41:05 executing program 7: syz_emit_ethernet(0xf, &(0x7f0000000140)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@generic={0x0, "b3"}}}, &(0x7f0000000100)={0x2, 0x3, [0x0, 0xd, 0x1]}) 2018/04/21 01:41:05 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) listen(r0, 0x0) listen(r0, 0x9) 2018/04/21 01:41:05 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000001b80)=@query_route={0x5, 0x10, 0xfa00, {&(0x7f0000000440)}}, 0x18) 2018/04/21 01:41:05 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) listen(r0, 0x0) listen(r0, 0x9) 2018/04/21 01:41:05 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) 2018/04/21 01:41:05 executing program 7: syz_emit_ethernet(0xf, &(0x7f0000000140)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@generic={0x0, "b3"}}}, &(0x7f0000000100)={0x2, 0x3, [0x0, 0xd, 0x1]}) 2018/04/21 01:41:06 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) 2018/04/21 01:41:06 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00004da000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) syz_emit_ethernet(0xe, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="d8727266ce8d", [], {@generic={0x800}}}, 0x0) 2018/04/21 01:41:06 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x42000) dup2(r0, r1) 2018/04/21 01:41:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x21d}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xffffffffffffffcc, &(0x7f0000001300)=""/251}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x16, 0x88, 0x0, &(0x7f0000000180)) 2018/04/21 01:41:06 executing program 7: syz_emit_ethernet(0xf, &(0x7f0000000140)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@generic={0x0, "b3"}}}, &(0x7f0000000100)={0x2, 0x3, [0x0, 0xd, 0x1]}) 2018/04/21 01:41:06 executing program 6: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x203}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x2, 0x100000000000000, 0x20, &(0x7f0000000180)) 2018/04/21 01:41:06 executing program 0: r0 = socket(0x10, 0x802, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000040)="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", 0xfc) 2018/04/21 01:41:06 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) listen(r0, 0x0) recvfrom(r0, &(0x7f0000000080)=""/187, 0xbb, 0x0, 0x0, 0x0) 2018/04/21 01:41:06 executing program 7: syz_emit_ethernet(0xf, &(0x7f0000000140)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@generic={0x0, "b3"}}}, &(0x7f0000000100)={0x2, 0x3, [0x0, 0xd, 0x1]}) 2018/04/21 01:41:06 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x42000) dup2(r0, r1) [ 189.451472] netlink: 180 bytes leftover after parsing attributes in process `syz-executor0'. [ 189.492815] netlink: 180 bytes leftover after parsing attributes in process `syz-executor0'. 2018/04/21 01:41:06 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) listen(r0, 0x0) recvfrom(r0, &(0x7f0000000080)=""/187, 0xbb, 0x0, 0x0, 0x0) 2018/04/21 01:41:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x21d}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xffffffffffffffcc, &(0x7f0000001300)=""/251}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x16, 0x88, 0x0, &(0x7f0000000180)) 2018/04/21 01:41:06 executing program 6: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x203}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x2, 0x100000000000000, 0x20, &(0x7f0000000180)) 2018/04/21 01:41:06 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x42000) dup2(r0, r1) 2018/04/21 01:41:06 executing program 0: r0 = socket(0x10, 0x802, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000040)="fc0000004a000700ab092500090007000aab80ff000000000000369321000100ff0100000005001a0000000000036915fa2c1ec28656aaa79ef4aa1f62a738e30700000000008c0000036c6c256f1a272f2e117c22ebc20521400000000000a934d07302ade01720d7d5bbc91a3e9e68d104c16593d8452e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f687f70c9ddef2fe082038f4f8b29d3ef44b2c3e7eb9a13183170e5bbab2ccd243f295ed7cc5839380ef8fecbc7c3f2eeb57d43dd16b17e583df150c33880f411f46a6b567b4d5715505e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33", 0xfc) 2018/04/21 01:41:06 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x21d}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xffffffffffffffcc, &(0x7f0000001300)=""/251}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x16, 0x88, 0x0, &(0x7f0000000180)) 2018/04/21 01:41:06 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00004da000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) syz_emit_ethernet(0xe, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="d8727266ce8d", [], {@generic={0x800}}}, 0x0) 2018/04/21 01:41:06 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) listen(r0, 0x0) recvfrom(r0, &(0x7f0000000080)=""/187, 0xbb, 0x0, 0x0, 0x0) 2018/04/21 01:41:06 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00004da000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) syz_emit_ethernet(0xe, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="d8727266ce8d", [], {@generic={0x800}}}, 0x0) 2018/04/21 01:41:06 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) listen(r0, 0x0) recvfrom(r0, &(0x7f0000000080)=""/187, 0xbb, 0x0, 0x0, 0x0) [ 189.748762] netlink: 180 bytes leftover after parsing attributes in process `syz-executor0'. 2018/04/21 01:41:06 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x42000) dup2(r0, r1) 2018/04/21 01:41:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x21d}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xffffffffffffffcc, &(0x7f0000001300)=""/251}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x16, 0x88, 0x0, &(0x7f0000000180)) 2018/04/21 01:41:06 executing program 6: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x203}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x2, 0x100000000000000, 0x20, &(0x7f0000000180)) 2018/04/21 01:41:06 executing program 0: r0 = socket(0x10, 0x802, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000040)="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", 0xfc) [ 190.002521] netlink: 180 bytes leftover after parsing attributes in process `syz-executor0'. 2018/04/21 01:41:06 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x21d}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xffffffffffffffcc, &(0x7f0000001300)=""/251}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x16, 0x88, 0x0, &(0x7f0000000180)) 2018/04/21 01:41:06 executing program 6: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x203}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x2, 0x100000000000000, 0x20, &(0x7f0000000180)) 2018/04/21 01:41:06 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) listen(r0, 0x0) recvfrom(r0, &(0x7f0000000080)=""/187, 0xbb, 0x0, 0x0, 0x0) 2018/04/21 01:41:06 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) listen(r0, 0x0) recvfrom(r0, &(0x7f0000000080)=""/187, 0xbb, 0x0, 0x0, 0x0) 2018/04/21 01:41:06 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00004da000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) syz_emit_ethernet(0xe, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="d8727266ce8d", [], {@generic={0x800}}}, 0x0) 2018/04/21 01:41:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x21d}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xffffffffffffffcc, &(0x7f0000001300)=""/251}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x16, 0x88, 0x0, &(0x7f0000000180)) 2018/04/21 01:41:06 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) listen(r0, 0x0) recvfrom(r0, &(0x7f0000000080)=""/187, 0xbb, 0x0, 0x0, 0x0) 2018/04/21 01:41:06 executing program 0: r0 = socket(0x10, 0x802, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000040)="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", 0xfc) 2018/04/21 01:41:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x21d}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xffffffffffffffcc, &(0x7f0000001300)=""/251}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x16, 0x88, 0x0, &(0x7f0000000180)) 2018/04/21 01:41:06 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) listen(r0, 0x0) recvfrom(r0, &(0x7f0000000080)=""/187, 0xbb, 0x0, 0x0, 0x0) 2018/04/21 01:41:06 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) dup2(r1, r0) 2018/04/21 01:41:06 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x21d}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xffffffffffffffcc, &(0x7f0000001300)=""/251}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x16, 0x88, 0x0, &(0x7f0000000180)) 2018/04/21 01:41:07 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) listen(r0, 0x0) recvfrom(r0, &(0x7f0000000080)=""/187, 0xbb, 0x0, 0x0, 0x0) 2018/04/21 01:41:07 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000b8fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x302, &(0x7f0000e4b000)=0x0) sendmsg$alg(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) 2018/04/21 01:41:07 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f00000023c0)=&(0x7f0000000100)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000f82ffc)) [ 190.255646] netlink: 180 bytes leftover after parsing attributes in process `syz-executor0'. 2018/04/21 01:41:07 executing program 0: r0 = socket(0x8000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) 2018/04/21 01:41:07 executing program 7: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{&(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000180)=""/182, 0xb6}}], 0x1, 0x0, &(0x7f0000000280)={0x0, 0x1c9c380}) 2018/04/21 01:41:07 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) dup2(r1, r0) 2018/04/21 01:41:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) dup2(r1, r0) 2018/04/21 01:41:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x21d}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xffffffffffffffcc, &(0x7f0000001300)=""/251}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x16, 0x88, 0x0, &(0x7f0000000180)) 2018/04/21 01:41:07 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) listen(r0, 0x0) recvfrom(r0, &(0x7f0000000080)=""/187, 0xbb, 0x0, 0x0, 0x0) 2018/04/21 01:41:07 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000b8fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x302, &(0x7f0000e4b000)=0x0) sendmsg$alg(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) 2018/04/21 01:41:07 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f00000023c0)=&(0x7f0000000100)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000f82ffc)) 2018/04/21 01:41:07 executing program 0: r0 = socket(0x8000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) 2018/04/21 01:41:07 executing program 7: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{&(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000180)=""/182, 0xb6}}], 0x1, 0x0, &(0x7f0000000280)={0x0, 0x1c9c380}) 2018/04/21 01:41:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) dup2(r1, r0) 2018/04/21 01:41:07 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) dup2(r1, r0) 2018/04/21 01:41:07 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) dup2(r1, r0) 2018/04/21 01:41:07 executing program 0: r0 = socket(0x8000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) 2018/04/21 01:41:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x21d}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xffffffffffffffcc, &(0x7f0000001300)=""/251}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x16, 0x88, 0x0, &(0x7f0000000180)) 2018/04/21 01:41:07 executing program 7: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{&(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000180)=""/182, 0xb6}}], 0x1, 0x0, &(0x7f0000000280)={0x0, 0x1c9c380}) 2018/04/21 01:41:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) dup2(r1, r0) 2018/04/21 01:41:07 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f00000023c0)=&(0x7f0000000100)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000f82ffc)) 2018/04/21 01:41:07 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000b8fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x302, &(0x7f0000e4b000)=0x0) sendmsg$alg(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) 2018/04/21 01:41:07 executing program 0: r0 = socket(0x8000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) 2018/04/21 01:41:07 executing program 1: r0 = getpid() sched_setaffinity(r0, 0xffffffffffffffd6, &(0x7f0000000340)=0xfffffffffffffffe) r1 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x80, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000b06ffc), 0x4) sendto$unix(r3, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) close(r2) 2018/04/21 01:41:07 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000002040)={0x0, {{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x0, 0x2, [{{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, {{0xa, 0x0, @dev={0xac, 0x14, 0x14}}}]}, 0x190) 2018/04/21 01:41:07 executing program 4: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{&(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000180)=""/182, 0xb6}}], 0x1, 0x0, &(0x7f0000000280)={0x0, 0x1c9c380}) 2018/04/21 01:41:07 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000b8fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x302, &(0x7f0000e4b000)=0x0) sendmsg$alg(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) 2018/04/21 01:41:07 executing program 4: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{&(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000180)=""/182, 0xb6}}], 0x1, 0x0, &(0x7f0000000280)={0x0, 0x1c9c380}) 2018/04/21 01:41:07 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f00000023c0)=&(0x7f0000000100)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000f82ffc)) 2018/04/21 01:41:07 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000000000)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140), 0x8) 2018/04/21 01:41:07 executing program 7: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{&(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000180)=""/182, 0xb6}}], 0x1, 0x0, &(0x7f0000000280)={0x0, 0x1c9c380}) 2018/04/21 01:41:07 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000002040)={0x0, {{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x0, 0x2, [{{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, {{0xa, 0x0, @dev={0xac, 0x14, 0x14}}}]}, 0x190) 2018/04/21 01:41:07 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) bind$inet(r0, &(0x7f0000003ff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000013000)=[@in={0x2, 0x0, @broadcast=0xffffffff}], 0x10) sendto$inet(r0, &(0x7f000001d000)="a9", 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x7) accept4(r0, 0x0, &(0x7f0000021000), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @multicast1=0xe0000001}], 0x10) 2018/04/21 01:41:09 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000680), &(0x7f00000006c0)=0x8) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a6efff), 0x0, 0x2001ffff, &(0x7f0000000280)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x22d3) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) sendto$inet(r0, &(0x7f00000002c0)='-', 0x1, 0xc0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000300)="b89f74470a8786c25b8d5902ab73835dab85ab91b4643dd1522dc2ea3d7c947e65d4e553c0d6d8ea01e45248c4b2aa9508db9eeb5465b2ec01c4ff31c0d4d50fcfe633aeae8fec620b24912d56ee7a645623f044974f38ed2fbd2bb3054f3568fcb72eeda0dc026bfc478fdb5664e89131cf2b1d4ac8faa91c43397af097f82a252aff835d1afa2733644b4dc6b28d0fcb877511a4cd8884ce", 0x99, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendmsg(r0, &(0x7f0000000400)={&(0x7f00000001c0)=@l2={0x1f}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000017c0)="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", 0x367}], 0x1, &(0x7f0000000a40)=ANY=[]}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x7ffb, 0x7fffffff, 0x2000000}, 0x14) sendto$inet(r0, &(0x7f0000000080)="92", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/04/21 01:41:09 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) bind$inet(r0, &(0x7f0000003ff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000013000)=[@in={0x2, 0x0, @broadcast=0xffffffff}], 0x10) sendto$inet(r0, &(0x7f000001d000)="a9", 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x7) accept4(r0, 0x0, &(0x7f0000021000), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @multicast1=0xe0000001}], 0x10) 2018/04/21 01:41:09 executing program 4: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{&(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000180)=""/182, 0xb6}}], 0x1, 0x0, &(0x7f0000000280)={0x0, 0x1c9c380}) 2018/04/21 01:41:09 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000002040)={0x0, {{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x0, 0x2, [{{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, {{0xa, 0x0, @dev={0xac, 0x14, 0x14}}}]}, 0x190) 2018/04/21 01:41:09 executing program 7: r0 = memfd_create(&(0x7f0000049000)='linux\x00\x00\x00', 0x2) r1 = syz_open_dev$sndseq(&(0x7f000000f000)='/dev/snd/seq\x00', 0x0, 0x80002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$tun(r0, &(0x7f00000003c0)={@void, @hdr, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "a37461", 0x20, 0x9f, 0xffffffffffff0001, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[@routing={0x0, 0x2, 0x0, 0x8000, 0x0, [@mcast2={0xff, 0x2, [], 0x1}]}], @udp={0x0, 0x0, 0x8}}}}}}}, 0x60) ppoll(&(0x7f00000000c0)=[{r1, 0x4c8}], 0x1, &(0x7f00000001c0)={0x0, r3+10000000}, &(0x7f0000000200), 0x8) write$sndseq(r1, &(0x7f0000000240)=[{0x5, 0x2, 0xff7, 0x0, @time={0x0, 0x989680}, {}, {}, @note={0x0, 0x0, 0x0, 0xa790, 0x2}}, {0x0, 0x4, 0x0, 0x0, @tick=0x5, {0x2}, {}, @ext={0x0, &(0x7f0000000040)}}], 0x60) 2018/04/21 01:41:09 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) bind$inet(r0, &(0x7f0000003ff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000013000)=[@in={0x2, 0x0, @broadcast=0xffffffff}], 0x10) sendto$inet(r0, &(0x7f000001d000)="a9", 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x7) accept4(r0, 0x0, &(0x7f0000021000), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @multicast1=0xe0000001}], 0x10) 2018/04/21 01:41:09 executing program 1: r0 = getpid() sched_setaffinity(r0, 0xffffffffffffffd6, &(0x7f0000000340)=0xfffffffffffffffe) r1 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x80, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000b06ffc), 0x4) sendto$unix(r3, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) close(r2) 2018/04/21 01:41:09 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000000000)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140), 0x8) 2018/04/21 01:41:09 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000002040)={0x0, {{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x0, 0x2, [{{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, {{0xa, 0x0, @dev={0xac, 0x14, 0x14}}}]}, 0x190) 2018/04/21 01:41:09 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000680), &(0x7f00000006c0)=0x8) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a6efff), 0x0, 0x2001ffff, &(0x7f0000000280)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x22d3) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) sendto$inet(r0, &(0x7f00000002c0)='-', 0x1, 0xc0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000300)="b89f74470a8786c25b8d5902ab73835dab85ab91b4643dd1522dc2ea3d7c947e65d4e553c0d6d8ea01e45248c4b2aa9508db9eeb5465b2ec01c4ff31c0d4d50fcfe633aeae8fec620b24912d56ee7a645623f044974f38ed2fbd2bb3054f3568fcb72eeda0dc026bfc478fdb5664e89131cf2b1d4ac8faa91c43397af097f82a252aff835d1afa2733644b4dc6b28d0fcb877511a4cd8884ce", 0x99, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendmsg(r0, &(0x7f0000000400)={&(0x7f00000001c0)=@l2={0x1f}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000017c0)="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", 0x367}], 0x1, &(0x7f0000000a40)=ANY=[]}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x7ffb, 0x7fffffff, 0x2000000}, 0x14) sendto$inet(r0, &(0x7f0000000080)="92", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/04/21 01:41:09 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000680), &(0x7f00000006c0)=0x8) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a6efff), 0x0, 0x2001ffff, &(0x7f0000000280)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x22d3) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) sendto$inet(r0, &(0x7f00000002c0)='-', 0x1, 0xc0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000300)="b89f74470a8786c25b8d5902ab73835dab85ab91b4643dd1522dc2ea3d7c947e65d4e553c0d6d8ea01e45248c4b2aa9508db9eeb5465b2ec01c4ff31c0d4d50fcfe633aeae8fec620b24912d56ee7a645623f044974f38ed2fbd2bb3054f3568fcb72eeda0dc026bfc478fdb5664e89131cf2b1d4ac8faa91c43397af097f82a252aff835d1afa2733644b4dc6b28d0fcb877511a4cd8884ce", 0x99, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendmsg(r0, &(0x7f0000000400)={&(0x7f00000001c0)=@l2={0x1f}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000017c0)="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", 0x367}], 0x1, &(0x7f0000000a40)=ANY=[]}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x7ffb, 0x7fffffff, 0x2000000}, 0x14) sendto$inet(r0, &(0x7f0000000080)="92", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/04/21 01:41:09 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="d3", 0x1) write(r1, &(0x7f0000000040)="791f", 0x2) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x5c, &(0x7f0000000000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/21 01:41:09 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000680), &(0x7f00000006c0)=0x8) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a6efff), 0x0, 0x2001ffff, &(0x7f0000000280)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x22d3) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) sendto$inet(r0, &(0x7f00000002c0)='-', 0x1, 0xc0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000300)="b89f74470a8786c25b8d5902ab73835dab85ab91b4643dd1522dc2ea3d7c947e65d4e553c0d6d8ea01e45248c4b2aa9508db9eeb5465b2ec01c4ff31c0d4d50fcfe633aeae8fec620b24912d56ee7a645623f044974f38ed2fbd2bb3054f3568fcb72eeda0dc026bfc478fdb5664e89131cf2b1d4ac8faa91c43397af097f82a252aff835d1afa2733644b4dc6b28d0fcb877511a4cd8884ce", 0x99, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendmsg(r0, &(0x7f0000000400)={&(0x7f00000001c0)=@l2={0x1f}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000017c0)="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", 0x367}], 0x1, &(0x7f0000000a40)=ANY=[]}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x7ffb, 0x7fffffff, 0x2000000}, 0x14) sendto$inet(r0, &(0x7f0000000080)="92", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/04/21 01:41:09 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000680), &(0x7f00000006c0)=0x8) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a6efff), 0x0, 0x2001ffff, &(0x7f0000000280)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x22d3) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) sendto$inet(r0, &(0x7f00000002c0)='-', 0x1, 0xc0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000300)="b89f74470a8786c25b8d5902ab73835dab85ab91b4643dd1522dc2ea3d7c947e65d4e553c0d6d8ea01e45248c4b2aa9508db9eeb5465b2ec01c4ff31c0d4d50fcfe633aeae8fec620b24912d56ee7a645623f044974f38ed2fbd2bb3054f3568fcb72eeda0dc026bfc478fdb5664e89131cf2b1d4ac8faa91c43397af097f82a252aff835d1afa2733644b4dc6b28d0fcb877511a4cd8884ce", 0x99, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendmsg(r0, &(0x7f0000000400)={&(0x7f00000001c0)=@l2={0x1f}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000017c0)="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", 0x367}], 0x1, &(0x7f0000000a40)=ANY=[]}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x7ffb, 0x7fffffff, 0x2000000}, 0x14) sendto$inet(r0, &(0x7f0000000080)="92", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/04/21 01:41:09 executing program 7: r0 = memfd_create(&(0x7f0000049000)='linux\x00\x00\x00', 0x2) r1 = syz_open_dev$sndseq(&(0x7f000000f000)='/dev/snd/seq\x00', 0x0, 0x80002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$tun(r0, &(0x7f00000003c0)={@void, @hdr, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "a37461", 0x20, 0x9f, 0xffffffffffff0001, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[@routing={0x0, 0x2, 0x0, 0x8000, 0x0, [@mcast2={0xff, 0x2, [], 0x1}]}], @udp={0x0, 0x0, 0x8}}}}}}}, 0x60) ppoll(&(0x7f00000000c0)=[{r1, 0x4c8}], 0x1, &(0x7f00000001c0)={0x0, r3+10000000}, &(0x7f0000000200), 0x8) write$sndseq(r1, &(0x7f0000000240)=[{0x5, 0x2, 0xff7, 0x0, @time={0x0, 0x989680}, {}, {}, @note={0x0, 0x0, 0x0, 0xa790, 0x2}}, {0x0, 0x4, 0x0, 0x0, @tick=0x5, {0x2}, {}, @ext={0x0, &(0x7f0000000040)}}], 0x60) 2018/04/21 01:41:10 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="d3", 0x1) write(r1, &(0x7f0000000040)="791f", 0x2) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x5c, &(0x7f0000000000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/21 01:41:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000680), &(0x7f00000006c0)=0x8) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a6efff), 0x0, 0x2001ffff, &(0x7f0000000280)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x22d3) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) sendto$inet(r0, &(0x7f00000002c0)='-', 0x1, 0xc0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000300)="b89f74470a8786c25b8d5902ab73835dab85ab91b4643dd1522dc2ea3d7c947e65d4e553c0d6d8ea01e45248c4b2aa9508db9eeb5465b2ec01c4ff31c0d4d50fcfe633aeae8fec620b24912d56ee7a645623f044974f38ed2fbd2bb3054f3568fcb72eeda0dc026bfc478fdb5664e89131cf2b1d4ac8faa91c43397af097f82a252aff835d1afa2733644b4dc6b28d0fcb877511a4cd8884ce", 0x99, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendmsg(r0, &(0x7f0000000400)={&(0x7f00000001c0)=@l2={0x1f}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000017c0)="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", 0x367}], 0x1, &(0x7f0000000a40)=ANY=[]}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x7ffb, 0x7fffffff, 0x2000000}, 0x14) sendto$inet(r0, &(0x7f0000000080)="92", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/04/21 01:41:10 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000680), &(0x7f00000006c0)=0x8) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a6efff), 0x0, 0x2001ffff, &(0x7f0000000280)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x22d3) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) sendto$inet(r0, &(0x7f00000002c0)='-', 0x1, 0xc0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000300)="b89f74470a8786c25b8d5902ab73835dab85ab91b4643dd1522dc2ea3d7c947e65d4e553c0d6d8ea01e45248c4b2aa9508db9eeb5465b2ec01c4ff31c0d4d50fcfe633aeae8fec620b24912d56ee7a645623f044974f38ed2fbd2bb3054f3568fcb72eeda0dc026bfc478fdb5664e89131cf2b1d4ac8faa91c43397af097f82a252aff835d1afa2733644b4dc6b28d0fcb877511a4cd8884ce", 0x99, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendmsg(r0, &(0x7f0000000400)={&(0x7f00000001c0)=@l2={0x1f}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000017c0)="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", 0x367}], 0x1, &(0x7f0000000a40)=ANY=[]}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x7ffb, 0x7fffffff, 0x2000000}, 0x14) sendto$inet(r0, &(0x7f0000000080)="92", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/04/21 01:41:10 executing program 7: r0 = memfd_create(&(0x7f0000049000)='linux\x00\x00\x00', 0x2) r1 = syz_open_dev$sndseq(&(0x7f000000f000)='/dev/snd/seq\x00', 0x0, 0x80002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$tun(r0, &(0x7f00000003c0)={@void, @hdr, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "a37461", 0x20, 0x9f, 0xffffffffffff0001, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[@routing={0x0, 0x2, 0x0, 0x8000, 0x0, [@mcast2={0xff, 0x2, [], 0x1}]}], @udp={0x0, 0x0, 0x8}}}}}}}, 0x60) ppoll(&(0x7f00000000c0)=[{r1, 0x4c8}], 0x1, &(0x7f00000001c0)={0x0, r3+10000000}, &(0x7f0000000200), 0x8) write$sndseq(r1, &(0x7f0000000240)=[{0x5, 0x2, 0xff7, 0x0, @time={0x0, 0x989680}, {}, {}, @note={0x0, 0x0, 0x0, 0xa790, 0x2}}, {0x0, 0x4, 0x0, 0x0, @tick=0x5, {0x2}, {}, @ext={0x0, &(0x7f0000000040)}}], 0x60) 2018/04/21 01:41:10 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000000000)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140), 0x8) 2018/04/21 01:41:10 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) bind$inet(r0, &(0x7f0000003ff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000013000)=[@in={0x2, 0x0, @broadcast=0xffffffff}], 0x10) sendto$inet(r0, &(0x7f000001d000)="a9", 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x7) accept4(r0, 0x0, &(0x7f0000021000), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @multicast1=0xe0000001}], 0x10) 2018/04/21 01:41:10 executing program 1: r0 = getpid() sched_setaffinity(r0, 0xffffffffffffffd6, &(0x7f0000000340)=0xfffffffffffffffe) r1 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x80, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000b06ffc), 0x4) sendto$unix(r3, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) close(r2) 2018/04/21 01:41:10 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) bind$inet(r0, &(0x7f0000003ff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000013000)=[@in={0x2, 0x0, @broadcast=0xffffffff}], 0x10) sendto$inet(r0, &(0x7f000001d000)="a9", 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x7) accept4(r0, 0x0, &(0x7f0000021000), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @multicast1=0xe0000001}], 0x10) 2018/04/21 01:41:10 executing program 6: r0 = memfd_create(&(0x7f0000049000)='linux\x00\x00\x00', 0x2) r1 = syz_open_dev$sndseq(&(0x7f000000f000)='/dev/snd/seq\x00', 0x0, 0x80002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$tun(r0, &(0x7f00000003c0)={@void, @hdr, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "a37461", 0x20, 0x9f, 0xffffffffffff0001, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[@routing={0x0, 0x2, 0x0, 0x8000, 0x0, [@mcast2={0xff, 0x2, [], 0x1}]}], @udp={0x0, 0x0, 0x8}}}}}}}, 0x60) ppoll(&(0x7f00000000c0)=[{r1, 0x4c8}], 0x1, &(0x7f00000001c0)={0x0, r3+10000000}, &(0x7f0000000200), 0x8) write$sndseq(r1, &(0x7f0000000240)=[{0x5, 0x2, 0xff7, 0x0, @time={0x0, 0x989680}, {}, {}, @note={0x0, 0x0, 0x0, 0xa790, 0x2}}, {0x0, 0x4, 0x0, 0x0, @tick=0x5, {0x2}, {}, @ext={0x0, &(0x7f0000000040)}}], 0x60) 2018/04/21 01:41:10 executing program 4: r0 = memfd_create(&(0x7f0000049000)='linux\x00\x00\x00', 0x2) r1 = syz_open_dev$sndseq(&(0x7f000000f000)='/dev/snd/seq\x00', 0x0, 0x80002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$tun(r0, &(0x7f00000003c0)={@void, @hdr, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "a37461", 0x20, 0x9f, 0xffffffffffff0001, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[@routing={0x0, 0x2, 0x0, 0x8000, 0x0, [@mcast2={0xff, 0x2, [], 0x1}]}], @udp={0x0, 0x0, 0x8}}}}}}}, 0x60) ppoll(&(0x7f00000000c0)=[{r1, 0x4c8}], 0x1, &(0x7f00000001c0)={0x0, r3+10000000}, &(0x7f0000000200), 0x8) write$sndseq(r1, &(0x7f0000000240)=[{0x5, 0x2, 0xff7, 0x0, @time={0x0, 0x989680}, {}, {}, @note={0x0, 0x0, 0x0, 0xa790, 0x2}}, {0x0, 0x4, 0x0, 0x0, @tick=0x5, {0x2}, {}, @ext={0x0, &(0x7f0000000040)}}], 0x60) 2018/04/21 01:41:10 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="d3", 0x1) write(r1, &(0x7f0000000040)="791f", 0x2) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x5c, &(0x7f0000000000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/21 01:41:10 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="d3", 0x1) write(r1, &(0x7f0000000040)="791f", 0x2) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x5c, &(0x7f0000000000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/21 01:41:10 executing program 7: r0 = memfd_create(&(0x7f0000049000)='linux\x00\x00\x00', 0x2) r1 = syz_open_dev$sndseq(&(0x7f000000f000)='/dev/snd/seq\x00', 0x0, 0x80002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$tun(r0, &(0x7f00000003c0)={@void, @hdr, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "a37461", 0x20, 0x9f, 0xffffffffffff0001, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[@routing={0x0, 0x2, 0x0, 0x8000, 0x0, [@mcast2={0xff, 0x2, [], 0x1}]}], @udp={0x0, 0x0, 0x8}}}}}}}, 0x60) ppoll(&(0x7f00000000c0)=[{r1, 0x4c8}], 0x1, &(0x7f00000001c0)={0x0, r3+10000000}, &(0x7f0000000200), 0x8) write$sndseq(r1, &(0x7f0000000240)=[{0x5, 0x2, 0xff7, 0x0, @time={0x0, 0x989680}, {}, {}, @note={0x0, 0x0, 0x0, 0xa790, 0x2}}, {0x0, 0x4, 0x0, 0x0, @tick=0x5, {0x2}, {}, @ext={0x0, &(0x7f0000000040)}}], 0x60) 2018/04/21 01:41:10 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000010000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000018000)="640000000005ff031dffee946f0000000a200a0009000800001d25680c1ba3e20400ff7ee55b18b0860dc4977bf4efc90a36a52cb0258863cebb091c27491810f81630d760346024d93357ea6fc31a803e7f820cfeb5c5290b5e5c6a5f3b908c02441247", 0x64}], 0x1}, 0x0) 2018/04/21 01:41:10 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000010000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000018000)="640000000005ff031dffee946f0000000a200a0009000800001d25680c1ba3e20400ff7ee55b18b0860dc4977bf4efc90a36a52cb0258863cebb091c27491810f81630d760346024d93357ea6fc31a803e7f820cfeb5c5290b5e5c6a5f3b908c02441247", 0x64}], 0x1}, 0x0) [ 193.806177] netlink: 64 bytes leftover after parsing attributes in process `syz-executor5'. [ 193.816752] netlink: 64 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/21 01:41:10 executing program 6: r0 = memfd_create(&(0x7f0000049000)='linux\x00\x00\x00', 0x2) r1 = syz_open_dev$sndseq(&(0x7f000000f000)='/dev/snd/seq\x00', 0x0, 0x80002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$tun(r0, &(0x7f00000003c0)={@void, @hdr, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "a37461", 0x20, 0x9f, 0xffffffffffff0001, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[@routing={0x0, 0x2, 0x0, 0x8000, 0x0, [@mcast2={0xff, 0x2, [], 0x1}]}], @udp={0x0, 0x0, 0x8}}}}}}}, 0x60) ppoll(&(0x7f00000000c0)=[{r1, 0x4c8}], 0x1, &(0x7f00000001c0)={0x0, r3+10000000}, &(0x7f0000000200), 0x8) write$sndseq(r1, &(0x7f0000000240)=[{0x5, 0x2, 0xff7, 0x0, @time={0x0, 0x989680}, {}, {}, @note={0x0, 0x0, 0x0, 0xa790, 0x2}}, {0x0, 0x4, 0x0, 0x0, @tick=0x5, {0x2}, {}, @ext={0x0, &(0x7f0000000040)}}], 0x60) 2018/04/21 01:41:10 executing program 4: r0 = memfd_create(&(0x7f0000049000)='linux\x00\x00\x00', 0x2) r1 = syz_open_dev$sndseq(&(0x7f000000f000)='/dev/snd/seq\x00', 0x0, 0x80002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$tun(r0, &(0x7f00000003c0)={@void, @hdr, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "a37461", 0x20, 0x9f, 0xffffffffffff0001, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[@routing={0x0, 0x2, 0x0, 0x8000, 0x0, [@mcast2={0xff, 0x2, [], 0x1}]}], @udp={0x0, 0x0, 0x8}}}}}}}, 0x60) ppoll(&(0x7f00000000c0)=[{r1, 0x4c8}], 0x1, &(0x7f00000001c0)={0x0, r3+10000000}, &(0x7f0000000200), 0x8) write$sndseq(r1, &(0x7f0000000240)=[{0x5, 0x2, 0xff7, 0x0, @time={0x0, 0x989680}, {}, {}, @note={0x0, 0x0, 0x0, 0xa790, 0x2}}, {0x0, 0x4, 0x0, 0x0, @tick=0x5, {0x2}, {}, @ext={0x0, &(0x7f0000000040)}}], 0x60) 2018/04/21 01:41:10 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000010000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000018000)="640000000005ff031dffee946f0000000a200a0009000800001d25680c1ba3e20400ff7ee55b18b0860dc4977bf4efc90a36a52cb0258863cebb091c27491810f81630d760346024d93357ea6fc31a803e7f820cfeb5c5290b5e5c6a5f3b908c02441247", 0x64}], 0x1}, 0x0) [ 193.924519] netlink: 64 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/21 01:41:10 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000010000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000018000)="640000000005ff031dffee946f0000000a200a0009000800001d25680c1ba3e20400ff7ee55b18b0860dc4977bf4efc90a36a52cb0258863cebb091c27491810f81630d760346024d93357ea6fc31a803e7f820cfeb5c5290b5e5c6a5f3b908c02441247", 0x64}], 0x1}, 0x0) [ 194.098508] netlink: 64 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/21 01:41:11 executing program 5: r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/200, 0xc8}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101082, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x0, 0x0) close(r1) [ 194.222315] netlink: 64 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/21 01:41:12 executing program 1: r0 = getpid() sched_setaffinity(r0, 0xffffffffffffffd6, &(0x7f0000000340)=0xfffffffffffffffe) r1 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x80, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000b06ffc), 0x4) sendto$unix(r3, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) close(r2) 2018/04/21 01:41:12 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) bind$inet(r0, &(0x7f0000003ff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000013000)=[@in={0x2, 0x0, @broadcast=0xffffffff}], 0x10) sendto$inet(r0, &(0x7f000001d000)="a9", 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x7) accept4(r0, 0x0, &(0x7f0000021000), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @multicast1=0xe0000001}], 0x10) 2018/04/21 01:41:12 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) bind$inet(r0, &(0x7f0000003ff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000013000)=[@in={0x2, 0x0, @broadcast=0xffffffff}], 0x10) sendto$inet(r0, &(0x7f000001d000)="a9", 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x7) accept4(r0, 0x0, &(0x7f0000021000), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @multicast1=0xe0000001}], 0x10) 2018/04/21 01:41:12 executing program 4: r0 = memfd_create(&(0x7f0000049000)='linux\x00\x00\x00', 0x2) r1 = syz_open_dev$sndseq(&(0x7f000000f000)='/dev/snd/seq\x00', 0x0, 0x80002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$tun(r0, &(0x7f00000003c0)={@void, @hdr, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "a37461", 0x20, 0x9f, 0xffffffffffff0001, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[@routing={0x0, 0x2, 0x0, 0x8000, 0x0, [@mcast2={0xff, 0x2, [], 0x1}]}], @udp={0x0, 0x0, 0x8}}}}}}}, 0x60) ppoll(&(0x7f00000000c0)=[{r1, 0x4c8}], 0x1, &(0x7f00000001c0)={0x0, r3+10000000}, &(0x7f0000000200), 0x8) write$sndseq(r1, &(0x7f0000000240)=[{0x5, 0x2, 0xff7, 0x0, @time={0x0, 0x989680}, {}, {}, @note={0x0, 0x0, 0x0, 0xa790, 0x2}}, {0x0, 0x4, 0x0, 0x0, @tick=0x5, {0x2}, {}, @ext={0x0, &(0x7f0000000040)}}], 0x60) 2018/04/21 01:41:12 executing program 6: r0 = memfd_create(&(0x7f0000049000)='linux\x00\x00\x00', 0x2) r1 = syz_open_dev$sndseq(&(0x7f000000f000)='/dev/snd/seq\x00', 0x0, 0x80002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$tun(r0, &(0x7f00000003c0)={@void, @hdr, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "a37461", 0x20, 0x9f, 0xffffffffffff0001, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[@routing={0x0, 0x2, 0x0, 0x8000, 0x0, [@mcast2={0xff, 0x2, [], 0x1}]}], @udp={0x0, 0x0, 0x8}}}}}}}, 0x60) ppoll(&(0x7f00000000c0)=[{r1, 0x4c8}], 0x1, &(0x7f00000001c0)={0x0, r3+10000000}, &(0x7f0000000200), 0x8) write$sndseq(r1, &(0x7f0000000240)=[{0x5, 0x2, 0xff7, 0x0, @time={0x0, 0x989680}, {}, {}, @note={0x0, 0x0, 0x0, 0xa790, 0x2}}, {0x0, 0x4, 0x0, 0x0, @tick=0x5, {0x2}, {}, @ext={0x0, &(0x7f0000000040)}}], 0x60) 2018/04/21 01:41:12 executing program 5: r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/200, 0xc8}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101082, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x0, 0x0) close(r1) 2018/04/21 01:41:12 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000000000)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140), 0x8) 2018/04/21 01:41:12 executing program 7: r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/200, 0xc8}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101082, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x0, 0x0) close(r1) 2018/04/21 01:41:12 executing program 4: sched_setattr(0x0, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000007000)={0xffffffffc0000001}) epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x0) epoll_wait(r3, &(0x7f0000cd8ff4)=[{}], 0x1, 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/04/21 01:41:12 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = syz_fuse_mount(&(0x7f0000000640)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000680), 0x87) 2018/04/21 01:41:12 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = syz_fuse_mount(&(0x7f0000000640)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000680), 0x87) 2018/04/21 01:41:12 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = syz_fuse_mount(&(0x7f0000000640)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000680), 0x87) 2018/04/21 01:41:12 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = syz_fuse_mount(&(0x7f0000000640)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000680), 0x87) 2018/04/21 01:41:12 executing program 6: r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580)=0x10) getpeername$ax25(r0, &(0x7f00000005c0), &(0x7f0000000600)=0x10) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_newaddr={0x48, 0x14, 0x1, 0x0, 0x0, {0x2}, [@IFA_LOCAL={0x8, 0x2, @local={0xac, 0x14, 0x14, 0xaa}}, @IFA_LABEL={0x14, 0x3, 'ifb0\x00'}, @IFA_CACHEINFO={0x14, 0x6}]}, 0x48}, 0x1}, 0x0) r2 = memfd_create(&(0x7f00000002c0)='ifb0\x00', 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f00000003c0)="798609a7957d392f49955a402f9c595e4e847ef2d45ffe95fd41fdd4d27cae02277d5aa820b32d68dd1297", 0x2b, 0x3f, 0x0) getsockopt$netlink(r1, 0x10e, 0x6, &(0x7f0000000400)=""/98, &(0x7f00000004c0)=0xffffff59) sendmsg$nl_crypto(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000780)={"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"}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="e2000000a750945ec66828070ad9b88f5bad798647621b629d9d4825d1135c5b256e0f473f79df00dc513780242be280c49f7665b3ab9845e45bd63b3b36294eaf542063757913a636dda492e1cb6fb171e106a792e68510eb1a1f655d950300d7e447147f48ee12a51c2b19222caf128abc2ba848bd0000000000007c205539fdfb0c4491511ac9f634925754f288f6f902609fe7e014f1199a574e158c375f24875501fc851f7bca82e235cf772c989cef85"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) 2018/04/21 01:41:12 executing program 6: r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580)=0x10) getpeername$ax25(r0, &(0x7f00000005c0), &(0x7f0000000600)=0x10) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_newaddr={0x48, 0x14, 0x1, 0x0, 0x0, {0x2}, [@IFA_LOCAL={0x8, 0x2, @local={0xac, 0x14, 0x14, 0xaa}}, @IFA_LABEL={0x14, 0x3, 'ifb0\x00'}, @IFA_CACHEINFO={0x14, 0x6}]}, 0x48}, 0x1}, 0x0) r2 = memfd_create(&(0x7f00000002c0)='ifb0\x00', 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f00000003c0)="798609a7957d392f49955a402f9c595e4e847ef2d45ffe95fd41fdd4d27cae02277d5aa820b32d68dd1297", 0x2b, 0x3f, 0x0) getsockopt$netlink(r1, 0x10e, 0x6, &(0x7f0000000400)=""/98, &(0x7f00000004c0)=0xffffff59) sendmsg$nl_crypto(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000780)={"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"}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="e2000000a750945ec66828070ad9b88f5bad798647621b629d9d4825d1135c5b256e0f473f79df00dc513780242be280c49f7665b3ab9845e45bd63b3b36294eaf542063757913a636dda492e1cb6fb171e106a792e68510eb1a1f655d950300d7e447147f48ee12a51c2b19222caf128abc2ba848bd0000000000007c205539fdfb0c4491511ac9f634925754f288f6f902609fe7e014f1199a574e158c375f24875501fc851f7bca82e235cf772c989cef85"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) 2018/04/21 01:41:12 executing program 6: r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580)=0x10) getpeername$ax25(r0, &(0x7f00000005c0), &(0x7f0000000600)=0x10) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_newaddr={0x48, 0x14, 0x1, 0x0, 0x0, {0x2}, [@IFA_LOCAL={0x8, 0x2, @local={0xac, 0x14, 0x14, 0xaa}}, @IFA_LABEL={0x14, 0x3, 'ifb0\x00'}, @IFA_CACHEINFO={0x14, 0x6}]}, 0x48}, 0x1}, 0x0) r2 = memfd_create(&(0x7f00000002c0)='ifb0\x00', 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f00000003c0)="798609a7957d392f49955a402f9c595e4e847ef2d45ffe95fd41fdd4d27cae02277d5aa820b32d68dd1297", 0x2b, 0x3f, 0x0) getsockopt$netlink(r1, 0x10e, 0x6, &(0x7f0000000400)=""/98, &(0x7f00000004c0)=0xffffff59) sendmsg$nl_crypto(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000780)={"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"}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="e2000000a750945ec66828070ad9b88f5bad798647621b629d9d4825d1135c5b256e0f473f79df00dc513780242be280c49f7665b3ab9845e45bd63b3b36294eaf542063757913a636dda492e1cb6fb171e106a792e68510eb1a1f655d950300d7e447147f48ee12a51c2b19222caf128abc2ba848bd0000000000007c205539fdfb0c4491511ac9f634925754f288f6f902609fe7e014f1199a574e158c375f24875501fc851f7bca82e235cf772c989cef85"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) 2018/04/21 01:41:13 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8918, &(0x7f0000000000)) 2018/04/21 01:41:13 executing program 7: r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/200, 0xc8}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101082, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x0, 0x0) close(r1) 2018/04/21 01:41:13 executing program 5: r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/200, 0xc8}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101082, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x0, 0x0) close(r1) 2018/04/21 01:41:13 executing program 6: r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580)=0x10) getpeername$ax25(r0, &(0x7f00000005c0), &(0x7f0000000600)=0x10) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_newaddr={0x48, 0x14, 0x1, 0x0, 0x0, {0x2}, [@IFA_LOCAL={0x8, 0x2, @local={0xac, 0x14, 0x14, 0xaa}}, @IFA_LABEL={0x14, 0x3, 'ifb0\x00'}, @IFA_CACHEINFO={0x14, 0x6}]}, 0x48}, 0x1}, 0x0) r2 = memfd_create(&(0x7f00000002c0)='ifb0\x00', 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f00000003c0)="798609a7957d392f49955a402f9c595e4e847ef2d45ffe95fd41fdd4d27cae02277d5aa820b32d68dd1297", 0x2b, 0x3f, 0x0) getsockopt$netlink(r1, 0x10e, 0x6, &(0x7f0000000400)=""/98, &(0x7f00000004c0)=0xffffff59) sendmsg$nl_crypto(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000780)={"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"}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="e2000000a750945ec66828070ad9b88f5bad798647621b629d9d4825d1135c5b256e0f473f79df00dc513780242be280c49f7665b3ab9845e45bd63b3b36294eaf542063757913a636dda492e1cb6fb171e106a792e68510eb1a1f655d950300d7e447147f48ee12a51c2b19222caf128abc2ba848bd0000000000007c205539fdfb0c4491511ac9f634925754f288f6f902609fe7e014f1199a574e158c375f24875501fc851f7bca82e235cf772c989cef85"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) 2018/04/21 01:41:13 executing program 0: r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580)=0x10) getpeername$ax25(r0, &(0x7f00000005c0), &(0x7f0000000600)=0x10) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_newaddr={0x48, 0x14, 0x1, 0x0, 0x0, {0x2}, [@IFA_LOCAL={0x8, 0x2, @local={0xac, 0x14, 0x14, 0xaa}}, @IFA_LABEL={0x14, 0x3, 'ifb0\x00'}, @IFA_CACHEINFO={0x14, 0x6}]}, 0x48}, 0x1}, 0x0) r2 = memfd_create(&(0x7f00000002c0)='ifb0\x00', 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f00000003c0)="798609a7957d392f49955a402f9c595e4e847ef2d45ffe95fd41fdd4d27cae02277d5aa820b32d68dd1297", 0x2b, 0x3f, 0x0) getsockopt$netlink(r1, 0x10e, 0x6, &(0x7f0000000400)=""/98, &(0x7f00000004c0)=0xffffff59) sendmsg$nl_crypto(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000780)={"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"}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="e2000000a750945ec66828070ad9b88f5bad798647621b629d9d4825d1135c5b256e0f473f79df00dc513780242be280c49f7665b3ab9845e45bd63b3b36294eaf542063757913a636dda492e1cb6fb171e106a792e68510eb1a1f655d950300d7e447147f48ee12a51c2b19222caf128abc2ba848bd0000000000007c205539fdfb0c4491511ac9f634925754f288f6f902609fe7e014f1199a574e158c375f24875501fc851f7bca82e235cf772c989cef85"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) 2018/04/21 01:41:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f00000000c0)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, &(0x7f00000002c0)="95"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)}}], 0x0, 0x0, &(0x7f0000000500)}) 2018/04/21 01:41:13 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000b65000)='/dev/sg#\x00', 0x0, 0x0) unshare(0x40600) fstat(r0, &(0x7f0000001a80)) 2018/04/21 01:41:13 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x1, 0x1b8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, &(0x7f0000000040), &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000d00000000000000810065727370616e300000000000000000006970365f767469300000000000000000697036677265746170300000000000006970365f7674693000000000000000000180c20000000000000000000180c20000000000000000000000a0000000f000000028010000766c616e00000000000000000000000000000000000000000000000000000000080000000000000002000000000001006c6f670000000000000000000000000000000000000000000000000000000000280000000000000000b03c44a4ab993f21a642a6c98d9b52352c6a94ffbc6987f2fc82b348efe30000000000000000006d61726b000000000000000000000000000000000000000000000000000000001000000000000000f0ffffff00000000dfffffff00000000"]}, 0x230) [ 197.299396] binder: 14518:14542 got reply transaction with bad transaction stack, transaction 76 has target 14518:14525 [ 197.310585] binder: 14518:14542 transaction failed 29201/-71, size 0-0 line 2778 [ 197.423791] binder: BINDER_SET_CONTEXT_MGR already set [ 197.429148] binder: 14518:14543 ioctl 40046207 0 returned -16 [ 197.438605] binder_alloc: binder_alloc_mmap_handler: 14518 2000c000-2000e000 already mapped failed -16 [ 197.451662] binder: 14518:14542 got new transaction with bad transaction stack, transaction 76 has target 14518:14525 [ 197.462508] binder: 14518:14542 transaction failed 29201/-71, size 0-0 line 2875 2018/04/21 01:41:14 executing program 4: sched_setattr(0x0, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000007000)={0xffffffffc0000001}) epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x0) epoll_wait(r3, &(0x7f0000cd8ff4)=[{}], 0x1, 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/04/21 01:41:14 executing program 0: r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580)=0x10) getpeername$ax25(r0, &(0x7f00000005c0), &(0x7f0000000600)=0x10) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_newaddr={0x48, 0x14, 0x1, 0x0, 0x0, {0x2}, [@IFA_LOCAL={0x8, 0x2, @local={0xac, 0x14, 0x14, 0xaa}}, @IFA_LABEL={0x14, 0x3, 'ifb0\x00'}, @IFA_CACHEINFO={0x14, 0x6}]}, 0x48}, 0x1}, 0x0) r2 = memfd_create(&(0x7f00000002c0)='ifb0\x00', 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f00000003c0)="798609a7957d392f49955a402f9c595e4e847ef2d45ffe95fd41fdd4d27cae02277d5aa820b32d68dd1297", 0x2b, 0x3f, 0x0) getsockopt$netlink(r1, 0x10e, 0x6, &(0x7f0000000400)=""/98, &(0x7f00000004c0)=0xffffff59) sendmsg$nl_crypto(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000780)={"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"}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="e2000000a750945ec66828070ad9b88f5bad798647621b629d9d4825d1135c5b256e0f473f79df00dc513780242be280c49f7665b3ab9845e45bd63b3b36294eaf542063757913a636dda492e1cb6fb171e106a792e68510eb1a1f655d950300d7e447147f48ee12a51c2b19222caf128abc2ba848bd0000000000007c205539fdfb0c4491511ac9f634925754f288f6f902609fe7e014f1199a574e158c375f24875501fc851f7bca82e235cf772c989cef85"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) 2018/04/21 01:41:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000b65000)='/dev/sg#\x00', 0x0, 0x0) unshare(0x40600) fstat(r0, &(0x7f0000001a80)) 2018/04/21 01:41:14 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x1, 0x1b8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, &(0x7f0000000040), &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x230) 2018/04/21 01:41:14 executing program 5: r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/200, 0xc8}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101082, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x0, 0x0) close(r1) 2018/04/21 01:41:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f00000000c0)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, &(0x7f00000002c0)="95"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)}}], 0x0, 0x0, &(0x7f0000000500)}) 2018/04/21 01:41:14 executing program 7: r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/200, 0xc8}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101082, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x0, 0x0) close(r1) 2018/04/21 01:41:14 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8918, &(0x7f0000000000)) [ 197.489371] binder: release 14518:14525 transaction 76 in, still active [ 197.496407] binder: send failed reply for transaction 76 to 14518:14542 [ 197.503248] binder: undelivered TRANSACTION_ERROR: 29201 [ 197.508748] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/21 01:41:14 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x1, 0x1b8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, &(0x7f0000000040), &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x230) 2018/04/21 01:41:14 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8918, &(0x7f0000000000)) 2018/04/21 01:41:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000b65000)='/dev/sg#\x00', 0x0, 0x0) unshare(0x40600) fstat(r0, &(0x7f0000001a80)) 2018/04/21 01:41:14 executing program 0: r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580)=0x10) getpeername$ax25(r0, &(0x7f00000005c0), &(0x7f0000000600)=0x10) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_newaddr={0x48, 0x14, 0x1, 0x0, 0x0, {0x2}, [@IFA_LOCAL={0x8, 0x2, @local={0xac, 0x14, 0x14, 0xaa}}, @IFA_LABEL={0x14, 0x3, 'ifb0\x00'}, @IFA_CACHEINFO={0x14, 0x6}]}, 0x48}, 0x1}, 0x0) r2 = memfd_create(&(0x7f00000002c0)='ifb0\x00', 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f00000003c0)="798609a7957d392f49955a402f9c595e4e847ef2d45ffe95fd41fdd4d27cae02277d5aa820b32d68dd1297", 0x2b, 0x3f, 0x0) getsockopt$netlink(r1, 0x10e, 0x6, &(0x7f0000000400)=""/98, &(0x7f00000004c0)=0xffffff59) sendmsg$nl_crypto(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000780)={"4646b2adce8bbea37482a7fb29b6acc02b9ed8646e7bbdf82d738aa2309ea42f858e27b8ead465b2caad50e0b2da52d201729dae6a649b94d165a2734d771643ad00e7d2cd3b27e84de1001ed990e04444860d9c7444f1337b5e2e1d482bcd846ddca50f0742220ad0dc2c8a51c5891418b422386d42f750b6b63d9be4dbe03cb6eca6df8c98ef2b2c4f99e8aefac82201b05c6c40eb6cb284042e76db2a889e1656bf9da48ab89c2f8ecee1128ae5c03e5e26a8d4c2754f59c090dbc7ad63bedffda67fcd8d9ad74e161329b29cb5b74f01608555b5ab82b8ca64da3dec51e1752f523f15e4a8475de8c7503af0ad14e1ee9320dd95b5538199b013f64be6b90f4a82b9da457adc6e4813b62f5750c8bc661af1285ebb9d24b6137f7cf049e42ca9db1afa6dbab266a1d495d4c2b7a2c162f61688fc05a5a444d3334b15d86f7649fb81ce602e115d6a90f4641b6f18af503ed3cdeb47bde47d49c8758fe4fa0c9ca7129a118890a4725c79a5392acbb7e3055196da8230a4b695eb745f2ee21a7cacbbd309a2f8e660254c53854d11a2069fb9a11fc752dd6eaecb5bd820665c690c1819f4a98095a742120793ab2e2d7aa650441f51e54d74c4b578def414561d825e01e900350cc11e04f969c88a7dcdc6d05e992d04615847b1b63ab2e008bc60b8d4b7dcf9737e22c3468588779b002db53e89b54089512729a2b5b65ee68c2b471c7f53d306ecd6d176f5f160d8f643f67a32ee46797b53c958eaad9f548a34f306222485405e3649aa8c45fd8c42f3480698af5b674fc0e8baabe1261683a005fbae076007b31bda8b42187061261bd821f1c4708acbf6906cc22db65e62fd0d5e8b8ebb408b78727f214f0f98e401168e5809b5042f148c184a69af59de9cf026fc8d4cddf49747c6c6323054b72b161f6f9d745e89d472c46ac8fa1189d86cf4c8071434dd8c875c3c1d65ec6a05805c0a2825dfc3c48b3dd418190bd389ae92662921c27aff157b02f30cc97856efa0f839b6ec495d02dfd9a57e7724ac53694dc55a54fb40f5ac7f5db4906528a1a3406a60fea2f4fdedcf239ece5b9dd23ff626e5ce58333ab38775f5bd0c35000992cfac9496c79e7edab3d05d7f751183150a3d5d8ca505650da2fda1b50f89a9b2a4dc50a4387335fb6dbb2dde82092caedf0d432e9ffad868c0c315a9a47e9bb10289fab8c6112572fb27bae4dff51e9ccd32b99d8226e7bc8ae91d7853266c1a29b371530af563c9067cb973fefb83480b7056d8c4e84ecfec2b1150f425ec2ca13191b128e25d9e36a8794f39f9774e80fbdeef7d388d3482774b505ca6583c86eb917da5021741362901947c9f92e49acd973b3d69c568a0cffc112420891597ced758657375a9e40e8975332af843f120171196b0882ceb488516dd4e7231a0a2c802c79ccecde5ba"}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="e2000000a750945ec66828070ad9b88f5bad798647621b629d9d4825d1135c5b256e0f473f79df00dc513780242be280c49f7665b3ab9845e45bd63b3b36294eaf542063757913a636dda492e1cb6fb171e106a792e68510eb1a1f655d950300d7e447147f48ee12a51c2b19222caf128abc2ba848bd0000000000007c205539fdfb0c4491511ac9f634925754f288f6f902609fe7e014f1199a574e158c375f24875501fc851f7bca82e235cf772c989cef85"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) 2018/04/21 01:41:14 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x1, 0x1b8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, &(0x7f0000000040), &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000d00000000000000810065727370616e300000000000000000006970365f767469300000000000000000697036677265746170300000000000006970365f7674693000000000000000000180c20000000000000000000180c20000000000000000000000a0000000f000000028010000766c616e00000000000000000000000000000000000000000000000000000000080000000000000002000000000001006c6f670000000000000000000000000000000000000000000000000000000000280000000000000000b03c44a4ab993f21a642a6c98d9b52352c6a94ffbc6987f2fc82b348efe30000000000000000006d61726b000000000000000000000000000000000000000000000000000000001000000000000000f0ffffff00000000dfffffff00000000"]}, 0x230) 2018/04/21 01:41:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000b65000)='/dev/sg#\x00', 0x0, 0x0) unshare(0x40600) fstat(r0, &(0x7f0000001a80)) 2018/04/21 01:41:14 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8918, &(0x7f0000000000)) 2018/04/21 01:41:14 executing program 0: sched_setattr(0x0, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000007000)={0xffffffffc0000001}) epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x0) epoll_wait(r3, &(0x7f0000cd8ff4)=[{}], 0x1, 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) [ 198.474232] binder: 14560:14595 got reply transaction with bad transaction stack, transaction 80 has target 14560:14561 [ 198.485292] binder: 14560:14595 transaction failed 29201/-71, size 0-0 line 2778 [ 198.603475] binder: release 14560:14561 transaction 80 in, still active [ 198.610411] binder: send failed reply for transaction 80 to 14560:14595 [ 198.617310] binder: undelivered TRANSACTION_COMPLETE [ 198.622609] binder: undelivered TRANSACTION_ERROR: 29201 [ 198.628105] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/21 01:41:15 executing program 4: sched_setattr(0x0, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000007000)={0xffffffffc0000001}) epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x0) epoll_wait(r3, &(0x7f0000cd8ff4)=[{}], 0x1, 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/04/21 01:41:15 executing program 0: sched_setattr(0x0, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000007000)={0xffffffffc0000001}) epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x0) epoll_wait(r3, &(0x7f0000cd8ff4)=[{}], 0x1, 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/04/21 01:41:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f00000000c0)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, &(0x7f00000002c0)="95"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)}}], 0x0, 0x0, &(0x7f0000000500)}) 2018/04/21 01:41:15 executing program 6: sched_setattr(0x0, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000007000)={0xffffffffc0000001}) epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x0) epoll_wait(r3, &(0x7f0000cd8ff4)=[{}], 0x1, 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/04/21 01:41:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f00000000c0)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, &(0x7f00000002c0)="95"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)}}], 0x0, 0x0, &(0x7f0000000500)}) 2018/04/21 01:41:15 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000fd5000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000005ffc)=0x1, 0x4) 2018/04/21 01:41:15 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 2018/04/21 01:41:15 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00002a7ffc)=0x4000000011) readv(r0, &(0x7f0000001380)=[{&(0x7f0000001340)=""/17, 0x11}], 0x1) [ 198.753462] binder: BINDER_SET_CONTEXT_MGR already set [ 198.758980] binder: 14607:14612 ioctl 40046207 0 returned -16 2018/04/21 01:41:15 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000fd5000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000005ffc)=0x1, 0x4) 2018/04/21 01:41:15 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0185879, &(0x7f0000000080)={0x161, &(0x7f0000001540)}) 2018/04/21 01:41:15 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00002a7ffc)=0x4000000011) readv(r0, &(0x7f0000001380)=[{&(0x7f0000001340)=""/17, 0x11}], 0x1) 2018/04/21 01:41:15 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000fd5000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000005ffc)=0x1, 0x4) 2018/04/21 01:41:15 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00002a7ffc)=0x4000000011) readv(r0, &(0x7f0000001380)=[{&(0x7f0000001340)=""/17, 0x11}], 0x1) 2018/04/21 01:41:15 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0185879, &(0x7f0000000080)={0x161, &(0x7f0000001540)}) 2018/04/21 01:41:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000fd5000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000005ffc)=0x1, 0x4) 2018/04/21 01:41:16 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0185879, &(0x7f0000000080)={0x161, &(0x7f0000001540)}) [ 199.579884] binder: 14605:14689 got reply transaction with no transaction stack [ 199.587482] binder: 14605:14689 transaction failed 29201/-71, size 0-0 line 2763 [ 199.595157] binder: 14607:14692 got reply transaction with no transaction stack [ 199.602699] binder: 14607:14692 transaction failed 29201/-71, size 0-0 line 2763 2018/04/21 01:41:16 executing program 4: sched_setattr(0x0, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000007000)={0xffffffffc0000001}) epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x0) epoll_wait(r3, &(0x7f0000cd8ff4)=[{}], 0x1, 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/04/21 01:41:16 executing program 6: sched_setattr(0x0, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000007000)={0xffffffffc0000001}) epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x0) epoll_wait(r3, &(0x7f0000cd8ff4)=[{}], 0x1, 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/04/21 01:41:16 executing program 0: sched_setattr(0x0, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000007000)={0xffffffffc0000001}) epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x0) epoll_wait(r3, &(0x7f0000cd8ff4)=[{}], 0x1, 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/04/21 01:41:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f00000000c0)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, &(0x7f00000002c0)="95"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)}}], 0x0, 0x0, &(0x7f0000000500)}) 2018/04/21 01:41:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f00000000c0)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, &(0x7f00000002c0)="95"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)}}], 0x0, 0x0, &(0x7f0000000500)}) 2018/04/21 01:41:16 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00002a7ffc)=0x4000000011) readv(r0, &(0x7f0000001380)=[{&(0x7f0000001340)=""/17, 0x11}], 0x1) 2018/04/21 01:41:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00002a7ffc)=0x4000000011) readv(r0, &(0x7f0000001380)=[{&(0x7f0000001340)=""/17, 0x11}], 0x1) 2018/04/21 01:41:16 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0185879, &(0x7f0000000080)={0x161, &(0x7f0000001540)}) [ 199.742153] binder: release 14607:14688 transaction 83 out, still active [ 199.749160] binder: undelivered TRANSACTION_COMPLETE [ 199.754355] binder: undelivered TRANSACTION_ERROR: 29201 [ 199.800068] binder: release 14605:14611 transaction 84 out, still active [ 199.807062] binder: release 14605:14611 transaction 83 in, still active [ 199.813909] binder: undelivered TRANSACTION_COMPLETE [ 199.819083] binder: undelivered TRANSACTION_ERROR: 29201 [ 199.824612] binder: send failed reply for transaction 84, target dead [ 199.831260] binder: send failed reply for transaction 83, target dead [ 199.970413] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/21 01:41:16 executing program 5: ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x0, 0x0, 0x8}) r0 = syz_open_procfs(0x0, &(0x7f00009c8000)="636c6561725f72656673007edb") writev(r0, &(0x7f0000000040), 0x17b) [ 200.006826] binder: 14722:14724 ioctl 40046207 0 returned -16 2018/04/21 01:41:16 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f00003c0fdc)={0x20, 0x0, 0x1, 0x800000001, 0x0, 0x0, {0xa}, [@nested={0xc, 0x2, [@typed={0x8, 0x1, @ipv4=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}]}]}, 0x20}, 0x1}, 0x0) 2018/04/21 01:41:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00002a7ffc)=0x4000000011) readv(r0, &(0x7f0000001380)=[{&(0x7f0000001340)=""/17, 0x11}], 0x1) 2018/04/21 01:41:17 executing program 5: ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x0, 0x0, 0x8}) r0 = syz_open_procfs(0x0, &(0x7f00009c8000)="636c6561725f72656673007edb") writev(r0, &(0x7f0000000040), 0x17b) [ 200.223902] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. 2018/04/21 01:41:17 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f00003c0fdc)={0x20, 0x0, 0x1, 0x800000001, 0x0, 0x0, {0xa}, [@nested={0xc, 0x2, [@typed={0x8, 0x1, @ipv4=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}]}]}, 0x20}, 0x1}, 0x0) 2018/04/21 01:41:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00002a7ffc)=0x4000000011) readv(r0, &(0x7f0000001380)=[{&(0x7f0000001340)=""/17, 0x11}], 0x1) 2018/04/21 01:41:17 executing program 5: ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x0, 0x0, 0x8}) r0 = syz_open_procfs(0x0, &(0x7f00009c8000)="636c6561725f72656673007edb") writev(r0, &(0x7f0000000040), 0x17b) [ 200.543863] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. 2018/04/21 01:41:17 executing program 5: ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x0, 0x0, 0x8}) r0 = syz_open_procfs(0x0, &(0x7f00009c8000)="636c6561725f72656673007edb") writev(r0, &(0x7f0000000040), 0x17b) [ 200.776540] binder: 14718:14788 got reply transaction with bad transaction stack, transaction 88 has target 14718:14720 [ 200.787740] binder: 14718:14788 transaction failed 29201/-71, size 0-0 line 2778 [ 200.827241] binder: 14722:14797 got reply transaction with no transaction stack [ 200.834892] binder: 14722:14797 transaction failed 29201/-71, size 0-0 line 2763 2018/04/21 01:41:17 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write(r1, &(0x7f0000000340)="791f7dfde0815c48c13197fc2e324deacdee8360e87bd43084d6d6437c203d53", 0x20) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x5c, &(0x7f0000000000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/21 01:41:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="6769645f6d617000a9112471730000000836c0e50fe38a40fff3000000000009f4da8e7dba59b0c72ecf125d516674ed7f1e4ea7c8") writev(r0, &(0x7f00000012c0)=[{&(0x7f00000002c0)="b9", 0x1}], 0x1) 2018/04/21 01:41:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f00000000c0)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, &(0x7f00000002c0)="95"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)}}], 0x0, 0x0, &(0x7f0000000500)}) 2018/04/21 01:41:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f00000000c0)={0x14, 0x21, 0xaff, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) 2018/04/21 01:41:17 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f00003c0fdc)={0x20, 0x0, 0x1, 0x800000001, 0x0, 0x0, {0xa}, [@nested={0xc, 0x2, [@typed={0x8, 0x1, @ipv4=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}]}]}, 0x20}, 0x1}, 0x0) 2018/04/21 01:41:17 executing program 1: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000001200)=@generic={0x1e, "0101000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cd184a"}, 0x80) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000040)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000006c0)='\r', 0x1}], 0x1, &(0x7f00002d4000)}, 0x0) recvmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000e00), 0x80, &(0x7f0000000f80)=[{&(0x7f0000000340)=""/255, 0xff}], 0x1, &(0x7f0000000fc0)=""/112, 0x70}}], 0x400000000000043, 0x0, &(0x7f0000001180)) 2018/04/21 01:41:17 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000004c0)='./file0/file0\x00', 0x0) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, &(0x7f00000003c0)) umount2(&(0x7f0000000040)='./file0\x00', 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 2018/04/21 01:41:17 executing program 6: sched_setattr(0x0, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000007000)={0xffffffffc0000001}) epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x0) epoll_wait(r3, &(0x7f0000cd8ff4)=[{}], 0x1, 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) [ 201.002340] binder: release 14722:14792 transaction 89 out, still active [ 201.009440] binder: undelivered TRANSACTION_COMPLETE [ 201.014611] binder: undelivered TRANSACTION_ERROR: 29201 [ 201.091923] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 201.103304] binder: release 14718:14720 transaction 88 in, still active [ 201.110385] binder: send failed reply for transaction 88 to 14718:14788 [ 201.117236] binder: undelivered TRANSACTION_COMPLETE [ 201.122393] binder: undelivered TRANSACTION_ERROR: 29201 [ 201.127917] binder: undelivered TRANSACTION_ERROR: 29189 [ 201.133431] binder: send failed reply for transaction 89, target dead 2018/04/21 01:41:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="6769645f6d617000a9112471730000000836c0e50fe38a40fff3000000000009f4da8e7dba59b0c72ecf125d516674ed7f1e4ea7c8") writev(r0, &(0x7f00000012c0)=[{&(0x7f00000002c0)="b9", 0x1}], 0x1) 2018/04/21 01:41:17 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f00003c0fdc)={0x20, 0x0, 0x1, 0x800000001, 0x0, 0x0, {0xa}, [@nested={0xc, 0x2, [@typed={0x8, 0x1, @ipv4=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}]}]}, 0x20}, 0x1}, 0x0) 2018/04/21 01:41:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f00000000c0)={0x14, 0x21, 0xaff, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) 2018/04/21 01:41:18 executing program 1: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000001200)=@generic={0x1e, "0101000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cd184a"}, 0x80) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000040)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000006c0)='\r', 0x1}], 0x1, &(0x7f00002d4000)}, 0x0) recvmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000e00), 0x80, &(0x7f0000000f80)=[{&(0x7f0000000340)=""/255, 0xff}], 0x1, &(0x7f0000000fc0)=""/112, 0x70}}], 0x400000000000043, 0x0, &(0x7f0000001180)) [ 201.209095] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 201.216967] FAT-fs (loop0): Filesystem has been set read-only [ 201.293953] FAT-fs (loop0): Unrecognized mount option "fusectl" or missing value [ 201.371998] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 202.061397] binder: 14826:14856 got reply transaction with bad transaction stack, transaction 93 has target 14826:14828 [ 202.072461] binder: 14826:14856 transaction failed 29201/-71, size 0-0 line 2778 2018/04/21 01:41:18 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write(r1, &(0x7f0000000340)="791f7dfde0815c48c13197fc2e324deacdee8360e87bd43084d6d6437c203d53", 0x20) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x5c, &(0x7f0000000000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/21 01:41:18 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="6769645f6d617000a9112471730000000836c0e50fe38a40fff3000000000009f4da8e7dba59b0c72ecf125d516674ed7f1e4ea7c8") writev(r0, &(0x7f00000012c0)=[{&(0x7f00000002c0)="b9", 0x1}], 0x1) 2018/04/21 01:41:18 executing program 1: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000001200)=@generic={0x1e, "0101000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cd184a"}, 0x80) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000040)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000006c0)='\r', 0x1}], 0x1, &(0x7f00002d4000)}, 0x0) recvmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000e00), 0x80, &(0x7f0000000f80)=[{&(0x7f0000000340)=""/255, 0xff}], 0x1, &(0x7f0000000fc0)=""/112, 0x70}}], 0x400000000000043, 0x0, &(0x7f0000001180)) 2018/04/21 01:41:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f00000000c0)={0x14, 0x21, 0xaff, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) 2018/04/21 01:41:18 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000004c0)='./file0/file0\x00', 0x0) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, &(0x7f00000003c0)) umount2(&(0x7f0000000040)='./file0\x00', 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 2018/04/21 01:41:18 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000004c0)='./file0/file0\x00', 0x0) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, &(0x7f00000003c0)) umount2(&(0x7f0000000040)='./file0\x00', 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 2018/04/21 01:41:18 executing program 7: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000001200)=@generic={0x1e, "0101000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cd184a"}, 0x80) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000040)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000006c0)='\r', 0x1}], 0x1, &(0x7f00002d4000)}, 0x0) recvmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000e00), 0x80, &(0x7f0000000f80)=[{&(0x7f0000000340)=""/255, 0xff}], 0x1, &(0x7f0000000fc0)=""/112, 0x70}}], 0x400000000000043, 0x0, &(0x7f0000001180)) 2018/04/21 01:41:18 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000004c0)='./file0/file0\x00', 0x0) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, &(0x7f00000003c0)) umount2(&(0x7f0000000040)='./file0\x00', 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) [ 202.190291] binder: release 14826:14828 transaction 93 in, still active [ 202.197154] binder: send failed reply for transaction 93 to 14826:14856 [ 202.204154] binder: undelivered TRANSACTION_COMPLETE [ 202.209315] binder: undelivered TRANSACTION_ERROR: 29201 [ 202.214876] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/21 01:41:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f00000000c0)={0x14, 0x21, 0xaff, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) 2018/04/21 01:41:19 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="6769645f6d617000a9112471730000000836c0e50fe38a40fff3000000000009f4da8e7dba59b0c72ecf125d516674ed7f1e4ea7c8") writev(r0, &(0x7f00000012c0)=[{&(0x7f00000002c0)="b9", 0x1}], 0x1) 2018/04/21 01:41:19 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write(r1, &(0x7f0000000340)="791f7dfde0815c48c13197fc2e324deacdee8360e87bd43084d6d6437c203d53", 0x20) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x5c, &(0x7f0000000000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/21 01:41:19 executing program 7: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000001200)=@generic={0x1e, "0101000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cd184a"}, 0x80) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000040)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000006c0)='\r', 0x1}], 0x1, &(0x7f00002d4000)}, 0x0) recvmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000e00), 0x80, &(0x7f0000000f80)=[{&(0x7f0000000340)=""/255, 0xff}], 0x1, &(0x7f0000000fc0)=""/112, 0x70}}], 0x400000000000043, 0x0, &(0x7f0000001180)) 2018/04/21 01:41:19 executing program 1: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000001200)=@generic={0x1e, "0101000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cd184a"}, 0x80) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000040)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000006c0)='\r', 0x1}], 0x1, &(0x7f00002d4000)}, 0x0) recvmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000e00), 0x80, &(0x7f0000000f80)=[{&(0x7f0000000340)=""/255, 0xff}], 0x1, &(0x7f0000000fc0)=""/112, 0x70}}], 0x400000000000043, 0x0, &(0x7f0000001180)) 2018/04/21 01:41:19 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000004c0)='./file0/file0\x00', 0x0) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, &(0x7f00000003c0)) umount2(&(0x7f0000000040)='./file0\x00', 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) [ 202.372614] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 202.379891] FAT-fs (loop0): Filesystem has been set read-only [ 202.382730] FAT-fs (loop6): error, invalid access to FAT (entry 0x000006c0) [ 202.393150] FAT-fs (loop6): Filesystem has been set read-only [ 202.477781] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) [ 202.485078] FAT-fs (loop3): Filesystem has been set read-only 2018/04/21 01:41:19 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000004c0)='./file0/file0\x00', 0x0) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, &(0x7f00000003c0)) umount2(&(0x7f0000000040)='./file0\x00', 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 2018/04/21 01:41:19 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="6769645f6d617000a9112471730000000836c0e50fe38a40fff3000000000009f4da8e7dba59b0c72ecf125d516674ed7f1e4ea7c8") writev(r0, &(0x7f00000012c0)=[{&(0x7f00000002c0)="b9", 0x1}], 0x1) 2018/04/21 01:41:19 executing program 7: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000001200)=@generic={0x1e, "0101000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cd184a"}, 0x80) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000040)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000006c0)='\r', 0x1}], 0x1, &(0x7f00002d4000)}, 0x0) recvmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000e00), 0x80, &(0x7f0000000f80)=[{&(0x7f0000000340)=""/255, 0xff}], 0x1, &(0x7f0000000fc0)=""/112, 0x70}}], 0x400000000000043, 0x0, &(0x7f0000001180)) 2018/04/21 01:41:19 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write(r1, &(0x7f0000000340)="791f7dfde0815c48c13197fc2e324deacdee8360e87bd43084d6d6437c203d53", 0x20) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x5c, &(0x7f0000000000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/21 01:41:19 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000004c0)='./file0/file0\x00', 0x0) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, &(0x7f00000003c0)) umount2(&(0x7f0000000040)='./file0\x00', 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 2018/04/21 01:41:19 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000004c0)='./file0/file0\x00', 0x0) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, &(0x7f00000003c0)) umount2(&(0x7f0000000040)='./file0\x00', 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) [ 202.664882] FAT-fs (loop4): error, invalid access to FAT (entry 0x000006c0) [ 202.672302] FAT-fs (loop4): Filesystem has been set read-only [ 202.869420] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 202.876778] FAT-fs (loop5): Filesystem has been set read-only [ 202.986453] FAT-fs (loop6): error, invalid access to FAT (entry 0x000006c0) [ 202.989647] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 202.994244] FAT-fs (loop6): Filesystem has been set read-only [ 203.001192] FAT-fs (loop0): Filesystem has been set read-only 2018/04/21 01:41:19 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000004c0)='./file0/file0\x00', 0x0) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, &(0x7f00000003c0)) umount2(&(0x7f0000000040)='./file0\x00', 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 2018/04/21 01:41:19 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="6769645f6d617000a9112471730000000836c0e50fe38a40fff3000000000009f4da8e7dba59b0c72ecf125d516674ed7f1e4ea7c8") writev(r0, &(0x7f00000012c0)=[{&(0x7f00000002c0)="b9", 0x1}], 0x1) 2018/04/21 01:41:19 executing program 7: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000540), 0x0, 0x0) 2018/04/21 01:41:19 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x80000000005008, &(0x7f0000003ff8)) 2018/04/21 01:41:19 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000004c0)='./file0/file0\x00', 0x0) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, &(0x7f00000003c0)) umount2(&(0x7f0000000040)='./file0\x00', 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 2018/04/21 01:41:19 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000004c0)='./file0/file0\x00', 0x0) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, &(0x7f00000003c0)) umount2(&(0x7f0000000040)='./file0\x00', 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 2018/04/21 01:41:19 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000004c0)='./file0/file0\x00', 0x0) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, &(0x7f00000003c0)) umount2(&(0x7f0000000040)='./file0\x00', 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 2018/04/21 01:41:19 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000004c0)='./file0/file0\x00', 0x0) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, &(0x7f00000003c0)) umount2(&(0x7f0000000040)='./file0\x00', 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 2018/04/21 01:41:20 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="6769645f6d617000a9112471730000000836c0e50fe38a40fff3000000000009f4da8e7dba59b0c72ecf125d516674ed7f1e4ea7c8") writev(r0, &(0x7f00000012c0)=[{&(0x7f00000002c0)="b9", 0x1}], 0x1) 2018/04/21 01:41:20 executing program 7: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000540), 0x0, 0x0) 2018/04/21 01:41:20 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x80000000005008, &(0x7f0000003ff8)) [ 203.314848] FAT-fs (loop4): error, invalid access to FAT (entry 0x000006c0) [ 203.322123] FAT-fs (loop4): Filesystem has been set read-only [ 203.362449] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) [ 203.369825] FAT-fs (loop3): Filesystem has been set read-only [ 203.372298] FAT-fs (loop6): error, invalid access to FAT (entry 0x000006c0) [ 203.382122] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 203.383088] FAT-fs (loop6): Filesystem has been set read-only [ 203.390275] FAT-fs (loop5): Filesystem has been set read-only [ 203.417360] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 203.424681] FAT-fs (loop0): Filesystem has been set read-only 2018/04/21 01:41:20 executing program 1: r0 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000505000)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) epoll_pwait(r0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8, &(0x7f0000000440)={0x8000}, 0x8) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) openat$cgroup_int(r1, &(0x7f00000004c0)="6367722b656e64616e747300cc6a4b52d77f85b1d6172bb5365f38852c2cd4df8f05aa953623f49432bcc939bbc2065ec501e9b06942a3512d4a66c733", 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000240)={0x5, 0xfffffffffffffffd, 0x21f0, 'queue1\x00', 0x7f}) inotify_init1(0x1000) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000140)={0x8001, 0x0, 0x0, 0x81}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0x1f, r3, 0x0, 0x1}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x0, 0x8, 0xffffffffcbebbf1c}]}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000300)={{0xffffffffffffffff, 0x3, 0x80000001}, 0x6, 0x81}) socket$packet(0x11, 0x0, 0x300) r4 = memfd_create(&(0x7f0000000480)='/dev/input/mice\x00', 0x3) clone(0x0, &(0x7f0000000200)="17dd6280de3693223b6fdbc70650db5722605e7d4cfec7dee9e7ca3a83bd750a10fca3bdd2c2fde305012a95b619af30af684bba6e9e2031b1eec7e667e9c22c674d6eb942b78258369909dc14f2f5bd60202d6a38d497b47baf3e89fbca89a91e4706f3efdb55b9e9857fa2e05fdd62de157a7f60228f2c807e86ce264193d1206f5402c6f095c94a510e0c705386635a3f1a5970fd087434c0bf52f98bc0c951", &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)="f74dda86") gettid() setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000580)={r2, 0x3e6, 0xdf, "281209475b70e151dd624d23341cbc7ada8a682bf120d0db6dc0629d9acf8b3065f359e394e1360f673cbf338355247734328fec365891644c5e577901e289e43ee65a4461dab8993408d36ebad0c34879f71ff025aca551ae99f6b466d7136a1f524df40605bec7d1073ec1b216326c385a6d9b462fb4c3f896327c93c6ce14ddc81bbc32231d5743f5f795f7b6af503444f2c4064e7526512c709d303d7d36f427f084d596dc17c0db8ad6d17d2add09ec84e94f7f91bde3ab9486a1459c3c93b24772d7fac3224501e5c6f2a76417517ebd59a8258a51440ee46f98f3fa"}, 0xe7) getsockname$inet6(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) epoll_wait(0xffffffffffffffff, &(0x7f0000000340)=[{}], 0x1, 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10040000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[]}, 0x1}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000000)) perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a3c000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000400)={'ipddp0\x00', 0xbb}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000380)) 2018/04/21 01:41:20 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000004c0)='./file0/file0\x00', 0x0) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, &(0x7f00000003c0)) umount2(&(0x7f0000000040)='./file0\x00', 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 2018/04/21 01:41:20 executing program 7: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000540), 0x0, 0x0) 2018/04/21 01:41:20 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe000081000000e8ffff3f03000000450001070000001419001a0004000200070002000200000800005d14a4e91ee400", 0x39}], 0x1) [ 203.775259] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 203.784142] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 203.823241] FAT-fs (loop4): error, invalid access to FAT (entry 0x000006c0) [ 203.830604] FAT-fs (loop4): Filesystem has been set read-only [ 203.868147] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 203.876716] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. 2018/04/21 01:41:20 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000004c0)='./file0/file0\x00', 0x0) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, &(0x7f00000003c0)) umount2(&(0x7f0000000040)='./file0\x00', 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 2018/04/21 01:41:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000040)={[], 0xff}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], 0x7}) 2018/04/21 01:41:20 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x80000000005008, &(0x7f0000003ff8)) 2018/04/21 01:41:20 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000004c0)='./file0/file0\x00', 0x0) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, &(0x7f00000003c0)) umount2(&(0x7f0000000040)='./file0\x00', 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 2018/04/21 01:41:20 executing program 7: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000540), 0x0, 0x0) 2018/04/21 01:41:20 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000ff5ffc), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gre0\x00'}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000008c0)=@broute={'broute\x00', 0x20, 0x2, 0x3e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'ip6tnl0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [0x0, 0x1000], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0x108, 0x158}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x10000, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x86dd, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x130, 0x1b0, 0x200, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, @limit={'limit\x00', 0x20, {{0x0, 0xec}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x81, 'syz1\x00'}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x460) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x2, 0xa2b, 0x4, 0x7, 0x2, 0x20, 0x10000, 0x8a82, r3}, &(0x7f0000000180)=0x20) r5 = socket(0xf, 0x7ff, 0x6f) setsockopt$inet_group_source_req(r5, 0x0, 0xfe0d64ad1c6cb9f1, &(0x7f0000000680)={0x1000, {{0x2, 0x4e23, @multicast1=0xe0000001}}, {{0x2, 0x4e22, @broadcast=0xffffffff}}}, 0x108) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000940)={r4, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}}, 0x84) ioctl$DRM_IOCTL_AGP_ENABLE(r5, 0x40086432, &(0x7f0000000100)) r6 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r6, &(0x7f0000000080)={&(0x7f0000000240)=@nl=@kern={0x10}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)="5500000018007f04002d1cb2a4a280930a0600007da843cf19d0f869390009402f002100040000001900050000fc1700000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f00000000c0)}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000007c0)='tls\x00', 0x4) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001640)=@broute={'broute\x00', 0x20, 0x1, 0x1e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001700], 0x0, &(0x7f0000001980), &(0x7f0000001700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x0, 'vcan0\x00', 'ifb0\x00', 'syzkaller0\x00', 'vcan0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0xf8, 0x128}, [@common=@dnat={'dnat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 0xffffffffffffffff}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffbffffffffffe}]}, 0x260) getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000800), &(0x7f0000000840)=0x4) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)={0x2, 0x8, 0x7, 0x3}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x6, 0xfffffffffffffffd}, 0x4) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r7, 0x40206417, &(0x7f0000000080)={0xb6, 0x8, 0x7f, 0x8000, 0x3, 0x1}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x28, 0x6, &(0x7f0000581000)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xe8) 2018/04/21 01:41:20 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe000081000000e8ffff3f03000000450001070000001419001a0004000200070002000200000800005d14a4e91ee400", 0x39}], 0x1) 2018/04/21 01:41:20 executing program 1: r0 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000505000)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) epoll_pwait(r0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8, &(0x7f0000000440)={0x8000}, 0x8) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) openat$cgroup_int(r1, &(0x7f00000004c0)="6367722b656e64616e747300cc6a4b52d77f85b1d6172bb5365f38852c2cd4df8f05aa953623f49432bcc939bbc2065ec501e9b06942a3512d4a66c733", 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000240)={0x5, 0xfffffffffffffffd, 0x21f0, 'queue1\x00', 0x7f}) inotify_init1(0x1000) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000140)={0x8001, 0x0, 0x0, 0x81}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0x1f, r3, 0x0, 0x1}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x0, 0x8, 0xffffffffcbebbf1c}]}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000300)={{0xffffffffffffffff, 0x3, 0x80000001}, 0x6, 0x81}) socket$packet(0x11, 0x0, 0x300) r4 = memfd_create(&(0x7f0000000480)='/dev/input/mice\x00', 0x3) clone(0x0, &(0x7f0000000200)="17dd6280de3693223b6fdbc70650db5722605e7d4cfec7dee9e7ca3a83bd750a10fca3bdd2c2fde305012a95b619af30af684bba6e9e2031b1eec7e667e9c22c674d6eb942b78258369909dc14f2f5bd60202d6a38d497b47baf3e89fbca89a91e4706f3efdb55b9e9857fa2e05fdd62de157a7f60228f2c807e86ce264193d1206f5402c6f095c94a510e0c705386635a3f1a5970fd087434c0bf52f98bc0c951", &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)="f74dda86") gettid() setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000580)={r2, 0x3e6, 0xdf, "281209475b70e151dd624d23341cbc7ada8a682bf120d0db6dc0629d9acf8b3065f359e394e1360f673cbf338355247734328fec365891644c5e577901e289e43ee65a4461dab8993408d36ebad0c34879f71ff025aca551ae99f6b466d7136a1f524df40605bec7d1073ec1b216326c385a6d9b462fb4c3f896327c93c6ce14ddc81bbc32231d5743f5f795f7b6af503444f2c4064e7526512c709d303d7d36f427f084d596dc17c0db8ad6d17d2add09ec84e94f7f91bde3ab9486a1459c3c93b24772d7fac3224501e5c6f2a76417517ebd59a8258a51440ee46f98f3fa"}, 0xe7) getsockname$inet6(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) epoll_wait(0xffffffffffffffff, &(0x7f0000000340)=[{}], 0x1, 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10040000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[]}, 0x1}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000000)) perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a3c000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000400)={'ipddp0\x00', 0xbb}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000380)) 2018/04/21 01:41:20 executing program 7: r0 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000505000)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) epoll_pwait(r0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8, &(0x7f0000000440)={0x8000}, 0x8) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) openat$cgroup_int(r1, &(0x7f00000004c0)="6367722b656e64616e747300cc6a4b52d77f85b1d6172bb5365f38852c2cd4df8f05aa953623f49432bcc939bbc2065ec501e9b06942a3512d4a66c733", 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000240)={0x5, 0xfffffffffffffffd, 0x21f0, 'queue1\x00', 0x7f}) inotify_init1(0x1000) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000140)={0x8001, 0x0, 0x0, 0x81}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0x1f, r3, 0x0, 0x1}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x0, 0x8, 0xffffffffcbebbf1c}]}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000300)={{0xffffffffffffffff, 0x3, 0x80000001}, 0x6, 0x81}) socket$packet(0x11, 0x0, 0x300) r4 = memfd_create(&(0x7f0000000480)='/dev/input/mice\x00', 0x3) clone(0x0, &(0x7f0000000200)="17dd6280de3693223b6fdbc70650db5722605e7d4cfec7dee9e7ca3a83bd750a10fca3bdd2c2fde305012a95b619af30af684bba6e9e2031b1eec7e667e9c22c674d6eb942b78258369909dc14f2f5bd60202d6a38d497b47baf3e89fbca89a91e4706f3efdb55b9e9857fa2e05fdd62de157a7f60228f2c807e86ce264193d1206f5402c6f095c94a510e0c705386635a3f1a5970fd087434c0bf52f98bc0c951", &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)="f74dda86") gettid() setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000580)={r2, 0x3e6, 0xdf, "281209475b70e151dd624d23341cbc7ada8a682bf120d0db6dc0629d9acf8b3065f359e394e1360f673cbf338355247734328fec365891644c5e577901e289e43ee65a4461dab8993408d36ebad0c34879f71ff025aca551ae99f6b466d7136a1f524df40605bec7d1073ec1b216326c385a6d9b462fb4c3f896327c93c6ce14ddc81bbc32231d5743f5f795f7b6af503444f2c4064e7526512c709d303d7d36f427f084d596dc17c0db8ad6d17d2add09ec84e94f7f91bde3ab9486a1459c3c93b24772d7fac3224501e5c6f2a76417517ebd59a8258a51440ee46f98f3fa"}, 0xe7) getsockname$inet6(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) epoll_wait(0xffffffffffffffff, &(0x7f0000000340)=[{}], 0x1, 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10040000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[]}, 0x1}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000000)) perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a3c000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000400)={'ipddp0\x00', 0xbb}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000380)) 2018/04/21 01:41:20 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x80000000005008, &(0x7f0000003ff8)) [ 204.119940] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 204.128510] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 204.152589] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 204.159909] FAT-fs (loop5): Filesystem has been set read-only [ 204.208652] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) [ 204.216206] FAT-fs (loop3): Filesystem has been set read-only 2018/04/21 01:41:21 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe000081000000e8ffff3f03000000450001070000001419001a0004000200070002000200000800005d14a4e91ee400", 0x39}], 0x1) 2018/04/21 01:41:21 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000ff5ffc), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gre0\x00'}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000008c0)=@broute={'broute\x00', 0x20, 0x2, 0x3e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'ip6tnl0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [0x0, 0x1000], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0x108, 0x158}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x10000, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x86dd, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x130, 0x1b0, 0x200, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, @limit={'limit\x00', 0x20, {{0x0, 0xec}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x81, 'syz1\x00'}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x460) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x2, 0xa2b, 0x4, 0x7, 0x2, 0x20, 0x10000, 0x8a82, r3}, &(0x7f0000000180)=0x20) r5 = socket(0xf, 0x7ff, 0x6f) setsockopt$inet_group_source_req(r5, 0x0, 0xfe0d64ad1c6cb9f1, &(0x7f0000000680)={0x1000, {{0x2, 0x4e23, @multicast1=0xe0000001}}, {{0x2, 0x4e22, @broadcast=0xffffffff}}}, 0x108) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000940)={r4, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}}, 0x84) ioctl$DRM_IOCTL_AGP_ENABLE(r5, 0x40086432, &(0x7f0000000100)) r6 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r6, &(0x7f0000000080)={&(0x7f0000000240)=@nl=@kern={0x10}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)="5500000018007f04002d1cb2a4a280930a0600007da843cf19d0f869390009402f002100040000001900050000fc1700000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f00000000c0)}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000007c0)='tls\x00', 0x4) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001640)=@broute={'broute\x00', 0x20, 0x1, 0x1e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001700], 0x0, &(0x7f0000001980), &(0x7f0000001700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x0, 'vcan0\x00', 'ifb0\x00', 'syzkaller0\x00', 'vcan0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0xf8, 0x128}, [@common=@dnat={'dnat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 0xffffffffffffffff}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffbffffffffffe}]}, 0x260) getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000800), &(0x7f0000000840)=0x4) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)={0x2, 0x8, 0x7, 0x3}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x6, 0xfffffffffffffffd}, 0x4) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r7, 0x40206417, &(0x7f0000000080)={0xb6, 0x8, 0x7f, 0x8000, 0x3, 0x1}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x28, 0x6, &(0x7f0000581000)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xe8) 2018/04/21 01:41:21 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000ff5ffc), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gre0\x00'}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000008c0)=@broute={'broute\x00', 0x20, 0x2, 0x3e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'ip6tnl0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [0x0, 0x1000], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0x108, 0x158}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x10000, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x86dd, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x130, 0x1b0, 0x200, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, @limit={'limit\x00', 0x20, {{0x0, 0xec}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x81, 'syz1\x00'}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x460) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x2, 0xa2b, 0x4, 0x7, 0x2, 0x20, 0x10000, 0x8a82, r3}, &(0x7f0000000180)=0x20) r5 = socket(0xf, 0x7ff, 0x6f) setsockopt$inet_group_source_req(r5, 0x0, 0xfe0d64ad1c6cb9f1, &(0x7f0000000680)={0x1000, {{0x2, 0x4e23, @multicast1=0xe0000001}}, {{0x2, 0x4e22, @broadcast=0xffffffff}}}, 0x108) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000940)={r4, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}}, 0x84) ioctl$DRM_IOCTL_AGP_ENABLE(r5, 0x40086432, &(0x7f0000000100)) r6 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r6, &(0x7f0000000080)={&(0x7f0000000240)=@nl=@kern={0x10}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)="5500000018007f04002d1cb2a4a280930a0600007da843cf19d0f869390009402f002100040000001900050000fc1700000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f00000000c0)}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000007c0)='tls\x00', 0x4) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001640)=@broute={'broute\x00', 0x20, 0x1, 0x1e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001700], 0x0, &(0x7f0000001980), &(0x7f0000001700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x0, 'vcan0\x00', 'ifb0\x00', 'syzkaller0\x00', 'vcan0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0xf8, 0x128}, [@common=@dnat={'dnat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 0xffffffffffffffff}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffbffffffffffe}]}, 0x260) getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000800), &(0x7f0000000840)=0x4) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)={0x2, 0x8, 0x7, 0x3}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x6, 0xfffffffffffffffd}, 0x4) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r7, 0x40206417, &(0x7f0000000080)={0xb6, 0x8, 0x7f, 0x8000, 0x3, 0x1}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x28, 0x6, &(0x7f0000581000)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xe8) 2018/04/21 01:41:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000040)={[], 0xff}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], 0x7}) 2018/04/21 01:41:21 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000ff5ffc), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gre0\x00'}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000008c0)=@broute={'broute\x00', 0x20, 0x2, 0x3e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'ip6tnl0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [0x0, 0x1000], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0x108, 0x158}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x10000, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x86dd, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x130, 0x1b0, 0x200, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, @limit={'limit\x00', 0x20, {{0x0, 0xec}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x81, 'syz1\x00'}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x460) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x2, 0xa2b, 0x4, 0x7, 0x2, 0x20, 0x10000, 0x8a82, r3}, &(0x7f0000000180)=0x20) r5 = socket(0xf, 0x7ff, 0x6f) setsockopt$inet_group_source_req(r5, 0x0, 0xfe0d64ad1c6cb9f1, &(0x7f0000000680)={0x1000, {{0x2, 0x4e23, @multicast1=0xe0000001}}, {{0x2, 0x4e22, @broadcast=0xffffffff}}}, 0x108) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000940)={r4, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}}, 0x84) ioctl$DRM_IOCTL_AGP_ENABLE(r5, 0x40086432, &(0x7f0000000100)) r6 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r6, &(0x7f0000000080)={&(0x7f0000000240)=@nl=@kern={0x10}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)="5500000018007f04002d1cb2a4a280930a0600007da843cf19d0f869390009402f002100040000001900050000fc1700000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f00000000c0)}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000007c0)='tls\x00', 0x4) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001640)=@broute={'broute\x00', 0x20, 0x1, 0x1e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001700], 0x0, &(0x7f0000001980), &(0x7f0000001700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x0, 'vcan0\x00', 'ifb0\x00', 'syzkaller0\x00', 'vcan0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0xf8, 0x128}, [@common=@dnat={'dnat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 0xffffffffffffffff}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffbffffffffffe}]}, 0x260) getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000800), &(0x7f0000000840)=0x4) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)={0x2, 0x8, 0x7, 0x3}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x6, 0xfffffffffffffffd}, 0x4) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r7, 0x40206417, &(0x7f0000000080)={0xb6, 0x8, 0x7f, 0x8000, 0x3, 0x1}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x28, 0x6, &(0x7f0000581000)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xe8) 2018/04/21 01:41:21 executing program 7: r0 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000505000)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) epoll_pwait(r0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8, &(0x7f0000000440)={0x8000}, 0x8) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) openat$cgroup_int(r1, &(0x7f00000004c0)="6367722b656e64616e747300cc6a4b52d77f85b1d6172bb5365f38852c2cd4df8f05aa953623f49432bcc939bbc2065ec501e9b06942a3512d4a66c733", 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000240)={0x5, 0xfffffffffffffffd, 0x21f0, 'queue1\x00', 0x7f}) inotify_init1(0x1000) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000140)={0x8001, 0x0, 0x0, 0x81}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0x1f, r3, 0x0, 0x1}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x0, 0x8, 0xffffffffcbebbf1c}]}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000300)={{0xffffffffffffffff, 0x3, 0x80000001}, 0x6, 0x81}) socket$packet(0x11, 0x0, 0x300) r4 = memfd_create(&(0x7f0000000480)='/dev/input/mice\x00', 0x3) clone(0x0, &(0x7f0000000200)="17dd6280de3693223b6fdbc70650db5722605e7d4cfec7dee9e7ca3a83bd750a10fca3bdd2c2fde305012a95b619af30af684bba6e9e2031b1eec7e667e9c22c674d6eb942b78258369909dc14f2f5bd60202d6a38d497b47baf3e89fbca89a91e4706f3efdb55b9e9857fa2e05fdd62de157a7f60228f2c807e86ce264193d1206f5402c6f095c94a510e0c705386635a3f1a5970fd087434c0bf52f98bc0c951", &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)="f74dda86") gettid() setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000580)={r2, 0x3e6, 0xdf, "281209475b70e151dd624d23341cbc7ada8a682bf120d0db6dc0629d9acf8b3065f359e394e1360f673cbf338355247734328fec365891644c5e577901e289e43ee65a4461dab8993408d36ebad0c34879f71ff025aca551ae99f6b466d7136a1f524df40605bec7d1073ec1b216326c385a6d9b462fb4c3f896327c93c6ce14ddc81bbc32231d5743f5f795f7b6af503444f2c4064e7526512c709d303d7d36f427f084d596dc17c0db8ad6d17d2add09ec84e94f7f91bde3ab9486a1459c3c93b24772d7fac3224501e5c6f2a76417517ebd59a8258a51440ee46f98f3fa"}, 0xe7) getsockname$inet6(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) epoll_wait(0xffffffffffffffff, &(0x7f0000000340)=[{}], 0x1, 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10040000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[]}, 0x1}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000000)) perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a3c000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000400)={'ipddp0\x00', 0xbb}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000380)) 2018/04/21 01:41:21 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe000081000000e8ffff3f03000000450001070000001419001a0004000200070002000200000800005d14a4e91ee400", 0x39}], 0x1) 2018/04/21 01:41:21 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000ff5ffc), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gre0\x00'}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000008c0)=@broute={'broute\x00', 0x20, 0x2, 0x3e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'ip6tnl0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [0x0, 0x1000], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0x108, 0x158}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x10000, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x86dd, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x130, 0x1b0, 0x200, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, @limit={'limit\x00', 0x20, {{0x0, 0xec}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x81, 'syz1\x00'}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x460) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x2, 0xa2b, 0x4, 0x7, 0x2, 0x20, 0x10000, 0x8a82, r3}, &(0x7f0000000180)=0x20) r5 = socket(0xf, 0x7ff, 0x6f) setsockopt$inet_group_source_req(r5, 0x0, 0xfe0d64ad1c6cb9f1, &(0x7f0000000680)={0x1000, {{0x2, 0x4e23, @multicast1=0xe0000001}}, {{0x2, 0x4e22, @broadcast=0xffffffff}}}, 0x108) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000940)={r4, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}}, 0x84) ioctl$DRM_IOCTL_AGP_ENABLE(r5, 0x40086432, &(0x7f0000000100)) r6 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r6, &(0x7f0000000080)={&(0x7f0000000240)=@nl=@kern={0x10}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)="5500000018007f04002d1cb2a4a280930a0600007da843cf19d0f869390009402f002100040000001900050000fc1700000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f00000000c0)}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000007c0)='tls\x00', 0x4) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001640)=@broute={'broute\x00', 0x20, 0x1, 0x1e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001700], 0x0, &(0x7f0000001980), &(0x7f0000001700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x0, 'vcan0\x00', 'ifb0\x00', 'syzkaller0\x00', 'vcan0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0xf8, 0x128}, [@common=@dnat={'dnat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 0xffffffffffffffff}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffbffffffffffe}]}, 0x260) getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000800), &(0x7f0000000840)=0x4) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)={0x2, 0x8, 0x7, 0x3}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x6, 0xfffffffffffffffd}, 0x4) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r7, 0x40206417, &(0x7f0000000080)={0xb6, 0x8, 0x7f, 0x8000, 0x3, 0x1}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x28, 0x6, &(0x7f0000581000)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xe8) 2018/04/21 01:41:21 executing program 1: r0 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000505000)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) epoll_pwait(r0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8, &(0x7f0000000440)={0x8000}, 0x8) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) openat$cgroup_int(r1, &(0x7f00000004c0)="6367722b656e64616e747300cc6a4b52d77f85b1d6172bb5365f38852c2cd4df8f05aa953623f49432bcc939bbc2065ec501e9b06942a3512d4a66c733", 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000240)={0x5, 0xfffffffffffffffd, 0x21f0, 'queue1\x00', 0x7f}) inotify_init1(0x1000) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000140)={0x8001, 0x0, 0x0, 0x81}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0x1f, r3, 0x0, 0x1}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x0, 0x8, 0xffffffffcbebbf1c}]}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000300)={{0xffffffffffffffff, 0x3, 0x80000001}, 0x6, 0x81}) socket$packet(0x11, 0x0, 0x300) r4 = memfd_create(&(0x7f0000000480)='/dev/input/mice\x00', 0x3) clone(0x0, &(0x7f0000000200)="17dd6280de3693223b6fdbc70650db5722605e7d4cfec7dee9e7ca3a83bd750a10fca3bdd2c2fde305012a95b619af30af684bba6e9e2031b1eec7e667e9c22c674d6eb942b78258369909dc14f2f5bd60202d6a38d497b47baf3e89fbca89a91e4706f3efdb55b9e9857fa2e05fdd62de157a7f60228f2c807e86ce264193d1206f5402c6f095c94a510e0c705386635a3f1a5970fd087434c0bf52f98bc0c951", &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)="f74dda86") gettid() setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000580)={r2, 0x3e6, 0xdf, "281209475b70e151dd624d23341cbc7ada8a682bf120d0db6dc0629d9acf8b3065f359e394e1360f673cbf338355247734328fec365891644c5e577901e289e43ee65a4461dab8993408d36ebad0c34879f71ff025aca551ae99f6b466d7136a1f524df40605bec7d1073ec1b216326c385a6d9b462fb4c3f896327c93c6ce14ddc81bbc32231d5743f5f795f7b6af503444f2c4064e7526512c709d303d7d36f427f084d596dc17c0db8ad6d17d2add09ec84e94f7f91bde3ab9486a1459c3c93b24772d7fac3224501e5c6f2a76417517ebd59a8258a51440ee46f98f3fa"}, 0xe7) getsockname$inet6(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) epoll_wait(0xffffffffffffffff, &(0x7f0000000340)=[{}], 0x1, 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10040000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[]}, 0x1}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000000)) perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a3c000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000400)={'ipddp0\x00', 0xbb}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000380)) 2018/04/21 01:41:21 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000ff5ffc), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gre0\x00'}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000008c0)=@broute={'broute\x00', 0x20, 0x2, 0x3e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'ip6tnl0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [0x0, 0x1000], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0x108, 0x158}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x10000, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x86dd, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x130, 0x1b0, 0x200, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, @limit={'limit\x00', 0x20, {{0x0, 0xec}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x81, 'syz1\x00'}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x460) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x2, 0xa2b, 0x4, 0x7, 0x2, 0x20, 0x10000, 0x8a82, r3}, &(0x7f0000000180)=0x20) r5 = socket(0xf, 0x7ff, 0x6f) setsockopt$inet_group_source_req(r5, 0x0, 0xfe0d64ad1c6cb9f1, &(0x7f0000000680)={0x1000, {{0x2, 0x4e23, @multicast1=0xe0000001}}, {{0x2, 0x4e22, @broadcast=0xffffffff}}}, 0x108) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000940)={r4, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}}, 0x84) ioctl$DRM_IOCTL_AGP_ENABLE(r5, 0x40086432, &(0x7f0000000100)) r6 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r6, &(0x7f0000000080)={&(0x7f0000000240)=@nl=@kern={0x10}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)="5500000018007f04002d1cb2a4a280930a0600007da843cf19d0f869390009402f002100040000001900050000fc1700000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f00000000c0)}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000007c0)='tls\x00', 0x4) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001640)=@broute={'broute\x00', 0x20, 0x1, 0x1e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001700], 0x0, &(0x7f0000001980), &(0x7f0000001700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x0, 'vcan0\x00', 'ifb0\x00', 'syzkaller0\x00', 'vcan0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0xf8, 0x128}, [@common=@dnat={'dnat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 0xffffffffffffffff}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffbffffffffffe}]}, 0x260) getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000800), &(0x7f0000000840)=0x4) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)={0x2, 0x8, 0x7, 0x3}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x6, 0xfffffffffffffffd}, 0x4) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r7, 0x40206417, &(0x7f0000000080)={0xb6, 0x8, 0x7f, 0x8000, 0x3, 0x1}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x28, 0x6, &(0x7f0000581000)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xe8) 2018/04/21 01:41:21 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000ff5ffc), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gre0\x00'}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000008c0)=@broute={'broute\x00', 0x20, 0x2, 0x3e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'ip6tnl0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [0x0, 0x1000], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0x108, 0x158}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x10000, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x86dd, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x130, 0x1b0, 0x200, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, @limit={'limit\x00', 0x20, {{0x0, 0xec}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x81, 'syz1\x00'}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x460) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x2, 0xa2b, 0x4, 0x7, 0x2, 0x20, 0x10000, 0x8a82, r3}, &(0x7f0000000180)=0x20) r5 = socket(0xf, 0x7ff, 0x6f) setsockopt$inet_group_source_req(r5, 0x0, 0xfe0d64ad1c6cb9f1, &(0x7f0000000680)={0x1000, {{0x2, 0x4e23, @multicast1=0xe0000001}}, {{0x2, 0x4e22, @broadcast=0xffffffff}}}, 0x108) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000940)={r4, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}}, 0x84) ioctl$DRM_IOCTL_AGP_ENABLE(r5, 0x40086432, &(0x7f0000000100)) r6 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r6, &(0x7f0000000080)={&(0x7f0000000240)=@nl=@kern={0x10}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)="5500000018007f04002d1cb2a4a280930a0600007da843cf19d0f869390009402f002100040000001900050000fc1700000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f00000000c0)}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000007c0)='tls\x00', 0x4) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001640)=@broute={'broute\x00', 0x20, 0x1, 0x1e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001700], 0x0, &(0x7f0000001980), &(0x7f0000001700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x0, 'vcan0\x00', 'ifb0\x00', 'syzkaller0\x00', 'vcan0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0xf8, 0x128}, [@common=@dnat={'dnat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 0xffffffffffffffff}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffbffffffffffe}]}, 0x260) getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000800), &(0x7f0000000840)=0x4) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)={0x2, 0x8, 0x7, 0x3}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x6, 0xfffffffffffffffd}, 0x4) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r7, 0x40206417, &(0x7f0000000080)={0xb6, 0x8, 0x7f, 0x8000, 0x3, 0x1}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x28, 0x6, &(0x7f0000581000)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xe8) 2018/04/21 01:41:21 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000ff5ffc), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gre0\x00'}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000008c0)=@broute={'broute\x00', 0x20, 0x2, 0x3e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'ip6tnl0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [0x0, 0x1000], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0x108, 0x158}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x10000, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x86dd, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x130, 0x1b0, 0x200, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, @limit={'limit\x00', 0x20, {{0x0, 0xec}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x81, 'syz1\x00'}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x460) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x2, 0xa2b, 0x4, 0x7, 0x2, 0x20, 0x10000, 0x8a82, r3}, &(0x7f0000000180)=0x20) r5 = socket(0xf, 0x7ff, 0x6f) setsockopt$inet_group_source_req(r5, 0x0, 0xfe0d64ad1c6cb9f1, &(0x7f0000000680)={0x1000, {{0x2, 0x4e23, @multicast1=0xe0000001}}, {{0x2, 0x4e22, @broadcast=0xffffffff}}}, 0x108) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000940)={r4, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}}, 0x84) ioctl$DRM_IOCTL_AGP_ENABLE(r5, 0x40086432, &(0x7f0000000100)) r6 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r6, &(0x7f0000000080)={&(0x7f0000000240)=@nl=@kern={0x10}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)="5500000018007f04002d1cb2a4a280930a0600007da843cf19d0f869390009402f002100040000001900050000fc1700000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f00000000c0)}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000007c0)='tls\x00', 0x4) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001640)=@broute={'broute\x00', 0x20, 0x1, 0x1e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001700], 0x0, &(0x7f0000001980), &(0x7f0000001700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x0, 'vcan0\x00', 'ifb0\x00', 'syzkaller0\x00', 'vcan0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0xf8, 0x128}, [@common=@dnat={'dnat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 0xffffffffffffffff}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffbffffffffffe}]}, 0x260) getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000800), &(0x7f0000000840)=0x4) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)={0x2, 0x8, 0x7, 0x3}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x6, 0xfffffffffffffffd}, 0x4) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r7, 0x40206417, &(0x7f0000000080)={0xb6, 0x8, 0x7f, 0x8000, 0x3, 0x1}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x28, 0x6, &(0x7f0000581000)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xe8) 2018/04/21 01:41:21 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000ff5ffc), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gre0\x00'}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000008c0)=@broute={'broute\x00', 0x20, 0x2, 0x3e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'ip6tnl0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [0x0, 0x1000], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0x108, 0x158}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x10000, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x86dd, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x130, 0x1b0, 0x200, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, @limit={'limit\x00', 0x20, {{0x0, 0xec}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x81, 'syz1\x00'}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x460) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x2, 0xa2b, 0x4, 0x7, 0x2, 0x20, 0x10000, 0x8a82, r3}, &(0x7f0000000180)=0x20) r5 = socket(0xf, 0x7ff, 0x6f) setsockopt$inet_group_source_req(r5, 0x0, 0xfe0d64ad1c6cb9f1, &(0x7f0000000680)={0x1000, {{0x2, 0x4e23, @multicast1=0xe0000001}}, {{0x2, 0x4e22, @broadcast=0xffffffff}}}, 0x108) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000940)={r4, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}}, 0x84) ioctl$DRM_IOCTL_AGP_ENABLE(r5, 0x40086432, &(0x7f0000000100)) r6 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r6, &(0x7f0000000080)={&(0x7f0000000240)=@nl=@kern={0x10}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)="5500000018007f04002d1cb2a4a280930a0600007da843cf19d0f869390009402f002100040000001900050000fc1700000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f00000000c0)}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000007c0)='tls\x00', 0x4) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001640)=@broute={'broute\x00', 0x20, 0x1, 0x1e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001700], 0x0, &(0x7f0000001980), &(0x7f0000001700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x0, 'vcan0\x00', 'ifb0\x00', 'syzkaller0\x00', 'vcan0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0xf8, 0x128}, [@common=@dnat={'dnat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 0xffffffffffffffff}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffbffffffffffe}]}, 0x260) getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000800), &(0x7f0000000840)=0x4) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)={0x2, 0x8, 0x7, 0x3}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x6, 0xfffffffffffffffd}, 0x4) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r7, 0x40206417, &(0x7f0000000080)={0xb6, 0x8, 0x7f, 0x8000, 0x3, 0x1}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x28, 0x6, &(0x7f0000581000)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xe8) 2018/04/21 01:41:21 executing program 1: r0 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000505000)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) epoll_pwait(r0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8, &(0x7f0000000440)={0x8000}, 0x8) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) openat$cgroup_int(r1, &(0x7f00000004c0)="6367722b656e64616e747300cc6a4b52d77f85b1d6172bb5365f38852c2cd4df8f05aa953623f49432bcc939bbc2065ec501e9b06942a3512d4a66c733", 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000240)={0x5, 0xfffffffffffffffd, 0x21f0, 'queue1\x00', 0x7f}) inotify_init1(0x1000) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000140)={0x8001, 0x0, 0x0, 0x81}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0x1f, r3, 0x0, 0x1}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x0, 0x8, 0xffffffffcbebbf1c}]}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000300)={{0xffffffffffffffff, 0x3, 0x80000001}, 0x6, 0x81}) socket$packet(0x11, 0x0, 0x300) r4 = memfd_create(&(0x7f0000000480)='/dev/input/mice\x00', 0x3) clone(0x0, &(0x7f0000000200)="17dd6280de3693223b6fdbc70650db5722605e7d4cfec7dee9e7ca3a83bd750a10fca3bdd2c2fde305012a95b619af30af684bba6e9e2031b1eec7e667e9c22c674d6eb942b78258369909dc14f2f5bd60202d6a38d497b47baf3e89fbca89a91e4706f3efdb55b9e9857fa2e05fdd62de157a7f60228f2c807e86ce264193d1206f5402c6f095c94a510e0c705386635a3f1a5970fd087434c0bf52f98bc0c951", &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)="f74dda86") gettid() setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000580)={r2, 0x3e6, 0xdf, "281209475b70e151dd624d23341cbc7ada8a682bf120d0db6dc0629d9acf8b3065f359e394e1360f673cbf338355247734328fec365891644c5e577901e289e43ee65a4461dab8993408d36ebad0c34879f71ff025aca551ae99f6b466d7136a1f524df40605bec7d1073ec1b216326c385a6d9b462fb4c3f896327c93c6ce14ddc81bbc32231d5743f5f795f7b6af503444f2c4064e7526512c709d303d7d36f427f084d596dc17c0db8ad6d17d2add09ec84e94f7f91bde3ab9486a1459c3c93b24772d7fac3224501e5c6f2a76417517ebd59a8258a51440ee46f98f3fa"}, 0xe7) getsockname$inet6(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) epoll_wait(0xffffffffffffffff, &(0x7f0000000340)=[{}], 0x1, 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10040000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[]}, 0x1}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000000)) perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a3c000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000400)={'ipddp0\x00', 0xbb}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000380)) 2018/04/21 01:41:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000040)={[], 0xff}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], 0x7}) 2018/04/21 01:41:21 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000ff5ffc), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gre0\x00'}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000008c0)=@broute={'broute\x00', 0x20, 0x2, 0x3e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'ip6tnl0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [0x0, 0x1000], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0x108, 0x158}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x10000, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x86dd, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x130, 0x1b0, 0x200, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, @limit={'limit\x00', 0x20, {{0x0, 0xec}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x81, 'syz1\x00'}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x460) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x2, 0xa2b, 0x4, 0x7, 0x2, 0x20, 0x10000, 0x8a82, r3}, &(0x7f0000000180)=0x20) r5 = socket(0xf, 0x7ff, 0x6f) setsockopt$inet_group_source_req(r5, 0x0, 0xfe0d64ad1c6cb9f1, &(0x7f0000000680)={0x1000, {{0x2, 0x4e23, @multicast1=0xe0000001}}, {{0x2, 0x4e22, @broadcast=0xffffffff}}}, 0x108) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000940)={r4, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}}, 0x84) ioctl$DRM_IOCTL_AGP_ENABLE(r5, 0x40086432, &(0x7f0000000100)) r6 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r6, &(0x7f0000000080)={&(0x7f0000000240)=@nl=@kern={0x10}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)="5500000018007f04002d1cb2a4a280930a0600007da843cf19d0f869390009402f002100040000001900050000fc1700000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f00000000c0)}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000007c0)='tls\x00', 0x4) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001640)=@broute={'broute\x00', 0x20, 0x1, 0x1e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001700], 0x0, &(0x7f0000001980), &(0x7f0000001700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x0, 'vcan0\x00', 'ifb0\x00', 'syzkaller0\x00', 'vcan0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0xf8, 0x128}, [@common=@dnat={'dnat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 0xffffffffffffffff}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffbffffffffffe}]}, 0x260) getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000800), &(0x7f0000000840)=0x4) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)={0x2, 0x8, 0x7, 0x3}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x6, 0xfffffffffffffffd}, 0x4) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r7, 0x40206417, &(0x7f0000000080)={0xb6, 0x8, 0x7f, 0x8000, 0x3, 0x1}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x28, 0x6, &(0x7f0000581000)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xe8) 2018/04/21 01:41:21 executing program 7: r0 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000505000)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) epoll_pwait(r0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8, &(0x7f0000000440)={0x8000}, 0x8) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) openat$cgroup_int(r1, &(0x7f00000004c0)="6367722b656e64616e747300cc6a4b52d77f85b1d6172bb5365f38852c2cd4df8f05aa953623f49432bcc939bbc2065ec501e9b06942a3512d4a66c733", 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000240)={0x5, 0xfffffffffffffffd, 0x21f0, 'queue1\x00', 0x7f}) inotify_init1(0x1000) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000140)={0x8001, 0x0, 0x0, 0x81}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0x1f, r3, 0x0, 0x1}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x0, 0x8, 0xffffffffcbebbf1c}]}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000300)={{0xffffffffffffffff, 0x3, 0x80000001}, 0x6, 0x81}) socket$packet(0x11, 0x0, 0x300) r4 = memfd_create(&(0x7f0000000480)='/dev/input/mice\x00', 0x3) clone(0x0, &(0x7f0000000200)="17dd6280de3693223b6fdbc70650db5722605e7d4cfec7dee9e7ca3a83bd750a10fca3bdd2c2fde305012a95b619af30af684bba6e9e2031b1eec7e667e9c22c674d6eb942b78258369909dc14f2f5bd60202d6a38d497b47baf3e89fbca89a91e4706f3efdb55b9e9857fa2e05fdd62de157a7f60228f2c807e86ce264193d1206f5402c6f095c94a510e0c705386635a3f1a5970fd087434c0bf52f98bc0c951", &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)="f74dda86") gettid() setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000580)={r2, 0x3e6, 0xdf, "281209475b70e151dd624d23341cbc7ada8a682bf120d0db6dc0629d9acf8b3065f359e394e1360f673cbf338355247734328fec365891644c5e577901e289e43ee65a4461dab8993408d36ebad0c34879f71ff025aca551ae99f6b466d7136a1f524df40605bec7d1073ec1b216326c385a6d9b462fb4c3f896327c93c6ce14ddc81bbc32231d5743f5f795f7b6af503444f2c4064e7526512c709d303d7d36f427f084d596dc17c0db8ad6d17d2add09ec84e94f7f91bde3ab9486a1459c3c93b24772d7fac3224501e5c6f2a76417517ebd59a8258a51440ee46f98f3fa"}, 0xe7) getsockname$inet6(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) epoll_wait(0xffffffffffffffff, &(0x7f0000000340)=[{}], 0x1, 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10040000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[]}, 0x1}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000000)) perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a3c000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000400)={'ipddp0\x00', 0xbb}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000380)) 2018/04/21 01:41:21 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000ff5ffc), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gre0\x00'}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000008c0)=@broute={'broute\x00', 0x20, 0x2, 0x3e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'ip6tnl0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [0x0, 0x1000], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0x108, 0x158}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x10000, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x86dd, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x130, 0x1b0, 0x200, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, @limit={'limit\x00', 0x20, {{0x0, 0xec}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x81, 'syz1\x00'}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x460) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x2, 0xa2b, 0x4, 0x7, 0x2, 0x20, 0x10000, 0x8a82, r3}, &(0x7f0000000180)=0x20) r5 = socket(0xf, 0x7ff, 0x6f) setsockopt$inet_group_source_req(r5, 0x0, 0xfe0d64ad1c6cb9f1, &(0x7f0000000680)={0x1000, {{0x2, 0x4e23, @multicast1=0xe0000001}}, {{0x2, 0x4e22, @broadcast=0xffffffff}}}, 0x108) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000940)={r4, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}}, 0x84) ioctl$DRM_IOCTL_AGP_ENABLE(r5, 0x40086432, &(0x7f0000000100)) r6 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r6, &(0x7f0000000080)={&(0x7f0000000240)=@nl=@kern={0x10}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)="5500000018007f04002d1cb2a4a280930a0600007da843cf19d0f869390009402f002100040000001900050000fc1700000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f00000000c0)}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000007c0)='tls\x00', 0x4) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001640)=@broute={'broute\x00', 0x20, 0x1, 0x1e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001700], 0x0, &(0x7f0000001980), &(0x7f0000001700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x0, 'vcan0\x00', 'ifb0\x00', 'syzkaller0\x00', 'vcan0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0xf8, 0x128}, [@common=@dnat={'dnat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 0xffffffffffffffff}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffbffffffffffe}]}, 0x260) getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000800), &(0x7f0000000840)=0x4) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)={0x2, 0x8, 0x7, 0x3}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x6, 0xfffffffffffffffd}, 0x4) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r7, 0x40206417, &(0x7f0000000080)={0xb6, 0x8, 0x7f, 0x8000, 0x3, 0x1}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x28, 0x6, &(0x7f0000581000)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xe8) 2018/04/21 01:41:21 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000040)={[], 0xff}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], 0x7}) 2018/04/21 01:41:21 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000ff5ffc), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gre0\x00'}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000008c0)=@broute={'broute\x00', 0x20, 0x2, 0x3e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'ip6tnl0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [0x0, 0x1000], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0x108, 0x158}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x10000, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x86dd, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x130, 0x1b0, 0x200, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, @limit={'limit\x00', 0x20, {{0x0, 0xec}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x81, 'syz1\x00'}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x460) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x2, 0xa2b, 0x4, 0x7, 0x2, 0x20, 0x10000, 0x8a82, r3}, &(0x7f0000000180)=0x20) r5 = socket(0xf, 0x7ff, 0x6f) setsockopt$inet_group_source_req(r5, 0x0, 0xfe0d64ad1c6cb9f1, &(0x7f0000000680)={0x1000, {{0x2, 0x4e23, @multicast1=0xe0000001}}, {{0x2, 0x4e22, @broadcast=0xffffffff}}}, 0x108) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000940)={r4, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}}, 0x84) ioctl$DRM_IOCTL_AGP_ENABLE(r5, 0x40086432, &(0x7f0000000100)) r6 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r6, &(0x7f0000000080)={&(0x7f0000000240)=@nl=@kern={0x10}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)="5500000018007f04002d1cb2a4a280930a0600007da843cf19d0f869390009402f002100040000001900050000fc1700000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f00000000c0)}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000007c0)='tls\x00', 0x4) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001640)=@broute={'broute\x00', 0x20, 0x1, 0x1e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001700], 0x0, &(0x7f0000001980), &(0x7f0000001700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x0, 'vcan0\x00', 'ifb0\x00', 'syzkaller0\x00', 'vcan0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0xf8, 0x128}, [@common=@dnat={'dnat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 0xffffffffffffffff}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffbffffffffffe}]}, 0x260) getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000800), &(0x7f0000000840)=0x4) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)={0x2, 0x8, 0x7, 0x3}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x6, 0xfffffffffffffffd}, 0x4) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r7, 0x40206417, &(0x7f0000000080)={0xb6, 0x8, 0x7f, 0x8000, 0x3, 0x1}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x28, 0x6, &(0x7f0000581000)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xe8) 2018/04/21 01:41:21 executing program 2: r0 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000505000)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) epoll_pwait(r0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8, &(0x7f0000000440)={0x8000}, 0x8) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) openat$cgroup_int(r1, &(0x7f00000004c0)="6367722b656e64616e747300cc6a4b52d77f85b1d6172bb5365f38852c2cd4df8f05aa953623f49432bcc939bbc2065ec501e9b06942a3512d4a66c733", 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000240)={0x5, 0xfffffffffffffffd, 0x21f0, 'queue1\x00', 0x7f}) inotify_init1(0x1000) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000140)={0x8001, 0x0, 0x0, 0x81}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0x1f, r3, 0x0, 0x1}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x0, 0x8, 0xffffffffcbebbf1c}]}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000300)={{0xffffffffffffffff, 0x3, 0x80000001}, 0x6, 0x81}) socket$packet(0x11, 0x0, 0x300) r4 = memfd_create(&(0x7f0000000480)='/dev/input/mice\x00', 0x3) clone(0x0, &(0x7f0000000200)="17dd6280de3693223b6fdbc70650db5722605e7d4cfec7dee9e7ca3a83bd750a10fca3bdd2c2fde305012a95b619af30af684bba6e9e2031b1eec7e667e9c22c674d6eb942b78258369909dc14f2f5bd60202d6a38d497b47baf3e89fbca89a91e4706f3efdb55b9e9857fa2e05fdd62de157a7f60228f2c807e86ce264193d1206f5402c6f095c94a510e0c705386635a3f1a5970fd087434c0bf52f98bc0c951", &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)="f74dda86") gettid() setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000580)={r2, 0x3e6, 0xdf, "281209475b70e151dd624d23341cbc7ada8a682bf120d0db6dc0629d9acf8b3065f359e394e1360f673cbf338355247734328fec365891644c5e577901e289e43ee65a4461dab8993408d36ebad0c34879f71ff025aca551ae99f6b466d7136a1f524df40605bec7d1073ec1b216326c385a6d9b462fb4c3f896327c93c6ce14ddc81bbc32231d5743f5f795f7b6af503444f2c4064e7526512c709d303d7d36f427f084d596dc17c0db8ad6d17d2add09ec84e94f7f91bde3ab9486a1459c3c93b24772d7fac3224501e5c6f2a76417517ebd59a8258a51440ee46f98f3fa"}, 0xe7) getsockname$inet6(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) epoll_wait(0xffffffffffffffff, &(0x7f0000000340)=[{}], 0x1, 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10040000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[]}, 0x1}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000000)) perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a3c000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000400)={'ipddp0\x00', 0xbb}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000380)) 2018/04/21 01:41:21 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000ff5ffc), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gre0\x00'}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000008c0)=@broute={'broute\x00', 0x20, 0x2, 0x3e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'ip6tnl0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [0x0, 0x1000], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0x108, 0x158}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x10000, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x86dd, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x130, 0x1b0, 0x200, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, @limit={'limit\x00', 0x20, {{0x0, 0xec}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x81, 'syz1\x00'}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x460) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x2, 0xa2b, 0x4, 0x7, 0x2, 0x20, 0x10000, 0x8a82, r3}, &(0x7f0000000180)=0x20) r5 = socket(0xf, 0x7ff, 0x6f) setsockopt$inet_group_source_req(r5, 0x0, 0xfe0d64ad1c6cb9f1, &(0x7f0000000680)={0x1000, {{0x2, 0x4e23, @multicast1=0xe0000001}}, {{0x2, 0x4e22, @broadcast=0xffffffff}}}, 0x108) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000940)={r4, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}}, 0x84) ioctl$DRM_IOCTL_AGP_ENABLE(r5, 0x40086432, &(0x7f0000000100)) r6 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r6, &(0x7f0000000080)={&(0x7f0000000240)=@nl=@kern={0x10}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)="5500000018007f04002d1cb2a4a280930a0600007da843cf19d0f869390009402f002100040000001900050000fc1700000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f00000000c0)}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000007c0)='tls\x00', 0x4) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001640)=@broute={'broute\x00', 0x20, 0x1, 0x1e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001700], 0x0, &(0x7f0000001980), &(0x7f0000001700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x0, 'vcan0\x00', 'ifb0\x00', 'syzkaller0\x00', 'vcan0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0xf8, 0x128}, [@common=@dnat={'dnat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 0xffffffffffffffff}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffbffffffffffe}]}, 0x260) getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000800), &(0x7f0000000840)=0x4) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)={0x2, 0x8, 0x7, 0x3}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x6, 0xfffffffffffffffd}, 0x4) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r7, 0x40206417, &(0x7f0000000080)={0xb6, 0x8, 0x7f, 0x8000, 0x3, 0x1}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x28, 0x6, &(0x7f0000581000)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xe8) 2018/04/21 01:41:21 executing program 0: r0 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000505000)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) epoll_pwait(r0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8, &(0x7f0000000440)={0x8000}, 0x8) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) openat$cgroup_int(r1, &(0x7f00000004c0)="6367722b656e64616e747300cc6a4b52d77f85b1d6172bb5365f38852c2cd4df8f05aa953623f49432bcc939bbc2065ec501e9b06942a3512d4a66c733", 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000240)={0x5, 0xfffffffffffffffd, 0x21f0, 'queue1\x00', 0x7f}) inotify_init1(0x1000) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000140)={0x8001, 0x0, 0x0, 0x81}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0x1f, r3, 0x0, 0x1}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x0, 0x8, 0xffffffffcbebbf1c}]}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000300)={{0xffffffffffffffff, 0x3, 0x80000001}, 0x6, 0x81}) socket$packet(0x11, 0x0, 0x300) r4 = memfd_create(&(0x7f0000000480)='/dev/input/mice\x00', 0x3) clone(0x0, &(0x7f0000000200)="17dd6280de3693223b6fdbc70650db5722605e7d4cfec7dee9e7ca3a83bd750a10fca3bdd2c2fde305012a95b619af30af684bba6e9e2031b1eec7e667e9c22c674d6eb942b78258369909dc14f2f5bd60202d6a38d497b47baf3e89fbca89a91e4706f3efdb55b9e9857fa2e05fdd62de157a7f60228f2c807e86ce264193d1206f5402c6f095c94a510e0c705386635a3f1a5970fd087434c0bf52f98bc0c951", &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)="f74dda86") gettid() setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000580)={r2, 0x3e6, 0xdf, "281209475b70e151dd624d23341cbc7ada8a682bf120d0db6dc0629d9acf8b3065f359e394e1360f673cbf338355247734328fec365891644c5e577901e289e43ee65a4461dab8993408d36ebad0c34879f71ff025aca551ae99f6b466d7136a1f524df40605bec7d1073ec1b216326c385a6d9b462fb4c3f896327c93c6ce14ddc81bbc32231d5743f5f795f7b6af503444f2c4064e7526512c709d303d7d36f427f084d596dc17c0db8ad6d17d2add09ec84e94f7f91bde3ab9486a1459c3c93b24772d7fac3224501e5c6f2a76417517ebd59a8258a51440ee46f98f3fa"}, 0xe7) getsockname$inet6(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) epoll_wait(0xffffffffffffffff, &(0x7f0000000340)=[{}], 0x1, 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10040000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[]}, 0x1}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000000)) perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a3c000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000400)={'ipddp0\x00', 0xbb}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000380)) 2018/04/21 01:41:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000040)={[], 0xff}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], 0x7}) 2018/04/21 01:41:21 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000040)={[], 0xff}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], 0x7}) 2018/04/21 01:41:21 executing program 7: r0 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000505000)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) epoll_pwait(r0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8, &(0x7f0000000440)={0x8000}, 0x8) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) openat$cgroup_int(r1, &(0x7f00000004c0)="6367722b656e64616e747300cc6a4b52d77f85b1d6172bb5365f38852c2cd4df8f05aa953623f49432bcc939bbc2065ec501e9b06942a3512d4a66c733", 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000240)={0x5, 0xfffffffffffffffd, 0x21f0, 'queue1\x00', 0x7f}) inotify_init1(0x1000) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000140)={0x8001, 0x0, 0x0, 0x81}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0x1f, r3, 0x0, 0x1}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x0, 0x8, 0xffffffffcbebbf1c}]}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000300)={{0xffffffffffffffff, 0x3, 0x80000001}, 0x6, 0x81}) socket$packet(0x11, 0x0, 0x300) r4 = memfd_create(&(0x7f0000000480)='/dev/input/mice\x00', 0x3) clone(0x0, &(0x7f0000000200)="17dd6280de3693223b6fdbc70650db5722605e7d4cfec7dee9e7ca3a83bd750a10fca3bdd2c2fde305012a95b619af30af684bba6e9e2031b1eec7e667e9c22c674d6eb942b78258369909dc14f2f5bd60202d6a38d497b47baf3e89fbca89a91e4706f3efdb55b9e9857fa2e05fdd62de157a7f60228f2c807e86ce264193d1206f5402c6f095c94a510e0c705386635a3f1a5970fd087434c0bf52f98bc0c951", &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)="f74dda86") gettid() setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000580)={r2, 0x3e6, 0xdf, "281209475b70e151dd624d23341cbc7ada8a682bf120d0db6dc0629d9acf8b3065f359e394e1360f673cbf338355247734328fec365891644c5e577901e289e43ee65a4461dab8993408d36ebad0c34879f71ff025aca551ae99f6b466d7136a1f524df40605bec7d1073ec1b216326c385a6d9b462fb4c3f896327c93c6ce14ddc81bbc32231d5743f5f795f7b6af503444f2c4064e7526512c709d303d7d36f427f084d596dc17c0db8ad6d17d2add09ec84e94f7f91bde3ab9486a1459c3c93b24772d7fac3224501e5c6f2a76417517ebd59a8258a51440ee46f98f3fa"}, 0xe7) getsockname$inet6(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) epoll_wait(0xffffffffffffffff, &(0x7f0000000340)=[{}], 0x1, 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10040000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[]}, 0x1}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000000)) perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a3c000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000400)={'ipddp0\x00', 0xbb}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000380)) 2018/04/21 01:41:21 executing program 1: r0 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000505000)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) epoll_pwait(r0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8, &(0x7f0000000440)={0x8000}, 0x8) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) openat$cgroup_int(r1, &(0x7f00000004c0)="6367722b656e64616e747300cc6a4b52d77f85b1d6172bb5365f38852c2cd4df8f05aa953623f49432bcc939bbc2065ec501e9b06942a3512d4a66c733", 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000240)={0x5, 0xfffffffffffffffd, 0x21f0, 'queue1\x00', 0x7f}) inotify_init1(0x1000) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000140)={0x8001, 0x0, 0x0, 0x81}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0x1f, r3, 0x0, 0x1}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x0, 0x8, 0xffffffffcbebbf1c}]}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000300)={{0xffffffffffffffff, 0x3, 0x80000001}, 0x6, 0x81}) socket$packet(0x11, 0x0, 0x300) r4 = memfd_create(&(0x7f0000000480)='/dev/input/mice\x00', 0x3) clone(0x0, &(0x7f0000000200)="17dd6280de3693223b6fdbc70650db5722605e7d4cfec7dee9e7ca3a83bd750a10fca3bdd2c2fde305012a95b619af30af684bba6e9e2031b1eec7e667e9c22c674d6eb942b78258369909dc14f2f5bd60202d6a38d497b47baf3e89fbca89a91e4706f3efdb55b9e9857fa2e05fdd62de157a7f60228f2c807e86ce264193d1206f5402c6f095c94a510e0c705386635a3f1a5970fd087434c0bf52f98bc0c951", &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)="f74dda86") gettid() setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000580)={r2, 0x3e6, 0xdf, "281209475b70e151dd624d23341cbc7ada8a682bf120d0db6dc0629d9acf8b3065f359e394e1360f673cbf338355247734328fec365891644c5e577901e289e43ee65a4461dab8993408d36ebad0c34879f71ff025aca551ae99f6b466d7136a1f524df40605bec7d1073ec1b216326c385a6d9b462fb4c3f896327c93c6ce14ddc81bbc32231d5743f5f795f7b6af503444f2c4064e7526512c709d303d7d36f427f084d596dc17c0db8ad6d17d2add09ec84e94f7f91bde3ab9486a1459c3c93b24772d7fac3224501e5c6f2a76417517ebd59a8258a51440ee46f98f3fa"}, 0xe7) getsockname$inet6(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) epoll_wait(0xffffffffffffffff, &(0x7f0000000340)=[{}], 0x1, 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10040000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[]}, 0x1}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000000)) perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a3c000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000400)={'ipddp0\x00', 0xbb}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000380)) 2018/04/21 01:41:22 executing program 1: r0 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000505000)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) epoll_pwait(r0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8, &(0x7f0000000440)={0x8000}, 0x8) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) openat$cgroup_int(r1, &(0x7f00000004c0)="6367722b656e64616e747300cc6a4b52d77f85b1d6172bb5365f38852c2cd4df8f05aa953623f49432bcc939bbc2065ec501e9b06942a3512d4a66c733", 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000240)={0x5, 0xfffffffffffffffd, 0x21f0, 'queue1\x00', 0x7f}) inotify_init1(0x1000) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000140)={0x8001, 0x0, 0x0, 0x81}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0x1f, r3, 0x0, 0x1}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x0, 0x8, 0xffffffffcbebbf1c}]}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000300)={{0xffffffffffffffff, 0x3, 0x80000001}, 0x6, 0x81}) socket$packet(0x11, 0x0, 0x300) r4 = memfd_create(&(0x7f0000000480)='/dev/input/mice\x00', 0x3) clone(0x0, &(0x7f0000000200)="17dd6280de3693223b6fdbc70650db5722605e7d4cfec7dee9e7ca3a83bd750a10fca3bdd2c2fde305012a95b619af30af684bba6e9e2031b1eec7e667e9c22c674d6eb942b78258369909dc14f2f5bd60202d6a38d497b47baf3e89fbca89a91e4706f3efdb55b9e9857fa2e05fdd62de157a7f60228f2c807e86ce264193d1206f5402c6f095c94a510e0c705386635a3f1a5970fd087434c0bf52f98bc0c951", &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)="f74dda86") gettid() setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000580)={r2, 0x3e6, 0xdf, "281209475b70e151dd624d23341cbc7ada8a682bf120d0db6dc0629d9acf8b3065f359e394e1360f673cbf338355247734328fec365891644c5e577901e289e43ee65a4461dab8993408d36ebad0c34879f71ff025aca551ae99f6b466d7136a1f524df40605bec7d1073ec1b216326c385a6d9b462fb4c3f896327c93c6ce14ddc81bbc32231d5743f5f795f7b6af503444f2c4064e7526512c709d303d7d36f427f084d596dc17c0db8ad6d17d2add09ec84e94f7f91bde3ab9486a1459c3c93b24772d7fac3224501e5c6f2a76417517ebd59a8258a51440ee46f98f3fa"}, 0xe7) getsockname$inet6(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) epoll_wait(0xffffffffffffffff, &(0x7f0000000340)=[{}], 0x1, 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10040000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[]}, 0x1}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000000)) perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a3c000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000400)={'ipddp0\x00', 0xbb}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000380)) 2018/04/21 01:41:22 executing program 3: capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0xe}, 0x2c) 2018/04/21 01:41:22 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14}, @remote={0xac, 0x14, 0x14, 0xbb}}, @udp={0x0, 0x0, 0x8}}}}}, &(0x7f0000000000)) 2018/04/21 01:41:22 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000040)={[], 0xff}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], 0x7}) 2018/04/21 01:41:22 executing program 2: r0 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000505000)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) epoll_pwait(r0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8, &(0x7f0000000440)={0x8000}, 0x8) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) openat$cgroup_int(r1, &(0x7f00000004c0)="6367722b656e64616e747300cc6a4b52d77f85b1d6172bb5365f38852c2cd4df8f05aa953623f49432bcc939bbc2065ec501e9b06942a3512d4a66c733", 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000240)={0x5, 0xfffffffffffffffd, 0x21f0, 'queue1\x00', 0x7f}) inotify_init1(0x1000) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000140)={0x8001, 0x0, 0x0, 0x81}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0x1f, r3, 0x0, 0x1}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x0, 0x8, 0xffffffffcbebbf1c}]}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000300)={{0xffffffffffffffff, 0x3, 0x80000001}, 0x6, 0x81}) socket$packet(0x11, 0x0, 0x300) r4 = memfd_create(&(0x7f0000000480)='/dev/input/mice\x00', 0x3) clone(0x0, &(0x7f0000000200)="17dd6280de3693223b6fdbc70650db5722605e7d4cfec7dee9e7ca3a83bd750a10fca3bdd2c2fde305012a95b619af30af684bba6e9e2031b1eec7e667e9c22c674d6eb942b78258369909dc14f2f5bd60202d6a38d497b47baf3e89fbca89a91e4706f3efdb55b9e9857fa2e05fdd62de157a7f60228f2c807e86ce264193d1206f5402c6f095c94a510e0c705386635a3f1a5970fd087434c0bf52f98bc0c951", &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)="f74dda86") gettid() setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000580)={r2, 0x3e6, 0xdf, "281209475b70e151dd624d23341cbc7ada8a682bf120d0db6dc0629d9acf8b3065f359e394e1360f673cbf338355247734328fec365891644c5e577901e289e43ee65a4461dab8993408d36ebad0c34879f71ff025aca551ae99f6b466d7136a1f524df40605bec7d1073ec1b216326c385a6d9b462fb4c3f896327c93c6ce14ddc81bbc32231d5743f5f795f7b6af503444f2c4064e7526512c709d303d7d36f427f084d596dc17c0db8ad6d17d2add09ec84e94f7f91bde3ab9486a1459c3c93b24772d7fac3224501e5c6f2a76417517ebd59a8258a51440ee46f98f3fa"}, 0xe7) getsockname$inet6(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) epoll_wait(0xffffffffffffffff, &(0x7f0000000340)=[{}], 0x1, 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10040000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[]}, 0x1}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000000)) perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a3c000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000400)={'ipddp0\x00', 0xbb}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000380)) 2018/04/21 01:41:22 executing program 0: r0 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000505000)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) epoll_pwait(r0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8, &(0x7f0000000440)={0x8000}, 0x8) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) openat$cgroup_int(r1, &(0x7f00000004c0)="6367722b656e64616e747300cc6a4b52d77f85b1d6172bb5365f38852c2cd4df8f05aa953623f49432bcc939bbc2065ec501e9b06942a3512d4a66c733", 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000240)={0x5, 0xfffffffffffffffd, 0x21f0, 'queue1\x00', 0x7f}) inotify_init1(0x1000) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000140)={0x8001, 0x0, 0x0, 0x81}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0x1f, r3, 0x0, 0x1}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x0, 0x8, 0xffffffffcbebbf1c}]}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000300)={{0xffffffffffffffff, 0x3, 0x80000001}, 0x6, 0x81}) socket$packet(0x11, 0x0, 0x300) r4 = memfd_create(&(0x7f0000000480)='/dev/input/mice\x00', 0x3) clone(0x0, &(0x7f0000000200)="17dd6280de3693223b6fdbc70650db5722605e7d4cfec7dee9e7ca3a83bd750a10fca3bdd2c2fde305012a95b619af30af684bba6e9e2031b1eec7e667e9c22c674d6eb942b78258369909dc14f2f5bd60202d6a38d497b47baf3e89fbca89a91e4706f3efdb55b9e9857fa2e05fdd62de157a7f60228f2c807e86ce264193d1206f5402c6f095c94a510e0c705386635a3f1a5970fd087434c0bf52f98bc0c951", &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)="f74dda86") gettid() setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000580)={r2, 0x3e6, 0xdf, "281209475b70e151dd624d23341cbc7ada8a682bf120d0db6dc0629d9acf8b3065f359e394e1360f673cbf338355247734328fec365891644c5e577901e289e43ee65a4461dab8993408d36ebad0c34879f71ff025aca551ae99f6b466d7136a1f524df40605bec7d1073ec1b216326c385a6d9b462fb4c3f896327c93c6ce14ddc81bbc32231d5743f5f795f7b6af503444f2c4064e7526512c709d303d7d36f427f084d596dc17c0db8ad6d17d2add09ec84e94f7f91bde3ab9486a1459c3c93b24772d7fac3224501e5c6f2a76417517ebd59a8258a51440ee46f98f3fa"}, 0xe7) getsockname$inet6(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) epoll_wait(0xffffffffffffffff, &(0x7f0000000340)=[{}], 0x1, 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10040000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[]}, 0x1}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000000)) perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a3c000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000400)={'ipddp0\x00', 0xbb}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000380)) 2018/04/21 01:41:22 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x800, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$eventfd(r0, &(0x7f0000000080), 0xfcb1) 2018/04/21 01:41:22 executing program 7: r0 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000505000)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) epoll_pwait(r0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8, &(0x7f0000000440)={0x8000}, 0x8) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) openat$cgroup_int(r1, &(0x7f00000004c0)="6367722b656e64616e747300cc6a4b52d77f85b1d6172bb5365f38852c2cd4df8f05aa953623f49432bcc939bbc2065ec501e9b06942a3512d4a66c733", 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000240)={0x5, 0xfffffffffffffffd, 0x21f0, 'queue1\x00', 0x7f}) inotify_init1(0x1000) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000140)={0x8001, 0x0, 0x0, 0x81}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0x1f, r3, 0x0, 0x1}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x0, 0x8, 0xffffffffcbebbf1c}]}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000300)={{0xffffffffffffffff, 0x3, 0x80000001}, 0x6, 0x81}) socket$packet(0x11, 0x0, 0x300) r4 = memfd_create(&(0x7f0000000480)='/dev/input/mice\x00', 0x3) clone(0x0, &(0x7f0000000200)="17dd6280de3693223b6fdbc70650db5722605e7d4cfec7dee9e7ca3a83bd750a10fca3bdd2c2fde305012a95b619af30af684bba6e9e2031b1eec7e667e9c22c674d6eb942b78258369909dc14f2f5bd60202d6a38d497b47baf3e89fbca89a91e4706f3efdb55b9e9857fa2e05fdd62de157a7f60228f2c807e86ce264193d1206f5402c6f095c94a510e0c705386635a3f1a5970fd087434c0bf52f98bc0c951", &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)="f74dda86") gettid() setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000580)={r2, 0x3e6, 0xdf, "281209475b70e151dd624d23341cbc7ada8a682bf120d0db6dc0629d9acf8b3065f359e394e1360f673cbf338355247734328fec365891644c5e577901e289e43ee65a4461dab8993408d36ebad0c34879f71ff025aca551ae99f6b466d7136a1f524df40605bec7d1073ec1b216326c385a6d9b462fb4c3f896327c93c6ce14ddc81bbc32231d5743f5f795f7b6af503444f2c4064e7526512c709d303d7d36f427f084d596dc17c0db8ad6d17d2add09ec84e94f7f91bde3ab9486a1459c3c93b24772d7fac3224501e5c6f2a76417517ebd59a8258a51440ee46f98f3fa"}, 0xe7) getsockname$inet6(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) epoll_wait(0xffffffffffffffff, &(0x7f0000000340)=[{}], 0x1, 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10040000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[]}, 0x1}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000000)) perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a3c000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000400)={'ipddp0\x00', 0xbb}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000380)) 2018/04/21 01:41:22 executing program 3: capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0xe}, 0x2c) 2018/04/21 01:41:22 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x800, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$eventfd(r0, &(0x7f0000000080), 0xfcb1) 2018/04/21 01:41:22 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14}, @remote={0xac, 0x14, 0x14, 0xbb}}, @udp={0x0, 0x0, 0x8}}}}}, &(0x7f0000000000)) 2018/04/21 01:41:22 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff00a, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/04/21 01:41:22 executing program 3: capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0xe}, 0x2c) 2018/04/21 01:41:22 executing program 1: r0 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000505000)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) epoll_pwait(r0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8, &(0x7f0000000440)={0x8000}, 0x8) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) openat$cgroup_int(r1, &(0x7f00000004c0)="6367722b656e64616e747300cc6a4b52d77f85b1d6172bb5365f38852c2cd4df8f05aa953623f49432bcc939bbc2065ec501e9b06942a3512d4a66c733", 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000240)={0x5, 0xfffffffffffffffd, 0x21f0, 'queue1\x00', 0x7f}) inotify_init1(0x1000) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000140)={0x8001, 0x0, 0x0, 0x81}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0x1f, r3, 0x0, 0x1}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x0, 0x8, 0xffffffffcbebbf1c}]}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000300)={{0xffffffffffffffff, 0x3, 0x80000001}, 0x6, 0x81}) socket$packet(0x11, 0x0, 0x300) r4 = memfd_create(&(0x7f0000000480)='/dev/input/mice\x00', 0x3) clone(0x0, &(0x7f0000000200)="17dd6280de3693223b6fdbc70650db5722605e7d4cfec7dee9e7ca3a83bd750a10fca3bdd2c2fde305012a95b619af30af684bba6e9e2031b1eec7e667e9c22c674d6eb942b78258369909dc14f2f5bd60202d6a38d497b47baf3e89fbca89a91e4706f3efdb55b9e9857fa2e05fdd62de157a7f60228f2c807e86ce264193d1206f5402c6f095c94a510e0c705386635a3f1a5970fd087434c0bf52f98bc0c951", &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)="f74dda86") gettid() setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000580)={r2, 0x3e6, 0xdf, "281209475b70e151dd624d23341cbc7ada8a682bf120d0db6dc0629d9acf8b3065f359e394e1360f673cbf338355247734328fec365891644c5e577901e289e43ee65a4461dab8993408d36ebad0c34879f71ff025aca551ae99f6b466d7136a1f524df40605bec7d1073ec1b216326c385a6d9b462fb4c3f896327c93c6ce14ddc81bbc32231d5743f5f795f7b6af503444f2c4064e7526512c709d303d7d36f427f084d596dc17c0db8ad6d17d2add09ec84e94f7f91bde3ab9486a1459c3c93b24772d7fac3224501e5c6f2a76417517ebd59a8258a51440ee46f98f3fa"}, 0xe7) getsockname$inet6(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) epoll_wait(0xffffffffffffffff, &(0x7f0000000340)=[{}], 0x1, 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10040000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[]}, 0x1}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000000)) perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a3c000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000400)={'ipddp0\x00', 0xbb}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000380)) 2018/04/21 01:41:22 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x800, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$eventfd(r0, &(0x7f0000000080), 0xfcb1) 2018/04/21 01:41:22 executing program 2: r0 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000505000)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) epoll_pwait(r0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8, &(0x7f0000000440)={0x8000}, 0x8) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) openat$cgroup_int(r1, &(0x7f00000004c0)="6367722b656e64616e747300cc6a4b52d77f85b1d6172bb5365f38852c2cd4df8f05aa953623f49432bcc939bbc2065ec501e9b06942a3512d4a66c733", 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000240)={0x5, 0xfffffffffffffffd, 0x21f0, 'queue1\x00', 0x7f}) inotify_init1(0x1000) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000140)={0x8001, 0x0, 0x0, 0x81}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0x1f, r3, 0x0, 0x1}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x0, 0x8, 0xffffffffcbebbf1c}]}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000300)={{0xffffffffffffffff, 0x3, 0x80000001}, 0x6, 0x81}) socket$packet(0x11, 0x0, 0x300) r4 = memfd_create(&(0x7f0000000480)='/dev/input/mice\x00', 0x3) clone(0x0, &(0x7f0000000200)="17dd6280de3693223b6fdbc70650db5722605e7d4cfec7dee9e7ca3a83bd750a10fca3bdd2c2fde305012a95b619af30af684bba6e9e2031b1eec7e667e9c22c674d6eb942b78258369909dc14f2f5bd60202d6a38d497b47baf3e89fbca89a91e4706f3efdb55b9e9857fa2e05fdd62de157a7f60228f2c807e86ce264193d1206f5402c6f095c94a510e0c705386635a3f1a5970fd087434c0bf52f98bc0c951", &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)="f74dda86") gettid() setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000580)={r2, 0x3e6, 0xdf, "281209475b70e151dd624d23341cbc7ada8a682bf120d0db6dc0629d9acf8b3065f359e394e1360f673cbf338355247734328fec365891644c5e577901e289e43ee65a4461dab8993408d36ebad0c34879f71ff025aca551ae99f6b466d7136a1f524df40605bec7d1073ec1b216326c385a6d9b462fb4c3f896327c93c6ce14ddc81bbc32231d5743f5f795f7b6af503444f2c4064e7526512c709d303d7d36f427f084d596dc17c0db8ad6d17d2add09ec84e94f7f91bde3ab9486a1459c3c93b24772d7fac3224501e5c6f2a76417517ebd59a8258a51440ee46f98f3fa"}, 0xe7) getsockname$inet6(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) epoll_wait(0xffffffffffffffff, &(0x7f0000000340)=[{}], 0x1, 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10040000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[]}, 0x1}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000000)) perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a3c000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000400)={'ipddp0\x00', 0xbb}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000380)) 2018/04/21 01:41:22 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff00a, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/04/21 01:41:22 executing program 0: r0 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000505000)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) epoll_pwait(r0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8, &(0x7f0000000440)={0x8000}, 0x8) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) openat$cgroup_int(r1, &(0x7f00000004c0)="6367722b656e64616e747300cc6a4b52d77f85b1d6172bb5365f38852c2cd4df8f05aa953623f49432bcc939bbc2065ec501e9b06942a3512d4a66c733", 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000240)={0x5, 0xfffffffffffffffd, 0x21f0, 'queue1\x00', 0x7f}) inotify_init1(0x1000) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000140)={0x8001, 0x0, 0x0, 0x81}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0x1f, r3, 0x0, 0x1}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x0, 0x8, 0xffffffffcbebbf1c}]}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000300)={{0xffffffffffffffff, 0x3, 0x80000001}, 0x6, 0x81}) socket$packet(0x11, 0x0, 0x300) r4 = memfd_create(&(0x7f0000000480)='/dev/input/mice\x00', 0x3) clone(0x0, &(0x7f0000000200)="17dd6280de3693223b6fdbc70650db5722605e7d4cfec7dee9e7ca3a83bd750a10fca3bdd2c2fde305012a95b619af30af684bba6e9e2031b1eec7e667e9c22c674d6eb942b78258369909dc14f2f5bd60202d6a38d497b47baf3e89fbca89a91e4706f3efdb55b9e9857fa2e05fdd62de157a7f60228f2c807e86ce264193d1206f5402c6f095c94a510e0c705386635a3f1a5970fd087434c0bf52f98bc0c951", &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)="f74dda86") gettid() setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000580)={r2, 0x3e6, 0xdf, "281209475b70e151dd624d23341cbc7ada8a682bf120d0db6dc0629d9acf8b3065f359e394e1360f673cbf338355247734328fec365891644c5e577901e289e43ee65a4461dab8993408d36ebad0c34879f71ff025aca551ae99f6b466d7136a1f524df40605bec7d1073ec1b216326c385a6d9b462fb4c3f896327c93c6ce14ddc81bbc32231d5743f5f795f7b6af503444f2c4064e7526512c709d303d7d36f427f084d596dc17c0db8ad6d17d2add09ec84e94f7f91bde3ab9486a1459c3c93b24772d7fac3224501e5c6f2a76417517ebd59a8258a51440ee46f98f3fa"}, 0xe7) getsockname$inet6(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) epoll_wait(0xffffffffffffffff, &(0x7f0000000340)=[{}], 0x1, 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10040000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[]}, 0x1}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000000)) perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a3c000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000400)={'ipddp0\x00', 0xbb}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000380)) 2018/04/21 01:41:22 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14}, @remote={0xac, 0x14, 0x14, 0xbb}}, @udp={0x0, 0x0, 0x8}}}}}, &(0x7f0000000000)) 2018/04/21 01:41:22 executing program 7: r0 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000505000)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) epoll_pwait(r0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8, &(0x7f0000000440)={0x8000}, 0x8) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) openat$cgroup_int(r1, &(0x7f00000004c0)="6367722b656e64616e747300cc6a4b52d77f85b1d6172bb5365f38852c2cd4df8f05aa953623f49432bcc939bbc2065ec501e9b06942a3512d4a66c733", 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000240)={0x5, 0xfffffffffffffffd, 0x21f0, 'queue1\x00', 0x7f}) inotify_init1(0x1000) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000140)={0x8001, 0x0, 0x0, 0x81}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0x1f, r3, 0x0, 0x1}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x0, 0x8, 0xffffffffcbebbf1c}]}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000300)={{0xffffffffffffffff, 0x3, 0x80000001}, 0x6, 0x81}) socket$packet(0x11, 0x0, 0x300) r4 = memfd_create(&(0x7f0000000480)='/dev/input/mice\x00', 0x3) clone(0x0, &(0x7f0000000200)="17dd6280de3693223b6fdbc70650db5722605e7d4cfec7dee9e7ca3a83bd750a10fca3bdd2c2fde305012a95b619af30af684bba6e9e2031b1eec7e667e9c22c674d6eb942b78258369909dc14f2f5bd60202d6a38d497b47baf3e89fbca89a91e4706f3efdb55b9e9857fa2e05fdd62de157a7f60228f2c807e86ce264193d1206f5402c6f095c94a510e0c705386635a3f1a5970fd087434c0bf52f98bc0c951", &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)="f74dda86") gettid() setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000580)={r2, 0x3e6, 0xdf, "281209475b70e151dd624d23341cbc7ada8a682bf120d0db6dc0629d9acf8b3065f359e394e1360f673cbf338355247734328fec365891644c5e577901e289e43ee65a4461dab8993408d36ebad0c34879f71ff025aca551ae99f6b466d7136a1f524df40605bec7d1073ec1b216326c385a6d9b462fb4c3f896327c93c6ce14ddc81bbc32231d5743f5f795f7b6af503444f2c4064e7526512c709d303d7d36f427f084d596dc17c0db8ad6d17d2add09ec84e94f7f91bde3ab9486a1459c3c93b24772d7fac3224501e5c6f2a76417517ebd59a8258a51440ee46f98f3fa"}, 0xe7) getsockname$inet6(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) epoll_wait(0xffffffffffffffff, &(0x7f0000000340)=[{}], 0x1, 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10040000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[]}, 0x1}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000000)) perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a3c000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000400)={'ipddp0\x00', 0xbb}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000380)) 2018/04/21 01:41:22 executing program 3: capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0xe}, 0x2c) 2018/04/21 01:41:22 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x800, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$eventfd(r0, &(0x7f0000000080), 0xfcb1) 2018/04/21 01:41:22 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14}, @remote={0xac, 0x14, 0x14, 0xbb}}, @udp={0x0, 0x0, 0x8}}}}}, &(0x7f0000000000)) 2018/04/21 01:41:22 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/55, 0x37}], 0x1, 0x0) ppoll(&(0x7f00000004c0)=[{r0}], 0x1, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540), 0x8) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 2018/04/21 01:41:22 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff00a, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/04/21 01:41:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$KDMKTONE(r0, 0x5385, 0x0) 2018/04/21 01:41:22 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)="15000000000083a66dd24ef184a67ab5d7c8fac7a7", 0x15) 2018/04/21 01:41:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x2, &(0x7f0000000280)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x30, &(0x7f0000000180)=[@in={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x0, @broadcast=0xffffffff}]}, &(0x7f0000000140)=0x10) io_submit(r1, 0x12f, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001000)}]) 2018/04/21 01:41:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000018000)={r2}) r3 = syz_fuse_mount(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x401, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x1, r2}]) 2018/04/21 01:41:23 executing program 4: inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0/control\x00', 0x3ffff7e) 2018/04/21 01:41:23 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x40003) vmsplice(r0, &(0x7f0000000300)=[{&(0x7f00000002c0)}], 0x1, 0x0) 2018/04/21 01:41:23 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff00a, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/04/21 01:41:23 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)="15000000000083a66dd24ef184a67ab5d7c8fac7a7", 0x15) 2018/04/21 01:41:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$KDMKTONE(r0, 0x5385, 0x0) 2018/04/21 01:41:23 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x2, &(0x7f0000000280)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x30, &(0x7f0000000180)=[@in={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x0, @broadcast=0xffffffff}]}, &(0x7f0000000140)=0x10) io_submit(r1, 0x12f, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001000)}]) 2018/04/21 01:41:23 executing program 4: inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0/control\x00', 0x3ffff7e) 2018/04/21 01:41:23 executing program 6: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000432fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000013000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000012000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000002000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) 2018/04/21 01:41:23 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)="15000000000083a66dd24ef184a67ab5d7c8fac7a7", 0x15) 2018/04/21 01:41:23 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x40003) vmsplice(r0, &(0x7f0000000300)=[{&(0x7f00000002c0)}], 0x1, 0x0) [ 207.485459] handle_userfault: 15 callbacks suppressed [ 207.485464] FAULT_FLAG_ALLOW_RETRY missing 30 [ 207.495269] CPU: 0 PID: 15267 Comm: syz-executor6 Not tainted 4.17.0-rc1+ #10 [ 207.502526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 207.511861] Call Trace: [ 207.514442] dump_stack+0x1b9/0x294 [ 207.518064] ? dump_stack_print_info.cold.2+0x52/0x52 [ 207.523240] ? kasan_check_write+0x14/0x20 [ 207.528179] ? do_raw_spin_lock+0xc1/0x200 [ 207.532417] handle_userfault.cold.32+0x44/0x5a [ 207.537073] ? handle_userfault+0x16c6/0x2760 [ 207.541558] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 207.546919] ? debug_check_no_locks_freed+0x310/0x310 [ 207.552096] ? print_usage_bug+0xc0/0xc0 [ 207.556141] ? print_usage_bug+0xc0/0xc0 [ 207.560527] ? perf_trace_lock+0xd6/0x900 [ 207.564663] ? __lock_acquire+0x7f5/0x5140 [ 207.568880] ? graph_lock+0x170/0x170 [ 207.572664] ? graph_lock+0x170/0x170 [ 207.576455] ? find_held_lock+0x36/0x1c0 [ 207.580515] ? lock_downgrade+0x8e0/0x8e0 [ 207.584676] ? kasan_check_read+0x11/0x20 [ 207.588809] ? do_raw_spin_unlock+0x9e/0x2e0 [ 207.593202] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 207.597771] ? kasan_check_write+0x14/0x20 [ 207.601989] ? do_raw_spin_lock+0xc1/0x200 [ 207.606217] __handle_mm_fault+0x38d8/0x4310 [ 207.610613] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 207.615365] ? graph_lock+0x170/0x170 [ 207.619149] ? find_held_lock+0x36/0x1c0 [ 207.623197] ? lock_downgrade+0x8e0/0x8e0 [ 207.627335] ? handle_mm_fault+0x8c0/0xc70 [ 207.631563] handle_mm_fault+0x53a/0xc70 [ 207.635622] ? __handle_mm_fault+0x4310/0x4310 [ 207.640195] ? find_vma+0x34/0x190 [ 207.643722] __do_page_fault+0x60b/0xe40 [ 207.647773] ? mm_fault_error+0x380/0x380 [ 207.651911] ? graph_lock+0x170/0x170 [ 207.655698] do_page_fault+0xee/0x8a7 [ 207.659486] ? vmalloc_sync_all+0x30/0x30 [ 207.663626] ? find_held_lock+0x36/0x1c0 [ 207.667678] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 207.672509] page_fault+0x1e/0x30 [ 207.675949] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 207.681549] RSP: 0018:ffff8801adae7c38 EFLAGS: 00010202 [ 207.686894] RAX: ffffed0035b5cfb3 RBX: 0000000000000020 RCX: 0000000000000004 [ 207.694146] RDX: 0000000000000000 RSI: 0000000020013000 RDI: ffff8801adae7d78 [ 207.701398] RBP: ffff8801adae7c70 R08: ffffed0035b5cfb3 R09: ffffed0035b5cfaf [ 207.708651] R10: ffffed0035b5cfb2 R11: ffff8801adae7d97 R12: 0000000020013020 [ 207.715902] R13: 0000000020013000 R14: ffff8801adae7d78 R15: 00007ffffffff000 [ 207.723173] ? _copy_from_user+0x10d/0x150 [ 207.727405] do_fcntl+0xccf/0x14b0 [ 207.730939] ? f_getown+0xc0/0xc0 [ 207.734376] ? fget_raw+0x20/0x20 [ 207.737817] ? __x64_sys_futex+0x477/0x680 [ 207.742039] ? fd_install+0x4d/0x60 [ 207.745655] ? do_futex+0x27d0/0x27d0 [ 207.749442] ? move_addr_to_kernel+0x70/0x70 [ 207.753840] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 207.759359] ? fput+0x130/0x1a0 [ 207.762624] ? security_file_fcntl+0x94/0xc0 [ 207.767026] __x64_sys_fcntl+0x177/0x1f0 [ 207.771079] do_syscall_64+0x1b1/0x800 [ 207.774961] ? finish_task_switch+0x1ca/0x810 [ 207.779443] ? syscall_return_slowpath+0x5c0/0x5c0 [ 207.784357] ? syscall_return_slowpath+0x30f/0x5c0 [ 207.789271] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 207.794628] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 207.799460] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 207.804634] RIP: 0033:0x455389 [ 207.807803] RSP: 002b:00007f2287249c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 207.815491] RAX: ffffffffffffffda RBX: 00007f228724a6d4 RCX: 0000000000455389 [ 207.822749] RDX: 0000000020013000 RSI: 0000000000000006 RDI: 0000000000000014 2018/04/21 01:41:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000018000)={r2}) r3 = syz_fuse_mount(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x401, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x1, r2}]) 2018/04/21 01:41:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$KDMKTONE(r0, 0x5385, 0x0) 2018/04/21 01:41:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x2, &(0x7f0000000280)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x30, &(0x7f0000000180)=[@in={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x0, @broadcast=0xffffffff}]}, &(0x7f0000000140)=0x10) io_submit(r1, 0x12f, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001000)}]) 2018/04/21 01:41:24 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x40003) vmsplice(r0, &(0x7f0000000300)=[{&(0x7f00000002c0)}], 0x1, 0x0) 2018/04/21 01:41:24 executing program 4: inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0/control\x00', 0x3ffff7e) 2018/04/21 01:41:24 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)="15000000000083a66dd24ef184a67ab5d7c8fac7a7", 0x15) 2018/04/21 01:41:24 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/55, 0x37}], 0x1, 0x0) ppoll(&(0x7f00000004c0)=[{r0}], 0x1, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540), 0x8) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 2018/04/21 01:41:24 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/55, 0x37}], 0x1, 0x0) ppoll(&(0x7f00000004c0)=[{r0}], 0x1, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540), 0x8) umount2(&(0x7f0000000200)='./file0\x00', 0x0) [ 207.830000] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 207.837258] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 207.844511] R13: 000000000000008e R14: 00000000006f3df0 R15: 0000000000000000 2018/04/21 01:41:25 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/55, 0x37}], 0x1, 0x0) ppoll(&(0x7f00000004c0)=[{r0}], 0x1, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540), 0x8) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 2018/04/21 01:41:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x2, &(0x7f0000000280)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x30, &(0x7f0000000180)=[@in={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x0, @broadcast=0xffffffff}]}, &(0x7f0000000140)=0x10) io_submit(r1, 0x12f, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001000)}]) 2018/04/21 01:41:25 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x40003) vmsplice(r0, &(0x7f0000000300)=[{&(0x7f00000002c0)}], 0x1, 0x0) 2018/04/21 01:41:25 executing program 4: inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0/control\x00', 0x3ffff7e) 2018/04/21 01:41:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000018000)={r2}) r3 = syz_fuse_mount(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x401, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x1, r2}]) 2018/04/21 01:41:25 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/55, 0x37}], 0x1, 0x0) ppoll(&(0x7f00000004c0)=[{r0}], 0x1, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540), 0x8) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 2018/04/21 01:41:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$KDMKTONE(r0, 0x5385, 0x0) 2018/04/21 01:41:25 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/55, 0x37}], 0x1, 0x0) ppoll(&(0x7f00000004c0)=[{r0}], 0x1, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540), 0x8) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 2018/04/21 01:41:25 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/55, 0x37}], 0x1, 0x0) ppoll(&(0x7f00000004c0)=[{r0}], 0x1, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540), 0x8) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 2018/04/21 01:41:25 executing program 0: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) close(r0) 2018/04/21 01:41:25 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/55, 0x37}], 0x1, 0x0) ppoll(&(0x7f00000004c0)=[{r0}], 0x1, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540), 0x8) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 2018/04/21 01:41:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10}, 0x186, &(0x7f00000002c0)={&(0x7f0000000040)={0x1c, 0x5, 0x6, 0x201, 0x0, 0x0, {}, [@typed={0x8, 0x1, @uid}]}, 0x1c}, 0x1}, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6}]}, 0x1c}, 0x1}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/21 01:41:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000018000)={r2}) r3 = syz_fuse_mount(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x401, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x1, r2}]) 2018/04/21 01:41:25 executing program 0: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) close(r0) 2018/04/21 01:41:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10}, 0x186, &(0x7f00000002c0)={&(0x7f0000000040)={0x1c, 0x5, 0x6, 0x201, 0x0, 0x0, {}, [@typed={0x8, 0x1, @uid}]}, 0x1c}, 0x1}, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6}]}, 0x1c}, 0x1}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) [ 209.124600] netlink: 'syz-executor5': attribute type 1 has an invalid length. [ 209.155188] netlink: 'syz-executor5': attribute type 1 has an invalid length. 2018/04/21 01:41:25 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) close(r0) [ 209.319110] netlink: 'syz-executor5': attribute type 1 has an invalid length. 2018/04/21 01:41:26 executing program 0: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) close(r0) 2018/04/21 01:41:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10}, 0x186, &(0x7f00000002c0)={&(0x7f0000000040)={0x1c, 0x5, 0x6, 0x201, 0x0, 0x0, {}, [@typed={0x8, 0x1, @uid}]}, 0x1c}, 0x1}, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6}]}, 0x1c}, 0x1}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/21 01:41:26 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/55, 0x37}], 0x1, 0x0) ppoll(&(0x7f00000004c0)=[{r0}], 0x1, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540), 0x8) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 2018/04/21 01:41:26 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/55, 0x37}], 0x1, 0x0) ppoll(&(0x7f00000004c0)=[{r0}], 0x1, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540), 0x8) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 2018/04/21 01:41:26 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) close(r0) 2018/04/21 01:41:26 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/55, 0x37}], 0x1, 0x0) ppoll(&(0x7f00000004c0)=[{r0}], 0x1, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540), 0x8) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 2018/04/21 01:41:26 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/55, 0x37}], 0x1, 0x0) ppoll(&(0x7f00000004c0)=[{r0}], 0x1, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540), 0x8) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 2018/04/21 01:41:26 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/55, 0x37}], 0x1, 0x0) ppoll(&(0x7f00000004c0)=[{r0}], 0x1, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540), 0x8) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 2018/04/21 01:41:26 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) close(r0) 2018/04/21 01:41:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10}, 0x186, &(0x7f00000002c0)={&(0x7f0000000040)={0x1c, 0x5, 0x6, 0x201, 0x0, 0x0, {}, [@typed={0x8, 0x1, @uid}]}, 0x1c}, 0x1}, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6}]}, 0x1c}, 0x1}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/21 01:41:26 executing program 0: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) close(r0) [ 210.024677] netlink: 'syz-executor5': attribute type 1 has an invalid length. 2018/04/21 01:41:26 executing program 3: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x49) bind(r0, &(0x7f0000670000)=@generic={0x1e, "01fd000000000000000000060002000009a979a121b80c7bc8790405c7dcd62e0a53b232394938d36d0ef5ffa8ffffffff819a2b0a6606e43a620170a00021f069ca021f6f65dcf360e7e58f358c00f9ecff0158d19bcb2a5130fffffffffffff300b9c8ead200c577aeb81c90541d6d7c770ee590c8bcf70dc151cb184a"}, 0x80) 2018/04/21 01:41:26 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xa09, &(0x7f0000000200)=0x0) io_cancel(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)}, &(0x7f0000000340)) 2018/04/21 01:41:27 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000600)) [ 210.204684] netlink: 'syz-executor5': attribute type 1 has an invalid length. 2018/04/21 01:41:27 executing program 3: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x49) bind(r0, &(0x7f0000670000)=@generic={0x1e, "01fd000000000000000000060002000009a979a121b80c7bc8790405c7dcd62e0a53b232394938d36d0ef5ffa8ffffffff819a2b0a6606e43a620170a00021f069ca021f6f65dcf360e7e58f358c00f9ecff0158d19bcb2a5130fffffffffffff300b9c8ead200c577aeb81c90541d6d7c770ee590c8bcf70dc151cb184a"}, 0x80) 2018/04/21 01:41:27 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xa09, &(0x7f0000000200)=0x0) io_cancel(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)}, &(0x7f0000000340)) 2018/04/21 01:41:27 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000600)) 2018/04/21 01:41:27 executing program 3: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x49) bind(r0, &(0x7f0000670000)=@generic={0x1e, "01fd000000000000000000060002000009a979a121b80c7bc8790405c7dcd62e0a53b232394938d36d0ef5ffa8ffffffff819a2b0a6606e43a620170a00021f069ca021f6f65dcf360e7e58f358c00f9ecff0158d19bcb2a5130fffffffffffff300b9c8ead200c577aeb81c90541d6d7c770ee590c8bcf70dc151cb184a"}, 0x80) 2018/04/21 01:41:27 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xa09, &(0x7f0000000200)=0x0) io_cancel(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)}, &(0x7f0000000340)) 2018/04/21 01:41:27 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}) keyctl$describe(0x6, r0, &(0x7f0000000200)=""/4096, 0x1000) 2018/04/21 01:41:27 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f76fa8)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000f78000)="981a32de5eb4e123702746cc88041a683b667a6730c516d280a056d4b4aff29db83649d6c26eb5efe9657358306e09f8", 0x30) r1 = accept$alg(r0, 0x0, 0x0) read(r1, &(0x7f0000e48000)=""/128, 0x80) 2018/04/21 01:41:27 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/55, 0x37}], 0x1, 0x0) ppoll(&(0x7f00000004c0)=[{r0}], 0x1, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540), 0x8) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 2018/04/21 01:41:27 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/55, 0x37}], 0x1, 0x0) ppoll(&(0x7f00000004c0)=[{r0}], 0x1, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540), 0x8) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 2018/04/21 01:41:27 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/55, 0x37}], 0x1, 0x0) ppoll(&(0x7f00000004c0)=[{r0}], 0x1, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540), 0x8) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 2018/04/21 01:41:27 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}) keyctl$describe(0x6, r0, &(0x7f0000000200)=""/4096, 0x1000) 2018/04/21 01:41:27 executing program 3: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x49) bind(r0, &(0x7f0000670000)=@generic={0x1e, "01fd000000000000000000060002000009a979a121b80c7bc8790405c7dcd62e0a53b232394938d36d0ef5ffa8ffffffff819a2b0a6606e43a620170a00021f069ca021f6f65dcf360e7e58f358c00f9ecff0158d19bcb2a5130fffffffffffff300b9c8ead200c577aeb81c90541d6d7c770ee590c8bcf70dc151cb184a"}, 0x80) 2018/04/21 01:41:27 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f76fa8)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000f78000)="981a32de5eb4e123702746cc88041a683b667a6730c516d280a056d4b4aff29db83649d6c26eb5efe9657358306e09f8", 0x30) r1 = accept$alg(r0, 0x0, 0x0) read(r1, &(0x7f0000e48000)=""/128, 0x80) 2018/04/21 01:41:27 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xa09, &(0x7f0000000200)=0x0) io_cancel(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)}, &(0x7f0000000340)) 2018/04/21 01:41:27 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000600)) 2018/04/21 01:41:28 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}) keyctl$describe(0x6, r0, &(0x7f0000000200)=""/4096, 0x1000) 2018/04/21 01:41:28 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f76fa8)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000f78000)="981a32de5eb4e123702746cc88041a683b667a6730c516d280a056d4b4aff29db83649d6c26eb5efe9657358306e09f8", 0x30) r1 = accept$alg(r0, 0x0, 0x0) read(r1, &(0x7f0000e48000)=""/128, 0x80) 2018/04/21 01:41:28 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f76fa8)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000f78000)="981a32de5eb4e123702746cc88041a683b667a6730c516d280a056d4b4aff29db83649d6c26eb5efe9657358306e09f8", 0x30) r1 = accept$alg(r0, 0x0, 0x0) read(r1, &(0x7f0000e48000)=""/128, 0x80) 2018/04/21 01:41:28 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}) keyctl$describe(0x6, r0, &(0x7f0000000200)=""/4096, 0x1000) 2018/04/21 01:41:28 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000600)) 2018/04/21 01:41:28 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f76fa8)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000f78000)="981a32de5eb4e123702746cc88041a683b667a6730c516d280a056d4b4aff29db83649d6c26eb5efe9657358306e09f8", 0x30) r1 = accept$alg(r0, 0x0, 0x0) read(r1, &(0x7f0000e48000)=""/128, 0x80) 2018/04/21 01:41:28 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f76fa8)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000f78000)="981a32de5eb4e123702746cc88041a683b667a6730c516d280a056d4b4aff29db83649d6c26eb5efe9657358306e09f8", 0x30) r1 = accept$alg(r0, 0x0, 0x0) read(r1, &(0x7f0000e48000)=""/128, 0x80) 2018/04/21 01:41:28 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}) keyctl$describe(0x6, r0, &(0x7f0000000200)=""/4096, 0x1000) 2018/04/21 01:41:28 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_spread_page\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='5', 0x1) 2018/04/21 01:41:28 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000600)) 2018/04/21 01:41:28 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f000076c000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000100), 0x2) r1 = socket$unix(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f0000774ff6)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f000071eff8)=@file={0x1, './file0\x00'}, 0xa) 2018/04/21 01:41:28 executing program 6: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000900)=ANY=[]) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a8, &(0x7f0000000440)) syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/21 01:41:28 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_spread_page\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='5', 0x1) 2018/04/21 01:41:28 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f76fa8)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000f78000)="981a32de5eb4e123702746cc88041a683b667a6730c516d280a056d4b4aff29db83649d6c26eb5efe9657358306e09f8", 0x30) r1 = accept$alg(r0, 0x0, 0x0) read(r1, &(0x7f0000e48000)=""/128, 0x80) 2018/04/21 01:41:28 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x1) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) 2018/04/21 01:41:28 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}) keyctl$describe(0x6, r0, &(0x7f0000000200)=""/4096, 0x1000) 2018/04/21 01:41:28 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000600)) 2018/04/21 01:41:28 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) r2 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/200, 0xc8}], 0x1) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace(0x18, r1) 2018/04/21 01:41:28 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f000076c000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000100), 0x2) r1 = socket$unix(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f0000774ff6)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f000071eff8)=@file={0x1, './file0\x00'}, 0xa) [ 212.298989] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000203) [ 212.306461] FAT-fs (loop6): Filesystem has been set read-only 2018/04/21 01:41:29 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f000076c000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000100), 0x2) r1 = socket$unix(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f0000774ff6)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f000071eff8)=@file={0x1, './file0\x00'}, 0xa) 2018/04/21 01:41:29 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_spread_page\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='5', 0x1) 2018/04/21 01:41:29 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f000076c000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000100), 0x2) r1 = socket$unix(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f0000774ff6)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f000071eff8)=@file={0x1, './file0\x00'}, 0xa) 2018/04/21 01:41:29 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}) keyctl$describe(0x6, r0, &(0x7f0000000200)=""/4096, 0x1000) [ 212.402905] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000203) [ 212.410193] FAT-fs (loop6): Filesystem has been set read-only [ 212.432737] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000203) [ 212.440559] FAT-fs (loop6): Filesystem has been set read-only 2018/04/21 01:41:30 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000600)) 2018/04/21 01:41:30 executing program 6: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000900)=ANY=[]) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a8, &(0x7f0000000440)) syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/21 01:41:30 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f000076c000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000100), 0x2) r1 = socket$unix(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f0000774ff6)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f000071eff8)=@file={0x1, './file0\x00'}, 0xa) 2018/04/21 01:41:30 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x1) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) 2018/04/21 01:41:30 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_spread_page\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='5', 0x1) 2018/04/21 01:41:30 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) r2 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/200, 0xc8}], 0x1) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace(0x18, r1) 2018/04/21 01:41:30 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f000076c000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000100), 0x2) r1 = socket$unix(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f0000774ff6)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f000071eff8)=@file={0x1, './file0\x00'}, 0xa) 2018/04/21 01:41:30 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x1) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) 2018/04/21 01:41:30 executing program 4: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000900)=ANY=[]) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a8, &(0x7f0000000440)) syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/21 01:41:30 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x1) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) 2018/04/21 01:41:30 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000900)=ANY=[]) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a8, &(0x7f0000000440)) syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/21 01:41:30 executing program 7: open(&(0x7f0000000000)='./bus\x00', 0x100000141842, 0x0) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f0000000480)='./bus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x1000, &(0x7f0000000740)=ANY=[]) r0 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000780)=ANY=[]) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1261, 0x0) [ 213.432350] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000203) [ 213.439748] FAT-fs (loop6): Filesystem has been set read-only [ 213.469863] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000203) 2018/04/21 01:41:30 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f000076c000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000100), 0x2) r1 = socket$unix(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f0000774ff6)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f000071eff8)=@file={0x1, './file0\x00'}, 0xa) 2018/04/21 01:41:30 executing program 6: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000900)=ANY=[]) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a8, &(0x7f0000000440)) syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/21 01:41:30 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x1) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) [ 213.477185] FAT-fs (loop6): Filesystem has been set read-only [ 213.617559] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000203) [ 213.624850] FAT-fs (loop4): Filesystem has been set read-only [ 213.677810] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000203) [ 213.685210] FAT-fs (loop2): Filesystem has been set read-only [ 213.688175] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000203) [ 213.698361] FAT-fs (loop4): Filesystem has been set read-only [ 213.711457] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000203) [ 213.718944] FAT-fs (loop2): Filesystem has been set read-only [ 213.733049] hfs: can't find a HFS filesystem on dev loop7 [ 213.812294] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000203) [ 213.819629] FAT-fs (loop6): Filesystem has been set read-only [ 213.836213] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000203) [ 213.843474] FAT-fs (loop6): Filesystem has been set read-only 2018/04/21 01:41:31 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x1) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) 2018/04/21 01:41:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) utime(&(0x7f0000c4c000)='./file0\x00', &(0x7f0000a98000)={0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000a98000/0x1000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000c9bec8)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffc, 0x0, 0x0, 0x400060, 0x0, 0xfffffffffffffffe}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)) 2018/04/21 01:41:31 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000900)=ANY=[]) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a8, &(0x7f0000000440)) syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/21 01:41:31 executing program 4: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000900)=ANY=[]) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a8, &(0x7f0000000440)) syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/21 01:41:31 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x1) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) 2018/04/21 01:41:31 executing program 7: open(&(0x7f0000000000)='./bus\x00', 0x100000141842, 0x0) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f0000000480)='./bus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x1000, &(0x7f0000000740)=ANY=[]) r0 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000780)=ANY=[]) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1261, 0x0) 2018/04/21 01:41:31 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) r2 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/200, 0xc8}], 0x1) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace(0x18, r1) 2018/04/21 01:41:31 executing program 6: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000900)=ANY=[]) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a8, &(0x7f0000000440)) syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 214.457277] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000203) [ 214.464669] FAT-fs (loop2): Filesystem has been set read-only [ 214.492166] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000203) [ 214.493659] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000203) [ 214.499436] FAT-fs (loop4): Filesystem has been set read-only [ 214.506797] FAT-fs (loop6): Filesystem has been set read-only [ 214.521769] hfs: can't find a HFS filesystem on dev loop7 2018/04/21 01:41:31 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x100000141842, 0x0) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f0000000480)='./bus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x1000, &(0x7f0000000740)=ANY=[]) r0 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000780)=ANY=[]) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1261, 0x0) 2018/04/21 01:41:31 executing program 7: open(&(0x7f0000000000)='./bus\x00', 0x100000141842, 0x0) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f0000000480)='./bus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x1000, &(0x7f0000000740)=ANY=[]) r0 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000780)=ANY=[]) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1261, 0x0) 2018/04/21 01:41:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) utime(&(0x7f0000c4c000)='./file0\x00', &(0x7f0000a98000)={0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000a98000/0x1000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000c9bec8)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffc, 0x0, 0x0, 0x400060, 0x0, 0xfffffffffffffffe}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)) 2018/04/21 01:41:31 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000900)=ANY=[]) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a8, &(0x7f0000000440)) syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 214.578389] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000203) [ 214.585710] FAT-fs (loop2): Filesystem has been set read-only 2018/04/21 01:41:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) utime(&(0x7f0000c4c000)='./file0\x00', &(0x7f0000a98000)={0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000a98000/0x1000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000c9bec8)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffc, 0x0, 0x0, 0x400060, 0x0, 0xfffffffffffffffe}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)) 2018/04/21 01:41:31 executing program 4: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000900)=ANY=[]) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a8, &(0x7f0000000440)) syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/21 01:41:31 executing program 6: open(&(0x7f0000000000)='./bus\x00', 0x100000141842, 0x0) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f0000000480)='./bus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x1000, &(0x7f0000000740)=ANY=[]) r0 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000780)=ANY=[]) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1261, 0x0) [ 214.630800] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000203) [ 214.638184] FAT-fs (loop4): Filesystem has been set read-only [ 214.652804] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000203) [ 214.660302] FAT-fs (loop6): Filesystem has been set read-only [ 214.810537] hfs: can't find a HFS filesystem on dev loop0 2018/04/21 01:41:31 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x100000141842, 0x0) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f0000000480)='./bus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x1000, &(0x7f0000000740)=ANY=[]) r0 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000780)=ANY=[]) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1261, 0x0) [ 214.876203] hfs: can't find a HFS filesystem on dev loop7 [ 214.904906] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000203) [ 214.912252] FAT-fs (loop2): Filesystem has been set read-only 2018/04/21 01:41:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) utime(&(0x7f0000c4c000)='./file0\x00', &(0x7f0000a98000)={0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000a98000/0x1000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000c9bec8)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffc, 0x0, 0x0, 0x400060, 0x0, 0xfffffffffffffffe}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)) [ 215.004193] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000203) [ 215.011544] FAT-fs (loop2): Filesystem has been set read-only [ 215.032320] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000203) [ 215.039670] FAT-fs (loop4): Filesystem has been set read-only [ 215.065299] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000203) [ 215.072567] FAT-fs (loop4): Filesystem has been set read-only [ 215.182996] hfs: can't find a HFS filesystem on dev loop0 2018/04/21 01:41:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) utime(&(0x7f0000c4c000)='./file0\x00', &(0x7f0000a98000)={0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000a98000/0x1000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000c9bec8)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffc, 0x0, 0x0, 0x400060, 0x0, 0xfffffffffffffffe}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)) 2018/04/21 01:41:32 executing program 6: open(&(0x7f0000000000)='./bus\x00', 0x100000141842, 0x0) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f0000000480)='./bus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x1000, &(0x7f0000000740)=ANY=[]) r0 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000780)=ANY=[]) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1261, 0x0) 2018/04/21 01:41:32 executing program 2: r0 = socket$inet(0x2b, 0x400000000000001, 0x1) ppoll(&(0x7f00000002c0)=[{r0}], 0x1, &(0x7f0000000340), &(0x7f0000000380), 0x8) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8916, &(0x7f0000000140)={'bridge0\x00', {0x2, 0x0, @multicast2=0xe0000002}}) 2018/04/21 01:41:32 executing program 7: open(&(0x7f0000000000)='./bus\x00', 0x100000141842, 0x0) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f0000000480)='./bus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x1000, &(0x7f0000000740)=ANY=[]) r0 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000780)=ANY=[]) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1261, 0x0) 2018/04/21 01:41:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x15555555555555fb, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000140)={[0x1, 0x0, 0x2000], 0x5922, 0x1, 0x9}) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000240)={[0x10000, 0x112000, 0x2000, 0x5004], 0x4, 0x62}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000400)="66b8f3008ee82e660f78c7006c66ba2100ec66baf80cb820142b8eef66bafc0c66b8010066ef48b800000000008000000f23c00f21f835010003000f23f80f01c8c7442400b974a89ec744240242658a0cc7442406000000000f011c240f20c035000000800f22c0e1eb0f07", 0x6c}], 0x74, 0x0, &(0x7f0000000340), 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000340)={0x3}) getsockname$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @multicast1}, &(0x7f0000000100)=0x10) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), &(0x7f00000002c0)=0xe, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 01:41:32 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) r2 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/200, 0xc8}], 0x1) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace(0x18, r1) 2018/04/21 01:41:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) utime(&(0x7f0000c4c000)='./file0\x00', &(0x7f0000a98000)={0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000a98000/0x1000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000c9bec8)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffc, 0x0, 0x0, 0x400060, 0x0, 0xfffffffffffffffe}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)) 2018/04/21 01:41:32 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x100000141842, 0x0) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f0000000480)='./bus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x1000, &(0x7f0000000740)=ANY=[]) r0 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000780)=ANY=[]) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1261, 0x0) 2018/04/21 01:41:32 executing program 2: r0 = socket$inet(0x2b, 0x400000000000001, 0x1) ppoll(&(0x7f00000002c0)=[{r0}], 0x1, &(0x7f0000000340), &(0x7f0000000380), 0x8) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8916, &(0x7f0000000140)={'bridge0\x00', {0x2, 0x0, @multicast2=0xe0000002}}) [ 215.580340] hfs: can't find a HFS filesystem on dev loop0 [ 215.588205] hfs: can't find a HFS filesystem on dev loop6 [ 215.598663] hfs: can't find a HFS filesystem on dev loop7 [ 215.613527] kvm: pic: single mode not supported 2018/04/21 01:41:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) utime(&(0x7f0000c4c000)='./file0\x00', &(0x7f0000a98000)={0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000a98000/0x1000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000c9bec8)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffc, 0x0, 0x0, 0x400060, 0x0, 0xfffffffffffffffe}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)) 2018/04/21 01:41:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x5, 0x4) sendto$inet(r2, &(0x7f0000832fff), 0x0, 0x0, &(0x7f0000eed000)={0x2, 0x4e20}, 0x10) [ 215.613539] kvm: pic: level sensitive irq not supported [ 215.667563] kvm: pic: single mode not supported 2018/04/21 01:41:32 executing program 6: open(&(0x7f0000000000)='./bus\x00', 0x100000141842, 0x0) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f0000000480)='./bus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x1000, &(0x7f0000000740)=ANY=[]) r0 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000780)=ANY=[]) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1261, 0x0) 2018/04/21 01:41:32 executing program 7: socket$unix(0x1, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x100000b) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x40000000000001, "e91f7189591e9233614b00"}, 0x6e) listen(0xffffffffffffffff, 0x0) ioctl$sock_proto_private(r0, 0x89ec, &(0x7f0000000080)="316f59941cef8c8c0d1ad08f56fdd587abd6cefc2b71535871133dcd4b4d41b9240b20a52751ac2b62b6614e7249adb48b5006c5b77e92b94d2ea824aa4ab41eb020616116b9606edc12e4467b0096af15af41c3e0c9af85a28f6a98d1b78c6a0a79a19f64562e966fca08fb9f41e1bde173cd") r1 = socket(0xb, 0x8000f, 0xfffffffffffffffe) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000002000)="0d576a5a500f28c131f2477eaf87125e", 0x10) r2 = socket(0x18, 0x0, 0x1) connect(r2, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x3a) sendmmsg(r2, &(0x7f00004d2f80)=[{{&(0x7f00001e4000)=@in={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10, &(0x7f000050d000), 0x0, &(0x7f0000b10d00)}}, {{&(0x7f0000236ff0)=@in={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10, &(0x7f0000622fd8)}}], 0x2, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x3, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000000e000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000014000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) 2018/04/21 01:41:32 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) ioprio_set$uid(0x3, r1, 0x0) [ 215.673115] kvm: pic: level sensitive irq not supported [ 215.714729] kvm: pic: level sensitive irq not supported [ 215.741874] kvm: pic: single mode not supported 2018/04/21 01:41:32 executing program 2: r0 = socket$inet(0x2b, 0x400000000000001, 0x1) ppoll(&(0x7f00000002c0)=[{r0}], 0x1, &(0x7f0000000340), &(0x7f0000000380), 0x8) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8916, &(0x7f0000000140)={'bridge0\x00', {0x2, 0x0, @multicast2=0xe0000002}}) 2018/04/21 01:41:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x5, 0x4) sendto$inet(r2, &(0x7f0000832fff), 0x0, 0x0, &(0x7f0000eed000)={0x2, 0x4e20}, 0x10) [ 215.759549] kvm: pic: level sensitive irq not supported [ 215.933613] hfs: can't find a HFS filesystem on dev loop6 2018/04/21 01:41:33 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x15555555555555fb, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000140)={[0x1, 0x0, 0x2000], 0x5922, 0x1, 0x9}) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000240)={[0x10000, 0x112000, 0x2000, 0x5004], 0x4, 0x62}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000400)="66b8f3008ee82e660f78c7006c66ba2100ec66baf80cb820142b8eef66bafc0c66b8010066ef48b800000000008000000f23c00f21f835010003000f23f80f01c8c7442400b974a89ec744240242658a0cc7442406000000000f011c240f20c035000000800f22c0e1eb0f07", 0x6c}], 0x74, 0x0, &(0x7f0000000340), 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000340)={0x3}) getsockname$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @multicast1}, &(0x7f0000000100)=0x10) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), &(0x7f00000002c0)=0xe, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 01:41:33 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) ioprio_set$uid(0x3, r1, 0x0) 2018/04/21 01:41:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x15555555555555fb, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000140)={[0x1, 0x0, 0x2000], 0x5922, 0x1, 0x9}) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000240)={[0x10000, 0x112000, 0x2000, 0x5004], 0x4, 0x62}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000400)="66b8f3008ee82e660f78c7006c66ba2100ec66baf80cb820142b8eef66bafc0c66b8010066ef48b800000000008000000f23c00f21f835010003000f23f80f01c8c7442400b974a89ec744240242658a0cc7442406000000000f011c240f20c035000000800f22c0e1eb0f07", 0x6c}], 0x74, 0x0, &(0x7f0000000340), 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000340)={0x3}) getsockname$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @multicast1}, &(0x7f0000000100)=0x10) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), &(0x7f00000002c0)=0xe, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 01:41:33 executing program 7: socket$unix(0x1, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x100000b) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x40000000000001, "e91f7189591e9233614b00"}, 0x6e) listen(0xffffffffffffffff, 0x0) ioctl$sock_proto_private(r0, 0x89ec, &(0x7f0000000080)="316f59941cef8c8c0d1ad08f56fdd587abd6cefc2b71535871133dcd4b4d41b9240b20a52751ac2b62b6614e7249adb48b5006c5b77e92b94d2ea824aa4ab41eb020616116b9606edc12e4467b0096af15af41c3e0c9af85a28f6a98d1b78c6a0a79a19f64562e966fca08fb9f41e1bde173cd") r1 = socket(0xb, 0x8000f, 0xfffffffffffffffe) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000002000)="0d576a5a500f28c131f2477eaf87125e", 0x10) r2 = socket(0x18, 0x0, 0x1) connect(r2, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x3a) sendmmsg(r2, &(0x7f00004d2f80)=[{{&(0x7f00001e4000)=@in={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10, &(0x7f000050d000), 0x0, &(0x7f0000b10d00)}}, {{&(0x7f0000236ff0)=@in={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10, &(0x7f0000622fd8)}}], 0x2, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x3, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000000e000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000014000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) 2018/04/21 01:41:33 executing program 2: r0 = socket$inet(0x2b, 0x400000000000001, 0x1) ppoll(&(0x7f00000002c0)=[{r0}], 0x1, &(0x7f0000000340), &(0x7f0000000380), 0x8) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8916, &(0x7f0000000140)={'bridge0\x00', {0x2, 0x0, @multicast2=0xe0000002}}) 2018/04/21 01:41:33 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x5, 0x4) sendto$inet(r2, &(0x7f0000832fff), 0x0, 0x0, &(0x7f0000eed000)={0x2, 0x4e20}, 0x10) 2018/04/21 01:41:33 executing program 5: socket$unix(0x1, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x100000b) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x40000000000001, "e91f7189591e9233614b00"}, 0x6e) listen(0xffffffffffffffff, 0x0) ioctl$sock_proto_private(r0, 0x89ec, &(0x7f0000000080)="316f59941cef8c8c0d1ad08f56fdd587abd6cefc2b71535871133dcd4b4d41b9240b20a52751ac2b62b6614e7249adb48b5006c5b77e92b94d2ea824aa4ab41eb020616116b9606edc12e4467b0096af15af41c3e0c9af85a28f6a98d1b78c6a0a79a19f64562e966fca08fb9f41e1bde173cd") r1 = socket(0xb, 0x8000f, 0xfffffffffffffffe) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000002000)="0d576a5a500f28c131f2477eaf87125e", 0x10) r2 = socket(0x18, 0x0, 0x1) connect(r2, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x3a) sendmmsg(r2, &(0x7f00004d2f80)=[{{&(0x7f00001e4000)=@in={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10, &(0x7f000050d000), 0x0, &(0x7f0000b10d00)}}, {{&(0x7f0000236ff0)=@in={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10, &(0x7f0000622fd8)}}], 0x2, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x3, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000000e000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000014000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) 2018/04/21 01:41:33 executing program 3: socket$unix(0x1, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x100000b) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x40000000000001, "e91f7189591e9233614b00"}, 0x6e) listen(0xffffffffffffffff, 0x0) ioctl$sock_proto_private(r0, 0x89ec, &(0x7f0000000080)="316f59941cef8c8c0d1ad08f56fdd587abd6cefc2b71535871133dcd4b4d41b9240b20a52751ac2b62b6614e7249adb48b5006c5b77e92b94d2ea824aa4ab41eb020616116b9606edc12e4467b0096af15af41c3e0c9af85a28f6a98d1b78c6a0a79a19f64562e966fca08fb9f41e1bde173cd") r1 = socket(0xb, 0x8000f, 0xfffffffffffffffe) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000002000)="0d576a5a500f28c131f2477eaf87125e", 0x10) r2 = socket(0x18, 0x0, 0x1) connect(r2, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x3a) sendmmsg(r2, &(0x7f00004d2f80)=[{{&(0x7f00001e4000)=@in={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10, &(0x7f000050d000), 0x0, &(0x7f0000b10d00)}}, {{&(0x7f0000236ff0)=@in={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10, &(0x7f0000622fd8)}}], 0x2, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x3, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000000e000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000014000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) 2018/04/21 01:41:33 executing program 7: socket$unix(0x1, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x100000b) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x40000000000001, "e91f7189591e9233614b00"}, 0x6e) listen(0xffffffffffffffff, 0x0) ioctl$sock_proto_private(r0, 0x89ec, &(0x7f0000000080)="316f59941cef8c8c0d1ad08f56fdd587abd6cefc2b71535871133dcd4b4d41b9240b20a52751ac2b62b6614e7249adb48b5006c5b77e92b94d2ea824aa4ab41eb020616116b9606edc12e4467b0096af15af41c3e0c9af85a28f6a98d1b78c6a0a79a19f64562e966fca08fb9f41e1bde173cd") r1 = socket(0xb, 0x8000f, 0xfffffffffffffffe) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000002000)="0d576a5a500f28c131f2477eaf87125e", 0x10) r2 = socket(0x18, 0x0, 0x1) connect(r2, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x3a) sendmmsg(r2, &(0x7f00004d2f80)=[{{&(0x7f00001e4000)=@in={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10, &(0x7f000050d000), 0x0, &(0x7f0000b10d00)}}, {{&(0x7f0000236ff0)=@in={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10, &(0x7f0000622fd8)}}], 0x2, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x3, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000000e000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000014000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) 2018/04/21 01:41:33 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) ioprio_set$uid(0x3, r1, 0x0) 2018/04/21 01:41:33 executing program 2: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x400000a4}, 0xffffffffffffff62) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x705000, 0x705000, 0x0, &(0x7f0000000080)) 2018/04/21 01:41:33 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x5, 0x4) sendto$inet(r2, &(0x7f0000832fff), 0x0, 0x0, &(0x7f0000eed000)={0x2, 0x4e20}, 0x10) [ 216.667259] kvm: pic: single mode not supported [ 216.667271] kvm: pic: level sensitive irq not supported [ 216.677880] kvm: pic: single mode not supported [ 216.680753] kvm: pic: single mode not supported [ 216.683520] kvm: pic: level sensitive irq not supported [ 216.688093] kvm: pic: level sensitive irq not supported [ 216.688847] kvm: pic: level sensitive irq not supported [ 216.705223] kvm: pic: single mode not supported 2018/04/21 01:41:33 executing program 3: socket$unix(0x1, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x100000b) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x40000000000001, "e91f7189591e9233614b00"}, 0x6e) listen(0xffffffffffffffff, 0x0) ioctl$sock_proto_private(r0, 0x89ec, &(0x7f0000000080)="316f59941cef8c8c0d1ad08f56fdd587abd6cefc2b71535871133dcd4b4d41b9240b20a52751ac2b62b6614e7249adb48b5006c5b77e92b94d2ea824aa4ab41eb020616116b9606edc12e4467b0096af15af41c3e0c9af85a28f6a98d1b78c6a0a79a19f64562e966fca08fb9f41e1bde173cd") r1 = socket(0xb, 0x8000f, 0xfffffffffffffffe) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000002000)="0d576a5a500f28c131f2477eaf87125e", 0x10) r2 = socket(0x18, 0x0, 0x1) connect(r2, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x3a) sendmmsg(r2, &(0x7f00004d2f80)=[{{&(0x7f00001e4000)=@in={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10, &(0x7f000050d000), 0x0, &(0x7f0000b10d00)}}, {{&(0x7f0000236ff0)=@in={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10, &(0x7f0000622fd8)}}], 0x2, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x3, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000000e000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000014000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) 2018/04/21 01:41:33 executing program 5: socket$unix(0x1, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x100000b) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x40000000000001, "e91f7189591e9233614b00"}, 0x6e) listen(0xffffffffffffffff, 0x0) ioctl$sock_proto_private(r0, 0x89ec, &(0x7f0000000080)="316f59941cef8c8c0d1ad08f56fdd587abd6cefc2b71535871133dcd4b4d41b9240b20a52751ac2b62b6614e7249adb48b5006c5b77e92b94d2ea824aa4ab41eb020616116b9606edc12e4467b0096af15af41c3e0c9af85a28f6a98d1b78c6a0a79a19f64562e966fca08fb9f41e1bde173cd") r1 = socket(0xb, 0x8000f, 0xfffffffffffffffe) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000002000)="0d576a5a500f28c131f2477eaf87125e", 0x10) r2 = socket(0x18, 0x0, 0x1) connect(r2, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x3a) sendmmsg(r2, &(0x7f00004d2f80)=[{{&(0x7f00001e4000)=@in={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10, &(0x7f000050d000), 0x0, &(0x7f0000b10d00)}}, {{&(0x7f0000236ff0)=@in={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10, &(0x7f0000622fd8)}}], 0x2, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x3, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000000e000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000014000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) [ 216.710700] kvm: pic: level sensitive irq not supported [ 216.716598] kvm: pic: single mode not supported [ 216.716719] kvm: pic: level sensitive irq not supported 2018/04/21 01:41:33 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x15555555555555fb, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000140)={[0x1, 0x0, 0x2000], 0x5922, 0x1, 0x9}) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000240)={[0x10000, 0x112000, 0x2000, 0x5004], 0x4, 0x62}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000400)="66b8f3008ee82e660f78c7006c66ba2100ec66baf80cb820142b8eef66bafc0c66b8010066ef48b800000000008000000f23c00f21f835010003000f23f80f01c8c7442400b974a89ec744240242658a0cc7442406000000000f011c240f20c035000000800f22c0e1eb0f07", 0x6c}], 0x74, 0x0, &(0x7f0000000340), 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000340)={0x3}) getsockname$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @multicast1}, &(0x7f0000000100)=0x10) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), &(0x7f00000002c0)=0xe, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 216.727408] kvm: pic: single mode not supported 2018/04/21 01:41:33 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) ioprio_set$uid(0x3, r1, 0x0) 2018/04/21 01:41:33 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000080)}, 0x10) 2018/04/21 01:41:33 executing program 7: socket$unix(0x1, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x100000b) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x40000000000001, "e91f7189591e9233614b00"}, 0x6e) listen(0xffffffffffffffff, 0x0) ioctl$sock_proto_private(r0, 0x89ec, &(0x7f0000000080)="316f59941cef8c8c0d1ad08f56fdd587abd6cefc2b71535871133dcd4b4d41b9240b20a52751ac2b62b6614e7249adb48b5006c5b77e92b94d2ea824aa4ab41eb020616116b9606edc12e4467b0096af15af41c3e0c9af85a28f6a98d1b78c6a0a79a19f64562e966fca08fb9f41e1bde173cd") r1 = socket(0xb, 0x8000f, 0xfffffffffffffffe) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000002000)="0d576a5a500f28c131f2477eaf87125e", 0x10) r2 = socket(0x18, 0x0, 0x1) connect(r2, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x3a) sendmmsg(r2, &(0x7f00004d2f80)=[{{&(0x7f00001e4000)=@in={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10, &(0x7f000050d000), 0x0, &(0x7f0000b10d00)}}, {{&(0x7f0000236ff0)=@in={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10, &(0x7f0000622fd8)}}], 0x2, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x3, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000000e000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000014000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) 2018/04/21 01:41:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x15555555555555fb, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000140)={[0x1, 0x0, 0x2000], 0x5922, 0x1, 0x9}) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000240)={[0x10000, 0x112000, 0x2000, 0x5004], 0x4, 0x62}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000400)="66b8f3008ee82e660f78c7006c66ba2100ec66baf80cb820142b8eef66bafc0c66b8010066ef48b800000000008000000f23c00f21f835010003000f23f80f01c8c7442400b974a89ec744240242658a0cc7442406000000000f011c240f20c035000000800f22c0e1eb0f07", 0x6c}], 0x74, 0x0, &(0x7f0000000340), 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000340)={0x3}) getsockname$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @multicast1}, &(0x7f0000000100)=0x10) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), &(0x7f00000002c0)=0xe, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 01:41:33 executing program 3: socket$unix(0x1, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x100000b) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x40000000000001, "e91f7189591e9233614b00"}, 0x6e) listen(0xffffffffffffffff, 0x0) ioctl$sock_proto_private(r0, 0x89ec, &(0x7f0000000080)="316f59941cef8c8c0d1ad08f56fdd587abd6cefc2b71535871133dcd4b4d41b9240b20a52751ac2b62b6614e7249adb48b5006c5b77e92b94d2ea824aa4ab41eb020616116b9606edc12e4467b0096af15af41c3e0c9af85a28f6a98d1b78c6a0a79a19f64562e966fca08fb9f41e1bde173cd") r1 = socket(0xb, 0x8000f, 0xfffffffffffffffe) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000002000)="0d576a5a500f28c131f2477eaf87125e", 0x10) r2 = socket(0x18, 0x0, 0x1) connect(r2, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x3a) sendmmsg(r2, &(0x7f00004d2f80)=[{{&(0x7f00001e4000)=@in={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10, &(0x7f000050d000), 0x0, &(0x7f0000b10d00)}}, {{&(0x7f0000236ff0)=@in={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10, &(0x7f0000622fd8)}}], 0x2, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x3, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000000e000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000014000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) 2018/04/21 01:41:33 executing program 5: socket$unix(0x1, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x100000b) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x40000000000001, "e91f7189591e9233614b00"}, 0x6e) listen(0xffffffffffffffff, 0x0) ioctl$sock_proto_private(r0, 0x89ec, &(0x7f0000000080)="316f59941cef8c8c0d1ad08f56fdd587abd6cefc2b71535871133dcd4b4d41b9240b20a52751ac2b62b6614e7249adb48b5006c5b77e92b94d2ea824aa4ab41eb020616116b9606edc12e4467b0096af15af41c3e0c9af85a28f6a98d1b78c6a0a79a19f64562e966fca08fb9f41e1bde173cd") r1 = socket(0xb, 0x8000f, 0xfffffffffffffffe) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000002000)="0d576a5a500f28c131f2477eaf87125e", 0x10) r2 = socket(0x18, 0x0, 0x1) connect(r2, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x3a) sendmmsg(r2, &(0x7f00004d2f80)=[{{&(0x7f00001e4000)=@in={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10, &(0x7f000050d000), 0x0, &(0x7f0000b10d00)}}, {{&(0x7f0000236ff0)=@in={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10, &(0x7f0000622fd8)}}], 0x2, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x3, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000000e000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000014000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) 2018/04/21 01:41:33 executing program 2: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x400000a4}, 0xffffffffffffff62) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x705000, 0x705000, 0x0, &(0x7f0000000080)) 2018/04/21 01:41:33 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x15555555555555fb, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000140)={[0x1, 0x0, 0x2000], 0x5922, 0x1, 0x9}) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000240)={[0x10000, 0x112000, 0x2000, 0x5004], 0x4, 0x62}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000400)="66b8f3008ee82e660f78c7006c66ba2100ec66baf80cb820142b8eef66bafc0c66b8010066ef48b800000000008000000f23c00f21f835010003000f23f80f01c8c7442400b974a89ec744240242658a0cc7442406000000000f011c240f20c035000000800f22c0e1eb0f07", 0x6c}], 0x74, 0x0, &(0x7f0000000340), 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000340)={0x3}) getsockname$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @multicast1}, &(0x7f0000000100)=0x10) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), &(0x7f00000002c0)=0xe, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 01:41:33 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) sendmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)='t', 0x1}], 0x1, &(0x7f0000000a00)=ANY=[]}}], 0x1, 0x0) 2018/04/21 01:41:33 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000080)}, 0x10) 2018/04/21 01:41:33 executing program 7: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x11, &(0x7f0000055000)={0x0, 0x0, 0x6}) rt_sigtimedwait(&(0x7f0000001ff8)={0x3ffff}, &(0x7f0000f0aff0), &(0x7f0000fbcff0)={0xffffd, 0x989680}, 0x8) 2018/04/21 01:41:33 executing program 5: r0 = socket$inet(0x2, 0x200000200000003, 0x2000000001) sendto$inet(r0, &(0x7f00000000c0)="0b6ff08816d7d792", 0x8, 0x0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 2018/04/21 01:41:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040), 0x0) 2018/04/21 01:41:33 executing program 2: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x400000a4}, 0xffffffffffffff62) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x705000, 0x705000, 0x0, &(0x7f0000000080)) 2018/04/21 01:41:34 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff92}, {0xb0}}) 2018/04/21 01:41:34 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000080)}, 0x10) 2018/04/21 01:41:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040), 0x0) 2018/04/21 01:41:34 executing program 5: r0 = socket$inet(0x2, 0x200000200000003, 0x2000000001) sendto$inet(r0, &(0x7f00000000c0)="0b6ff08816d7d792", 0x8, 0x0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 2018/04/21 01:41:34 executing program 2: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x400000a4}, 0xffffffffffffff62) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x705000, 0x705000, 0x0, &(0x7f0000000080)) 2018/04/21 01:41:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x15555555555555fb, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000140)={[0x1, 0x0, 0x2000], 0x5922, 0x1, 0x9}) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000240)={[0x10000, 0x112000, 0x2000, 0x5004], 0x4, 0x62}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000400)="66b8f3008ee82e660f78c7006c66ba2100ec66baf80cb820142b8eef66bafc0c66b8010066ef48b800000000008000000f23c00f21f835010003000f23f80f01c8c7442400b974a89ec744240242658a0cc7442406000000000f011c240f20c035000000800f22c0e1eb0f07", 0x6c}], 0x74, 0x0, &(0x7f0000000340), 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000340)={0x3}) getsockname$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @multicast1}, &(0x7f0000000100)=0x10) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), &(0x7f00000002c0)=0xe, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 01:41:34 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff92}, {0xb0}}) 2018/04/21 01:41:34 executing program 7: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x11, &(0x7f0000055000)={0x0, 0x0, 0x6}) rt_sigtimedwait(&(0x7f0000001ff8)={0x3ffff}, &(0x7f0000f0aff0), &(0x7f0000fbcff0)={0xffffd, 0x989680}, 0x8) 2018/04/21 01:41:34 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000080)}, 0x10) 2018/04/21 01:41:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040), 0x0) 2018/04/21 01:41:34 executing program 2: r0 = socket(0x2, 0x3, 0x40000000000000ff) sendmsg$unix(r0, &(0x7f0000000540)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000140)="0dee284ccb0e3556def61b251d36b3cd25eb5a4d5a29e66f7141d5132ee1c0553c5af597580697fd3fc147c04827c9c639d8a5e2", 0x34}], 0x1, &(0x7f0000000080)}, 0x0) 2018/04/21 01:41:34 executing program 5: r0 = socket$inet(0x2, 0x200000200000003, 0x2000000001) sendto$inet(r0, &(0x7f00000000c0)="0b6ff08816d7d792", 0x8, 0x0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 2018/04/21 01:41:34 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff92}, {0xb0}}) 2018/04/21 01:41:34 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00001e3fa8)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(rfc4309(authenc(michael_mic-generic,chacha20-generic)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140), 0x107) 2018/04/21 01:41:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="390000001300090468fe000081000000e8ffff3f030000004500010700000014190019000400020007000012020000080000e10c00f41ee400", 0x39}], 0x1) [ 216.982357] kvm: pic: single mode not supported [ 218.107610] raw_sendmsg: syz-executor2 forgot to set AF_INET. Fix it! 2018/04/21 01:41:34 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff92}, {0xb0}}) 2018/04/21 01:41:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="390000001300090468fe000081000000e8ffff3f030000004500010700000014190019000400020007000012020000080000e10c00f41ee400", 0x39}], 0x1) 2018/04/21 01:41:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f000000c000)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f00000003c0)={0x18, 0x30, 0x821, 0x0, 0x0, {0x2}, [@generic="cf"]}, 0x18}, 0x1}, 0x0) 2018/04/21 01:41:34 executing program 7: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x11, &(0x7f0000055000)={0x0, 0x0, 0x6}) rt_sigtimedwait(&(0x7f0000001ff8)={0x3ffff}, &(0x7f0000f0aff0), &(0x7f0000fbcff0)={0xffffd, 0x989680}, 0x8) 2018/04/21 01:41:34 executing program 5: r0 = socket$inet(0x2, 0x200000200000003, 0x2000000001) sendto$inet(r0, &(0x7f00000000c0)="0b6ff08816d7d792", 0x8, 0x0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 2018/04/21 01:41:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040), 0x0) 2018/04/21 01:41:34 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00001e3fa8)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(rfc4309(authenc(michael_mic-generic,chacha20-generic)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140), 0x107) 2018/04/21 01:41:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f000000d000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f000000c1a8)={0x14, 0x13, 0x21}, 0x14}, 0x1}, 0x0) 2018/04/21 01:41:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f000000c000)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f00000003c0)={0x18, 0x30, 0x821, 0x0, 0x0, {0x2}, [@generic="cf"]}, 0x18}, 0x1}, 0x0) 2018/04/21 01:41:35 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 2018/04/21 01:41:35 executing program 7: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x11, &(0x7f0000055000)={0x0, 0x0, 0x6}) rt_sigtimedwait(&(0x7f0000001ff8)={0x3ffff}, &(0x7f0000f0aff0), &(0x7f0000fbcff0)={0xffffd, 0x989680}, 0x8) 2018/04/21 01:41:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="390000001300090468fe000081000000e8ffff3f030000004500010700000014190019000400020007000012020000080000e10c00f41ee400", 0x39}], 0x1) 2018/04/21 01:41:35 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x2003e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000109ffc)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x0, 0x0) getxattr(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000b29f57)=@known="73656375726974792e6361706162696c69747900c9bd3012983e02155960196a2a84585f19c1c826172982a8de1ccc06000000ffc9715cef22cee4c673d4388d5e56040000000000000040e4c9ee649a371208309ca436bf919fd9636bfa255ff4b30008f88ecc9c2d812171c401624f0c142fc54f65f49239f27686b37d489e925da19bf31e30eccd92237957661ce8a1568418e6d3d428174f89a11cc821fbf64122a36f6b411c", &(0x7f0000ca5000)=""/140, 0x8c) 2018/04/21 01:41:35 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000002fe4)={0xa}, 0x1c) write(r0, &(0x7f00000001c0)="d09f9f17", 0x4) 2018/04/21 01:41:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f000000d000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f000000c1a8)={0x14, 0x13, 0x21}, 0x14}, 0x1}, 0x0) 2018/04/21 01:41:35 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00001e3fa8)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(rfc4309(authenc(michael_mic-generic,chacha20-generic)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140), 0x107) 2018/04/21 01:41:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f000000c000)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f00000003c0)={0x18, 0x30, 0x821, 0x0, 0x0, {0x2}, [@generic="cf"]}, 0x18}, 0x1}, 0x0) 2018/04/21 01:41:35 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x21d}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xffffffffffffffcc, &(0x7f0000001300)=""/251}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x16, 0x11, 0x0, &(0x7f0000000180)) 2018/04/21 01:41:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="390000001300090468fe000081000000e8ffff3f030000004500010700000014190019000400020007000012020000080000e10c00f41ee400", 0x39}], 0x1) 2018/04/21 01:41:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f000000d000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f000000c1a8)={0x14, 0x13, 0x21}, 0x14}, 0x1}, 0x0) 2018/04/21 01:41:35 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000002fe4)={0xa}, 0x1c) write(r0, &(0x7f00000001c0)="d09f9f17", 0x4) 2018/04/21 01:41:35 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x2003e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000109ffc)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x0, 0x0) getxattr(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000b29f57)=@known="73656375726974792e6361706162696c69747900c9bd3012983e02155960196a2a84585f19c1c826172982a8de1ccc06000000ffc9715cef22cee4c673d4388d5e56040000000000000040e4c9ee649a371208309ca436bf919fd9636bfa255ff4b30008f88ecc9c2d812171c401624f0c142fc54f65f49239f27686b37d489e925da19bf31e30eccd92237957661ce8a1568418e6d3d428174f89a11cc821fbf64122a36f6b411c", &(0x7f0000ca5000)=""/140, 0x8c) 2018/04/21 01:41:35 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00001e3fa8)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(rfc4309(authenc(michael_mic-generic,chacha20-generic)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140), 0x107) 2018/04/21 01:41:35 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 2018/04/21 01:41:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f000000d000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f000000c1a8)={0x14, 0x13, 0x21}, 0x14}, 0x1}, 0x0) 2018/04/21 01:41:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f000000c000)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f00000003c0)={0x18, 0x30, 0x821, 0x0, 0x0, {0x2}, [@generic="cf"]}, 0x18}, 0x1}, 0x0) 2018/04/21 01:41:35 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x21d}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xffffffffffffffcc, &(0x7f0000001300)=""/251}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x16, 0x11, 0x0, &(0x7f0000000180)) 2018/04/21 01:41:35 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x2003e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000109ffc)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x0, 0x0) getxattr(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000b29f57)=@known="73656375726974792e6361706162696c69747900c9bd3012983e02155960196a2a84585f19c1c826172982a8de1ccc06000000ffc9715cef22cee4c673d4388d5e56040000000000000040e4c9ee649a371208309ca436bf919fd9636bfa255ff4b30008f88ecc9c2d812171c401624f0c142fc54f65f49239f27686b37d489e925da19bf31e30eccd92237957661ce8a1568418e6d3d428174f89a11cc821fbf64122a36f6b411c", &(0x7f0000ca5000)=""/140, 0x8c) 2018/04/21 01:41:35 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000002fe4)={0xa}, 0x1c) write(r0, &(0x7f00000001c0)="d09f9f17", 0x4) 2018/04/21 01:41:35 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f0000519fa8)=ANY=[@ANYBLOB="180000009df6873a0000000000a52c00750000002e00004a77000000000000009500004000000000"], &(0x7f0000c43000)='syzkaller\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00009da000)=r0, 0x4) write(r1, &(0x7f00000005c0)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/04/21 01:41:35 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2018/04/21 01:41:35 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x2003e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000109ffc)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x0, 0x0) getxattr(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000b29f57)=@known="73656375726974792e6361706162696c69747900c9bd3012983e02155960196a2a84585f19c1c826172982a8de1ccc06000000ffc9715cef22cee4c673d4388d5e56040000000000000040e4c9ee649a371208309ca436bf919fd9636bfa255ff4b30008f88ecc9c2d812171c401624f0c142fc54f65f49239f27686b37d489e925da19bf31e30eccd92237957661ce8a1568418e6d3d428174f89a11cc821fbf64122a36f6b411c", &(0x7f0000ca5000)=""/140, 0x8c) 2018/04/21 01:41:35 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) 2018/04/21 01:41:35 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 2018/04/21 01:41:35 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x2003e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000109ffc)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x0, 0x0) getxattr(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000b29f57)=@known="73656375726974792e6361706162696c69747900c9bd3012983e02155960196a2a84585f19c1c826172982a8de1ccc06000000ffc9715cef22cee4c673d4388d5e56040000000000000040e4c9ee649a371208309ca436bf919fd9636bfa255ff4b30008f88ecc9c2d812171c401624f0c142fc54f65f49239f27686b37d489e925da19bf31e30eccd92237957661ce8a1568418e6d3d428174f89a11cc821fbf64122a36f6b411c", &(0x7f0000ca5000)=""/140, 0x8c) 2018/04/21 01:41:35 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x21d}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xffffffffffffffcc, &(0x7f0000001300)=""/251}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x16, 0x11, 0x0, &(0x7f0000000180)) 2018/04/21 01:41:35 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000002fe4)={0xa}, 0x1c) write(r0, &(0x7f00000001c0)="d09f9f17", 0x4) 2018/04/21 01:41:35 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2018/04/21 01:41:36 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f0000519fa8)=ANY=[@ANYBLOB="180000009df6873a0000000000a52c00750000002e00004a77000000000000009500004000000000"], &(0x7f0000c43000)='syzkaller\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00009da000)=r0, 0x4) write(r1, &(0x7f00000005c0)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/04/21 01:41:36 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) 2018/04/21 01:41:36 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x2003e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000109ffc)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x0, 0x0) getxattr(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000b29f57)=@known="73656375726974792e6361706162696c69747900c9bd3012983e02155960196a2a84585f19c1c826172982a8de1ccc06000000ffc9715cef22cee4c673d4388d5e56040000000000000040e4c9ee649a371208309ca436bf919fd9636bfa255ff4b30008f88ecc9c2d812171c401624f0c142fc54f65f49239f27686b37d489e925da19bf31e30eccd92237957661ce8a1568418e6d3d428174f89a11cc821fbf64122a36f6b411c", &(0x7f0000ca5000)=""/140, 0x8c) 2018/04/21 01:41:36 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x21d}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xffffffffffffffcc, &(0x7f0000001300)=""/251}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x16, 0x11, 0x0, &(0x7f0000000180)) 2018/04/21 01:41:36 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x2003e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000109ffc)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x0, 0x0) getxattr(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000b29f57)=@known="73656375726974792e6361706162696c69747900c9bd3012983e02155960196a2a84585f19c1c826172982a8de1ccc06000000ffc9715cef22cee4c673d4388d5e56040000000000000040e4c9ee649a371208309ca436bf919fd9636bfa255ff4b30008f88ecc9c2d812171c401624f0c142fc54f65f49239f27686b37d489e925da19bf31e30eccd92237957661ce8a1568418e6d3d428174f89a11cc821fbf64122a36f6b411c", &(0x7f0000ca5000)=""/140, 0x8c) 2018/04/21 01:41:36 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 2018/04/21 01:41:36 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2018/04/21 01:41:36 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000315000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(r0, 0x40047440, &(0x7f0000001080)=""/174) 2018/04/21 01:41:36 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) 2018/04/21 01:41:36 executing program 7: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f0000519fa8)=ANY=[@ANYBLOB="180000009df6873a0000000000a52c00750000002e00004a77000000000000009500004000000000"], &(0x7f0000c43000)='syzkaller\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00009da000)=r0, 0x4) write(r1, &(0x7f00000005c0)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/04/21 01:41:36 executing program 4: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f000001bff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040)=0x1ff, 0x4) recvmsg(r0, &(0x7f0000000340)={&(0x7f0000000000)=@rc, 0xa, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=""/98, 0x62}, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) connect$inet(r0, &(0x7f0000024ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000180)}, 0x0) 2018/04/21 01:41:36 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f00000006c0)="2e2f66696c65302f2a2e6c6530ff00", 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 2018/04/21 01:41:36 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000200)) syz_open_procfs(0x0, &(0x7f0000000280)="2f65786500000000000409004bddd9de91be10eebf000ee9a9d50f1e8600000854fa07424adee93707da75af1f0200f5cd26d7a0d2ef6ae0d178621cffc0a87164000000e39c5a") ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) 2018/04/21 01:41:36 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f0000519fa8)=ANY=[@ANYBLOB="180000009df6873a0000000000a52c00750000002e00004a77000000000000009500004000000000"], &(0x7f0000c43000)='syzkaller\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00009da000)=r0, 0x4) write(r1, &(0x7f00000005c0)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/04/21 01:41:36 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2018/04/21 01:41:37 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000200)) syz_open_procfs(0x0, &(0x7f0000000280)="2f65786500000000000409004bddd9de91be10eebf000ee9a9d50f1e8600000854fa07424adee93707da75af1f0200f5cd26d7a0d2ef6ae0d178621cffc0a87164000000e39c5a") ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) 2018/04/21 01:41:37 executing program 7: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f0000519fa8)=ANY=[@ANYBLOB="180000009df6873a0000000000a52c00750000002e00004a77000000000000009500004000000000"], &(0x7f0000c43000)='syzkaller\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00009da000)=r0, 0x4) write(r1, &(0x7f00000005c0)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/04/21 01:41:37 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f0000519fa8)=ANY=[@ANYBLOB="180000009df6873a0000000000a52c00750000002e00004a77000000000000009500004000000000"], &(0x7f0000c43000)='syzkaller\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00009da000)=r0, 0x4) write(r1, &(0x7f00000005c0)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/04/21 01:41:37 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f00000006c0)="2e2f66696c65302f2a2e6c6530ff00", 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 2018/04/21 01:41:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) 2018/04/21 01:41:37 executing program 4: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f000001bff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040)=0x1ff, 0x4) recvmsg(r0, &(0x7f0000000340)={&(0x7f0000000000)=@rc, 0xa, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=""/98, 0x62}, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) connect$inet(r0, &(0x7f0000024ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000180)}, 0x0) 2018/04/21 01:41:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB="f165f778"], &(0x7f0000000240)=0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000de9000)=[@text32={0x20, &(0x7f0000f59fc6)="0fc75fedc4c3c968fb6c0f9cfbb9040100c00f3266b842008ee80f230064672ec015dec4e245bea5d41e6082f9440f20c03506000000440f22c0", 0x3a}], 0x1, 0x0, &(0x7f0000000180), 0x1ba) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 01:41:37 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000315000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(r0, 0x40047440, &(0x7f0000001080)=""/174) 2018/04/21 01:41:37 executing program 2: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f000001bff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040)=0x1ff, 0x4) recvmsg(r0, &(0x7f0000000340)={&(0x7f0000000000)=@rc, 0xa, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=""/98, 0x62}, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) connect$inet(r0, &(0x7f0000024ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000180)}, 0x0) 2018/04/21 01:41:37 executing program 7: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f0000519fa8)=ANY=[@ANYBLOB="180000009df6873a0000000000a52c00750000002e00004a77000000000000009500004000000000"], &(0x7f0000c43000)='syzkaller\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00009da000)=r0, 0x4) write(r1, &(0x7f00000005c0)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/04/21 01:41:37 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000200)) syz_open_procfs(0x0, &(0x7f0000000280)="2f65786500000000000409004bddd9de91be10eebf000ee9a9d50f1e8600000854fa07424adee93707da75af1f0200f5cd26d7a0d2ef6ae0d178621cffc0a87164000000e39c5a") ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) 2018/04/21 01:41:37 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f00000006c0)="2e2f66696c65302f2a2e6c6530ff00", 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 2018/04/21 01:41:37 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`?', 0x30, 0x3a, 0xffffffffffffffff, @local={0xfe, 0x80, [0x8035], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x2, 0x4], {0x0, 0x6, "c10200", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 2018/04/21 01:41:37 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000315000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(r0, 0x40047440, &(0x7f0000001080)=""/174) 2018/04/21 01:41:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB="f165f778"], &(0x7f0000000240)=0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000de9000)=[@text32={0x20, &(0x7f0000f59fc6)="0fc75fedc4c3c968fb6c0f9cfbb9040100c00f3266b842008ee80f230064672ec015dec4e245bea5d41e6082f9440f20c03506000000440f22c0", 0x3a}], 0x1, 0x0, &(0x7f0000000180), 0x1ba) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 01:41:37 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="18", 0x1, r1) keyctl$unlink(0x9, r2, r1) 2018/04/21 01:41:37 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`?', 0x30, 0x3a, 0xffffffffffffffff, @local={0xfe, 0x80, [0x8035], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x2, 0x4], {0x0, 0x6, "c10200", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 2018/04/21 01:41:37 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000200)) syz_open_procfs(0x0, &(0x7f0000000280)="2f65786500000000000409004bddd9de91be10eebf000ee9a9d50f1e8600000854fa07424adee93707da75af1f0200f5cd26d7a0d2ef6ae0d178621cffc0a87164000000e39c5a") ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) 2018/04/21 01:41:37 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000315000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(r0, 0x40047440, &(0x7f0000001080)=""/174) 2018/04/21 01:41:37 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f00000006c0)="2e2f66696c65302f2a2e6c6530ff00", 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 2018/04/21 01:41:38 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="18", 0x1, r1) keyctl$unlink(0x9, r2, r1) 2018/04/21 01:41:38 executing program 4: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f000001bff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040)=0x1ff, 0x4) recvmsg(r0, &(0x7f0000000340)={&(0x7f0000000000)=@rc, 0xa, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=""/98, 0x62}, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) connect$inet(r0, &(0x7f0000024ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000180)}, 0x0) 2018/04/21 01:41:38 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="18", 0x1, r1) keyctl$unlink(0x9, r2, r1) 2018/04/21 01:41:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB="f165f778"], &(0x7f0000000240)=0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000de9000)=[@text32={0x20, &(0x7f0000f59fc6)="0fc75fedc4c3c968fb6c0f9cfbb9040100c00f3266b842008ee80f230064672ec015dec4e245bea5d41e6082f9440f20c03506000000440f22c0", 0x3a}], 0x1, 0x0, &(0x7f0000000180), 0x1ba) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 01:41:39 executing program 2: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f000001bff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040)=0x1ff, 0x4) recvmsg(r0, &(0x7f0000000340)={&(0x7f0000000000)=@rc, 0xa, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=""/98, 0x62}, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) connect$inet(r0, &(0x7f0000024ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000180)}, 0x0) 2018/04/21 01:41:39 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`?', 0x30, 0x3a, 0xffffffffffffffff, @local={0xfe, 0x80, [0x8035], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x2, 0x4], {0x0, 0x6, "c10200", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 2018/04/21 01:41:39 executing program 5: r0 = eventfd2(0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x10001) read(r0, &(0x7f0000000040)=""/13, 0xd) sendfile(r1, r2, &(0x7f0000e37000), 0x8080000001) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './bus', [], 0xa}, 0x9) 2018/04/21 01:41:39 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000fe1000)='net/fib_trie\x00') bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000a2effc), 0x1000006) recvmmsg(r2, &(0x7f00000004c0)=[{{&(0x7f0000000280)=@ipx, 0x80, &(0x7f0000000480)}}], 0x1, 0x0, &(0x7f0000000540)={0x77359400}) 2018/04/21 01:41:39 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="18", 0x1, r1) keyctl$unlink(0x9, r2, r1) 2018/04/21 01:41:39 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="18", 0x1, r1) keyctl$unlink(0x9, r2, r1) 2018/04/21 01:41:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB="f165f778"], &(0x7f0000000240)=0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000de9000)=[@text32={0x20, &(0x7f0000f59fc6)="0fc75fedc4c3c968fb6c0f9cfbb9040100c00f3266b842008ee80f230064672ec015dec4e245bea5d41e6082f9440f20c03506000000440f22c0", 0x3a}], 0x1, 0x0, &(0x7f0000000180), 0x1ba) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 01:41:39 executing program 4: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f000001bff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040)=0x1ff, 0x4) recvmsg(r0, &(0x7f0000000340)={&(0x7f0000000000)=@rc, 0xa, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=""/98, 0x62}, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) connect$inet(r0, &(0x7f0000024ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000180)}, 0x0) 2018/04/21 01:41:39 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`?', 0x30, 0x3a, 0xffffffffffffffff, @local={0xfe, 0x80, [0x8035], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x2, 0x4], {0x0, 0x6, "c10200", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 2018/04/21 01:41:39 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="18", 0x1, r1) keyctl$unlink(0x9, r2, r1) 2018/04/21 01:41:39 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="18", 0x1, r1) keyctl$unlink(0x9, r2, r1) 2018/04/21 01:41:39 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000fe1000)='net/fib_trie\x00') bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000a2effc), 0x1000006) recvmmsg(r2, &(0x7f00000004c0)=[{{&(0x7f0000000280)=@ipx, 0x80, &(0x7f0000000480)}}], 0x1, 0x0, &(0x7f0000000540)={0x77359400}) 2018/04/21 01:41:39 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x4e, &(0x7f00000c6000)={{{@in=@broadcast=0xffffffff, @in=@rand_addr}}, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, 0xe8) 2018/04/21 01:41:39 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000583000)={0x5, 0x80000000005, 0x4000, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x18) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = socket(0x9, 0x7, 0x10000) socketpair(0xf, 0x3, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000380)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x80000, r5}) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000400)={r7, r8, 0x5706}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x8, @empty, 0x10000}}}, &(0x7f0000000140)=0x84) r10 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r10, 0x20000003) r11 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r11, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r11) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000480)=0x1, 0x4) r12 = accept4(r10, &(0x7f0000660ff4)=@nl=@unspec, &(0x7f0000000040)=0xf5b19b4c0b1ce647, 0x0) recvfrom$inet(r12, &(0x7f00000002c0)=""/12, 0xb, 0x2, 0x0, 0xfffffe99) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000440)={0x0, 0x4, 0x7, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x6}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000002c0)={r9, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x6, 0x400, 0x1ff, 0x401, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000004c0)={0x7fff, 0x2, 0x2, 0x4, 0x6, 0x6, 0x1, 0x1, r9}, &(0x7f0000000500)=0x20) r13 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r13, &(0x7f000014afe4)={&(0x7f0000b84000)={0x10, 0x34000}, 0xc, &(0x7f0000000000)={&(0x7f0000e4f000)={0x14, 0x25, 0x301, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x8000}) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000100)={0x2e2, r14}) r15 = socket$unix(0x1, 0x5, 0x0) connect$l2tp(r3, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r15, 0x2, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x20}}}, 0x32) 2018/04/21 01:41:39 executing program 3: madvise(&(0x7f00007d4000/0x3000)=nil, 0x3000, 0x400000000000000c) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000007000)) 2018/04/21 01:41:39 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x4e, &(0x7f00000c6000)={{{@in=@broadcast=0xffffffff, @in=@rand_addr}}, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, 0xe8) 2018/04/21 01:41:40 executing program 2: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f000001bff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040)=0x1ff, 0x4) recvmsg(r0, &(0x7f0000000340)={&(0x7f0000000000)=@rc, 0xa, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=""/98, 0x62}, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) connect$inet(r0, &(0x7f0000024ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000180)}, 0x0) 2018/04/21 01:41:40 executing program 5: r0 = eventfd2(0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x10001) read(r0, &(0x7f0000000040)=""/13, 0xd) sendfile(r1, r2, &(0x7f0000e37000), 0x8080000001) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './bus', [], 0xa}, 0x9) 2018/04/21 01:41:40 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000fe1000)='net/fib_trie\x00') bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000a2effc), 0x1000006) recvmmsg(r2, &(0x7f00000004c0)=[{{&(0x7f0000000280)=@ipx, 0x80, &(0x7f0000000480)}}], 0x1, 0x0, &(0x7f0000000540)={0x77359400}) 2018/04/21 01:41:40 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x4e, &(0x7f00000c6000)={{{@in=@broadcast=0xffffffff, @in=@rand_addr}}, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, 0xe8) 2018/04/21 01:41:40 executing program 3: madvise(&(0x7f00007d4000/0x3000)=nil, 0x3000, 0x400000000000000c) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000007000)) 2018/04/21 01:41:40 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000640)="653aba1f00000066450ff37a00b9900900000f32420f07c744240076000000c7442402180d0000ff1c24b9800000c00f3235008000000f30c4e235ba618266baf80cb8bc6e4283ef66bafc0cb856cbc4fdef0f01d62e42de8a00000000", 0x5d}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x485, 0x0, 0x400005}]}) 2018/04/21 01:41:40 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000583000)={0x5, 0x80000000005, 0x4000, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x18) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = socket(0x9, 0x7, 0x10000) socketpair(0xf, 0x3, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000380)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x80000, r5}) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000400)={r7, r8, 0x5706}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x8, @empty, 0x10000}}}, &(0x7f0000000140)=0x84) r10 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r10, 0x20000003) r11 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r11, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r11) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000480)=0x1, 0x4) r12 = accept4(r10, &(0x7f0000660ff4)=@nl=@unspec, &(0x7f0000000040)=0xf5b19b4c0b1ce647, 0x0) recvfrom$inet(r12, &(0x7f00000002c0)=""/12, 0xb, 0x2, 0x0, 0xfffffe99) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000440)={0x0, 0x4, 0x7, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x6}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000002c0)={r9, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x6, 0x400, 0x1ff, 0x401, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000004c0)={0x7fff, 0x2, 0x2, 0x4, 0x6, 0x6, 0x1, 0x1, r9}, &(0x7f0000000500)=0x20) r13 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r13, &(0x7f000014afe4)={&(0x7f0000b84000)={0x10, 0x34000}, 0xc, &(0x7f0000000000)={&(0x7f0000e4f000)={0x14, 0x25, 0x301, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x8000}) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000100)={0x2e2, r14}) r15 = socket$unix(0x1, 0x5, 0x0) connect$l2tp(r3, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r15, 0x2, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x20}}}, 0x32) 2018/04/21 01:41:40 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x10001) read(r0, &(0x7f0000000040)=""/13, 0xd) sendfile(r1, r2, &(0x7f0000e37000), 0x8080000001) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './bus', [], 0xa}, 0x9) 2018/04/21 01:41:40 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x4e, &(0x7f00000c6000)={{{@in=@broadcast=0xffffffff, @in=@rand_addr}}, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, 0xe8) 2018/04/21 01:41:40 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000fe1000)='net/fib_trie\x00') bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000a2effc), 0x1000006) recvmmsg(r2, &(0x7f00000004c0)=[{{&(0x7f0000000280)=@ipx, 0x80, &(0x7f0000000480)}}], 0x1, 0x0, &(0x7f0000000540)={0x77359400}) 2018/04/21 01:41:40 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000640)="653aba1f00000066450ff37a00b9900900000f32420f07c744240076000000c7442402180d0000ff1c24b9800000c00f3235008000000f30c4e235ba618266baf80cb8bc6e4283ef66bafc0cb856cbc4fdef0f01d62e42de8a00000000", 0x5d}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x485, 0x0, 0x400005}]}) 2018/04/21 01:41:40 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000583000)={0x5, 0x80000000005, 0x4000, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x18) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = socket(0x9, 0x7, 0x10000) socketpair(0xf, 0x3, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000380)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x80000, r5}) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000400)={r7, r8, 0x5706}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x8, @empty, 0x10000}}}, &(0x7f0000000140)=0x84) r10 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r10, 0x20000003) r11 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r11, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r11) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000480)=0x1, 0x4) r12 = accept4(r10, &(0x7f0000660ff4)=@nl=@unspec, &(0x7f0000000040)=0xf5b19b4c0b1ce647, 0x0) recvfrom$inet(r12, &(0x7f00000002c0)=""/12, 0xb, 0x2, 0x0, 0xfffffe99) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000440)={0x0, 0x4, 0x7, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x6}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000002c0)={r9, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x6, 0x400, 0x1ff, 0x401, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000004c0)={0x7fff, 0x2, 0x2, 0x4, 0x6, 0x6, 0x1, 0x1, r9}, &(0x7f0000000500)=0x20) r13 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r13, &(0x7f000014afe4)={&(0x7f0000b84000)={0x10, 0x34000}, 0xc, &(0x7f0000000000)={&(0x7f0000e4f000)={0x14, 0x25, 0x301, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x8000}) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000100)={0x2e2, r14}) r15 = socket$unix(0x1, 0x5, 0x0) connect$l2tp(r3, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r15, 0x2, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x20}}}, 0x32) 2018/04/21 01:41:40 executing program 3: madvise(&(0x7f00007d4000/0x3000)=nil, 0x3000, 0x400000000000000c) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000007000)) 2018/04/21 01:41:40 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000583000)={0x5, 0x80000000005, 0x4000, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x18) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = socket(0x9, 0x7, 0x10000) socketpair(0xf, 0x3, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000380)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x80000, r5}) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000400)={r7, r8, 0x5706}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x8, @empty, 0x10000}}}, &(0x7f0000000140)=0x84) r10 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r10, 0x20000003) r11 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r11, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r11) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000480)=0x1, 0x4) r12 = accept4(r10, &(0x7f0000660ff4)=@nl=@unspec, &(0x7f0000000040)=0xf5b19b4c0b1ce647, 0x0) recvfrom$inet(r12, &(0x7f00000002c0)=""/12, 0xb, 0x2, 0x0, 0xfffffe99) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000440)={0x0, 0x4, 0x7, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x6}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000002c0)={r9, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x6, 0x400, 0x1ff, 0x401, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000004c0)={0x7fff, 0x2, 0x2, 0x4, 0x6, 0x6, 0x1, 0x1, r9}, &(0x7f0000000500)=0x20) r13 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r13, &(0x7f000014afe4)={&(0x7f0000b84000)={0x10, 0x34000}, 0xc, &(0x7f0000000000)={&(0x7f0000e4f000)={0x14, 0x25, 0x301, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x8000}) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000100)={0x2e2, r14}) r15 = socket$unix(0x1, 0x5, 0x0) connect$l2tp(r3, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r15, 0x2, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x20}}}, 0x32) 2018/04/21 01:41:40 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000583000)={0x5, 0x80000000005, 0x4000, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x18) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = socket(0x9, 0x7, 0x10000) socketpair(0xf, 0x3, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000380)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x80000, r5}) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000400)={r7, r8, 0x5706}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x8, @empty, 0x10000}}}, &(0x7f0000000140)=0x84) r10 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r10, 0x20000003) r11 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r11, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r11) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000480)=0x1, 0x4) r12 = accept4(r10, &(0x7f0000660ff4)=@nl=@unspec, &(0x7f0000000040)=0xf5b19b4c0b1ce647, 0x0) recvfrom$inet(r12, &(0x7f00000002c0)=""/12, 0xb, 0x2, 0x0, 0xfffffe99) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000440)={0x0, 0x4, 0x7, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x6}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000002c0)={r9, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x6, 0x400, 0x1ff, 0x401, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000004c0)={0x7fff, 0x2, 0x2, 0x4, 0x6, 0x6, 0x1, 0x1, r9}, &(0x7f0000000500)=0x20) r13 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r13, &(0x7f000014afe4)={&(0x7f0000b84000)={0x10, 0x34000}, 0xc, &(0x7f0000000000)={&(0x7f0000e4f000)={0x14, 0x25, 0x301, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x8000}) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000100)={0x2e2, r14}) r15 = socket$unix(0x1, 0x5, 0x0) connect$l2tp(r3, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r15, 0x2, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x20}}}, 0x32) 2018/04/21 01:41:40 executing program 3: madvise(&(0x7f00007d4000/0x3000)=nil, 0x3000, 0x400000000000000c) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000007000)) 2018/04/21 01:41:41 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000640)="653aba1f00000066450ff37a00b9900900000f32420f07c744240076000000c7442402180d0000ff1c24b9800000c00f3235008000000f30c4e235ba618266baf80cb8bc6e4283ef66bafc0cb856cbc4fdef0f01d62e42de8a00000000", 0x5d}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x485, 0x0, 0x400005}]}) 2018/04/21 01:41:41 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x10001) read(r0, &(0x7f0000000040)=""/13, 0xd) sendfile(r1, r2, &(0x7f0000e37000), 0x8080000001) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './bus', [], 0xa}, 0x9) 2018/04/21 01:41:41 executing program 5: r0 = eventfd2(0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x10001) read(r0, &(0x7f0000000040)=""/13, 0xd) sendfile(r1, r2, &(0x7f0000e37000), 0x8080000001) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './bus', [], 0xa}, 0x9) 2018/04/21 01:41:41 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000583000)={0x5, 0x80000000005, 0x4000, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x18) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = socket(0x9, 0x7, 0x10000) socketpair(0xf, 0x3, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000380)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x80000, r5}) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000400)={r7, r8, 0x5706}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x8, @empty, 0x10000}}}, &(0x7f0000000140)=0x84) r10 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r10, 0x20000003) r11 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r11, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r11) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000480)=0x1, 0x4) r12 = accept4(r10, &(0x7f0000660ff4)=@nl=@unspec, &(0x7f0000000040)=0xf5b19b4c0b1ce647, 0x0) recvfrom$inet(r12, &(0x7f00000002c0)=""/12, 0xb, 0x2, 0x0, 0xfffffe99) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000440)={0x0, 0x4, 0x7, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x6}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000002c0)={r9, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x6, 0x400, 0x1ff, 0x401, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000004c0)={0x7fff, 0x2, 0x2, 0x4, 0x6, 0x6, 0x1, 0x1, r9}, &(0x7f0000000500)=0x20) r13 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r13, &(0x7f000014afe4)={&(0x7f0000b84000)={0x10, 0x34000}, 0xc, &(0x7f0000000000)={&(0x7f0000e4f000)={0x14, 0x25, 0x301, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x8000}) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000100)={0x2e2, r14}) r15 = socket$unix(0x1, 0x5, 0x0) connect$l2tp(r3, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r15, 0x2, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x20}}}, 0x32) 2018/04/21 01:41:41 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000583000)={0x5, 0x80000000005, 0x4000, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x18) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = socket(0x9, 0x7, 0x10000) socketpair(0xf, 0x3, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000380)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x80000, r5}) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000400)={r7, r8, 0x5706}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x8, @empty, 0x10000}}}, &(0x7f0000000140)=0x84) r10 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r10, 0x20000003) r11 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r11, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r11) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000480)=0x1, 0x4) r12 = accept4(r10, &(0x7f0000660ff4)=@nl=@unspec, &(0x7f0000000040)=0xf5b19b4c0b1ce647, 0x0) recvfrom$inet(r12, &(0x7f00000002c0)=""/12, 0xb, 0x2, 0x0, 0xfffffe99) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000440)={0x0, 0x4, 0x7, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x6}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000002c0)={r9, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x6, 0x400, 0x1ff, 0x401, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000004c0)={0x7fff, 0x2, 0x2, 0x4, 0x6, 0x6, 0x1, 0x1, r9}, &(0x7f0000000500)=0x20) r13 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r13, &(0x7f000014afe4)={&(0x7f0000b84000)={0x10, 0x34000}, 0xc, &(0x7f0000000000)={&(0x7f0000e4f000)={0x14, 0x25, 0x301, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x8000}) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000100)={0x2e2, r14}) r15 = socket$unix(0x1, 0x5, 0x0) connect$l2tp(r3, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r15, 0x2, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x20}}}, 0x32) 2018/04/21 01:41:41 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000583000)={0x5, 0x80000000005, 0x4000, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x18) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = socket(0x9, 0x7, 0x10000) socketpair(0xf, 0x3, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000380)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x80000, r5}) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000400)={r7, r8, 0x5706}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x8, @empty, 0x10000}}}, &(0x7f0000000140)=0x84) r10 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r10, 0x20000003) r11 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r11, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r11) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000480)=0x1, 0x4) r12 = accept4(r10, &(0x7f0000660ff4)=@nl=@unspec, &(0x7f0000000040)=0xf5b19b4c0b1ce647, 0x0) recvfrom$inet(r12, &(0x7f00000002c0)=""/12, 0xb, 0x2, 0x0, 0xfffffe99) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000440)={0x0, 0x4, 0x7, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x6}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000002c0)={r9, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x6, 0x400, 0x1ff, 0x401, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000004c0)={0x7fff, 0x2, 0x2, 0x4, 0x6, 0x6, 0x1, 0x1, r9}, &(0x7f0000000500)=0x20) r13 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r13, &(0x7f000014afe4)={&(0x7f0000b84000)={0x10, 0x34000}, 0xc, &(0x7f0000000000)={&(0x7f0000e4f000)={0x14, 0x25, 0x301, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x8000}) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000100)={0x2e2, r14}) r15 = socket$unix(0x1, 0x5, 0x0) connect$l2tp(r3, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r15, 0x2, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x20}}}, 0x32) 2018/04/21 01:41:41 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000583000)={0x5, 0x80000000005, 0x4000, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x18) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = socket(0x9, 0x7, 0x10000) socketpair(0xf, 0x3, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000380)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x80000, r5}) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000400)={r7, r8, 0x5706}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x8, @empty, 0x10000}}}, &(0x7f0000000140)=0x84) r10 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r10, 0x20000003) r11 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r11, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r11) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000480)=0x1, 0x4) r12 = accept4(r10, &(0x7f0000660ff4)=@nl=@unspec, &(0x7f0000000040)=0xf5b19b4c0b1ce647, 0x0) recvfrom$inet(r12, &(0x7f00000002c0)=""/12, 0xb, 0x2, 0x0, 0xfffffe99) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000440)={0x0, 0x4, 0x7, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x6}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000002c0)={r9, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x6, 0x400, 0x1ff, 0x401, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000004c0)={0x7fff, 0x2, 0x2, 0x4, 0x6, 0x6, 0x1, 0x1, r9}, &(0x7f0000000500)=0x20) r13 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r13, &(0x7f000014afe4)={&(0x7f0000b84000)={0x10, 0x34000}, 0xc, &(0x7f0000000000)={&(0x7f0000e4f000)={0x14, 0x25, 0x301, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x8000}) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000100)={0x2e2, r14}) r15 = socket$unix(0x1, 0x5, 0x0) connect$l2tp(r3, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r15, 0x2, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x20}}}, 0x32) 2018/04/21 01:41:41 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000583000)={0x5, 0x80000000005, 0x4000, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x18) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = socket(0x9, 0x7, 0x10000) socketpair(0xf, 0x3, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000380)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x80000, r5}) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000400)={r7, r8, 0x5706}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x8, @empty, 0x10000}}}, &(0x7f0000000140)=0x84) r10 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r10, 0x20000003) r11 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r11, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r11) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000480)=0x1, 0x4) r12 = accept4(r10, &(0x7f0000660ff4)=@nl=@unspec, &(0x7f0000000040)=0xf5b19b4c0b1ce647, 0x0) recvfrom$inet(r12, &(0x7f00000002c0)=""/12, 0xb, 0x2, 0x0, 0xfffffe99) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000440)={0x0, 0x4, 0x7, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x6}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000002c0)={r9, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x6, 0x400, 0x1ff, 0x401, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000004c0)={0x7fff, 0x2, 0x2, 0x4, 0x6, 0x6, 0x1, 0x1, r9}, &(0x7f0000000500)=0x20) r13 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r13, &(0x7f000014afe4)={&(0x7f0000b84000)={0x10, 0x34000}, 0xc, &(0x7f0000000000)={&(0x7f0000e4f000)={0x14, 0x25, 0x301, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x8000}) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000100)={0x2e2, r14}) r15 = socket$unix(0x1, 0x5, 0x0) connect$l2tp(r3, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r15, 0x2, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x20}}}, 0x32) 2018/04/21 01:41:41 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000640)="653aba1f00000066450ff37a00b9900900000f32420f07c744240076000000c7442402180d0000ff1c24b9800000c00f3235008000000f30c4e235ba618266baf80cb8bc6e4283ef66bafc0cb856cbc4fdef0f01d62e42de8a00000000", 0x5d}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x485, 0x0, 0x400005}]}) 2018/04/21 01:41:41 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000583000)={0x5, 0x80000000005, 0x4000, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x18) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = socket(0x9, 0x7, 0x10000) socketpair(0xf, 0x3, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000380)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x80000, r5}) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000400)={r7, r8, 0x5706}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x8, @empty, 0x10000}}}, &(0x7f0000000140)=0x84) r10 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r10, 0x20000003) r11 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r11, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r11) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000480)=0x1, 0x4) r12 = accept4(r10, &(0x7f0000660ff4)=@nl=@unspec, &(0x7f0000000040)=0xf5b19b4c0b1ce647, 0x0) recvfrom$inet(r12, &(0x7f00000002c0)=""/12, 0xb, 0x2, 0x0, 0xfffffe99) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000440)={0x0, 0x4, 0x7, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x6}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000002c0)={r9, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x6, 0x400, 0x1ff, 0x401, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000004c0)={0x7fff, 0x2, 0x2, 0x4, 0x6, 0x6, 0x1, 0x1, r9}, &(0x7f0000000500)=0x20) r13 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r13, &(0x7f000014afe4)={&(0x7f0000b84000)={0x10, 0x34000}, 0xc, &(0x7f0000000000)={&(0x7f0000e4f000)={0x14, 0x25, 0x301, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x8000}) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000100)={0x2e2, r14}) r15 = socket$unix(0x1, 0x5, 0x0) connect$l2tp(r3, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r15, 0x2, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x20}}}, 0x32) 2018/04/21 01:41:41 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000583000)={0x5, 0x80000000005, 0x4000, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x18) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = socket(0x9, 0x7, 0x10000) socketpair(0xf, 0x3, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000380)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x80000, r5}) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000400)={r7, r8, 0x5706}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x8, @empty, 0x10000}}}, &(0x7f0000000140)=0x84) r10 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r10, 0x20000003) r11 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r11, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r11) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000480)=0x1, 0x4) r12 = accept4(r10, &(0x7f0000660ff4)=@nl=@unspec, &(0x7f0000000040)=0xf5b19b4c0b1ce647, 0x0) recvfrom$inet(r12, &(0x7f00000002c0)=""/12, 0xb, 0x2, 0x0, 0xfffffe99) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000440)={0x0, 0x4, 0x7, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x6}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000002c0)={r9, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x6, 0x400, 0x1ff, 0x401, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000004c0)={0x7fff, 0x2, 0x2, 0x4, 0x6, 0x6, 0x1, 0x1, r9}, &(0x7f0000000500)=0x20) r13 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r13, &(0x7f000014afe4)={&(0x7f0000b84000)={0x10, 0x34000}, 0xc, &(0x7f0000000000)={&(0x7f0000e4f000)={0x14, 0x25, 0x301, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x8000}) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000100)={0x2e2, r14}) r15 = socket$unix(0x1, 0x5, 0x0) connect$l2tp(r3, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r15, 0x2, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x20}}}, 0x32) 2018/04/21 01:41:41 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000583000)={0x5, 0x80000000005, 0x4000, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x18) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = socket(0x9, 0x7, 0x10000) socketpair(0xf, 0x3, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000380)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x80000, r5}) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000400)={r7, r8, 0x5706}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x8, @empty, 0x10000}}}, &(0x7f0000000140)=0x84) r10 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r10, 0x20000003) r11 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r11, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r11) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000480)=0x1, 0x4) r12 = accept4(r10, &(0x7f0000660ff4)=@nl=@unspec, &(0x7f0000000040)=0xf5b19b4c0b1ce647, 0x0) recvfrom$inet(r12, &(0x7f00000002c0)=""/12, 0xb, 0x2, 0x0, 0xfffffe99) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000440)={0x0, 0x4, 0x7, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x6}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000002c0)={r9, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x6, 0x400, 0x1ff, 0x401, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000004c0)={0x7fff, 0x2, 0x2, 0x4, 0x6, 0x6, 0x1, 0x1, r9}, &(0x7f0000000500)=0x20) r13 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r13, &(0x7f000014afe4)={&(0x7f0000b84000)={0x10, 0x34000}, 0xc, &(0x7f0000000000)={&(0x7f0000e4f000)={0x14, 0x25, 0x301, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x8000}) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000100)={0x2e2, r14}) r15 = socket$unix(0x1, 0x5, 0x0) connect$l2tp(r3, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r15, 0x2, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x20}}}, 0x32) 2018/04/21 01:41:42 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000583000)={0x5, 0x80000000005, 0x4000, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x18) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = socket(0x9, 0x7, 0x10000) socketpair(0xf, 0x3, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000380)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x80000, r5}) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000400)={r7, r8, 0x5706}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x8, @empty, 0x10000}}}, &(0x7f0000000140)=0x84) r10 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r10, 0x20000003) r11 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r11, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r11) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000480)=0x1, 0x4) r12 = accept4(r10, &(0x7f0000660ff4)=@nl=@unspec, &(0x7f0000000040)=0xf5b19b4c0b1ce647, 0x0) recvfrom$inet(r12, &(0x7f00000002c0)=""/12, 0xb, 0x2, 0x0, 0xfffffe99) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000440)={0x0, 0x4, 0x7, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x6}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000002c0)={r9, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x6, 0x400, 0x1ff, 0x401, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000004c0)={0x7fff, 0x2, 0x2, 0x4, 0x6, 0x6, 0x1, 0x1, r9}, &(0x7f0000000500)=0x20) r13 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r13, &(0x7f000014afe4)={&(0x7f0000b84000)={0x10, 0x34000}, 0xc, &(0x7f0000000000)={&(0x7f0000e4f000)={0x14, 0x25, 0x301, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x8000}) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000100)={0x2e2, r14}) r15 = socket$unix(0x1, 0x5, 0x0) connect$l2tp(r3, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r15, 0x2, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x20}}}, 0x32) 2018/04/21 01:41:42 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000583000)={0x5, 0x80000000005, 0x4000, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x18) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = socket(0x9, 0x7, 0x10000) socketpair(0xf, 0x3, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000380)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x80000, r5}) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000400)={r7, r8, 0x5706}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x8, @empty, 0x10000}}}, &(0x7f0000000140)=0x84) r10 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r10, 0x20000003) r11 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r11, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r11) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000480)=0x1, 0x4) r12 = accept4(r10, &(0x7f0000660ff4)=@nl=@unspec, &(0x7f0000000040)=0xf5b19b4c0b1ce647, 0x0) recvfrom$inet(r12, &(0x7f00000002c0)=""/12, 0xb, 0x2, 0x0, 0xfffffe99) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000440)={0x0, 0x4, 0x7, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x6}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000002c0)={r9, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x6, 0x400, 0x1ff, 0x401, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000004c0)={0x7fff, 0x2, 0x2, 0x4, 0x6, 0x6, 0x1, 0x1, r9}, &(0x7f0000000500)=0x20) r13 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r13, &(0x7f000014afe4)={&(0x7f0000b84000)={0x10, 0x34000}, 0xc, &(0x7f0000000000)={&(0x7f0000e4f000)={0x14, 0x25, 0x301, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x8000}) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000100)={0x2e2, r14}) r15 = socket$unix(0x1, 0x5, 0x0) connect$l2tp(r3, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r15, 0x2, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x20}}}, 0x32) 2018/04/21 01:41:42 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x10001) read(r0, &(0x7f0000000040)=""/13, 0xd) sendfile(r1, r2, &(0x7f0000e37000), 0x8080000001) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './bus', [], 0xa}, 0x9) 2018/04/21 01:41:42 executing program 5: r0 = eventfd2(0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x10001) read(r0, &(0x7f0000000040)=""/13, 0xd) sendfile(r1, r2, &(0x7f0000e37000), 0x8080000001) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './bus', [], 0xa}, 0x9) 2018/04/21 01:41:42 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x8000) 2018/04/21 01:41:42 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000583000)={0x5, 0x80000000005, 0x4000, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x18) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = socket(0x9, 0x7, 0x10000) socketpair(0xf, 0x3, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000380)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x80000, r5}) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000400)={r7, r8, 0x5706}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x8, @empty, 0x10000}}}, &(0x7f0000000140)=0x84) r10 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r10, 0x20000003) r11 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r11, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r11) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000480)=0x1, 0x4) r12 = accept4(r10, &(0x7f0000660ff4)=@nl=@unspec, &(0x7f0000000040)=0xf5b19b4c0b1ce647, 0x0) recvfrom$inet(r12, &(0x7f00000002c0)=""/12, 0xb, 0x2, 0x0, 0xfffffe99) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000440)={0x0, 0x4, 0x7, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x6}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000002c0)={r9, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x6, 0x400, 0x1ff, 0x401, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000004c0)={0x7fff, 0x2, 0x2, 0x4, 0x6, 0x6, 0x1, 0x1, r9}, &(0x7f0000000500)=0x20) r13 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r13, &(0x7f000014afe4)={&(0x7f0000b84000)={0x10, 0x34000}, 0xc, &(0x7f0000000000)={&(0x7f0000e4f000)={0x14, 0x25, 0x301, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x8000}) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000100)={0x2e2, r14}) r15 = socket$unix(0x1, 0x5, 0x0) connect$l2tp(r3, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r15, 0x2, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x20}}}, 0x32) 2018/04/21 01:41:42 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000583000)={0x5, 0x80000000005, 0x4000, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x18) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = socket(0x9, 0x7, 0x10000) socketpair(0xf, 0x3, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000380)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x80000, r5}) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000400)={r7, r8, 0x5706}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x8, @empty, 0x10000}}}, &(0x7f0000000140)=0x84) r10 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r10, 0x20000003) r11 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r11, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r11) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000480)=0x1, 0x4) r12 = accept4(r10, &(0x7f0000660ff4)=@nl=@unspec, &(0x7f0000000040)=0xf5b19b4c0b1ce647, 0x0) recvfrom$inet(r12, &(0x7f00000002c0)=""/12, 0xb, 0x2, 0x0, 0xfffffe99) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000440)={0x0, 0x4, 0x7, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x6}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000002c0)={r9, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x6, 0x400, 0x1ff, 0x401, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000004c0)={0x7fff, 0x2, 0x2, 0x4, 0x6, 0x6, 0x1, 0x1, r9}, &(0x7f0000000500)=0x20) r13 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r13, &(0x7f000014afe4)={&(0x7f0000b84000)={0x10, 0x34000}, 0xc, &(0x7f0000000000)={&(0x7f0000e4f000)={0x14, 0x25, 0x301, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x8000}) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000100)={0x2e2, r14}) r15 = socket$unix(0x1, 0x5, 0x0) connect$l2tp(r3, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r15, 0x2, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x20}}}, 0x32) 2018/04/21 01:41:42 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000583000)={0x5, 0x80000000005, 0x4000, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x18) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = socket(0x9, 0x7, 0x10000) socketpair(0xf, 0x3, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000380)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x80000, r5}) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000400)={r7, r8, 0x5706}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x8, @empty, 0x10000}}}, &(0x7f0000000140)=0x84) r10 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r10, 0x20000003) r11 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r11, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r11) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000480)=0x1, 0x4) r12 = accept4(r10, &(0x7f0000660ff4)=@nl=@unspec, &(0x7f0000000040)=0xf5b19b4c0b1ce647, 0x0) recvfrom$inet(r12, &(0x7f00000002c0)=""/12, 0xb, 0x2, 0x0, 0xfffffe99) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000440)={0x0, 0x4, 0x7, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x6}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000002c0)={r9, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x6, 0x400, 0x1ff, 0x401, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000004c0)={0x7fff, 0x2, 0x2, 0x4, 0x6, 0x6, 0x1, 0x1, r9}, &(0x7f0000000500)=0x20) r13 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r13, &(0x7f000014afe4)={&(0x7f0000b84000)={0x10, 0x34000}, 0xc, &(0x7f0000000000)={&(0x7f0000e4f000)={0x14, 0x25, 0x301, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x8000}) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000100)={0x2e2, r14}) r15 = socket$unix(0x1, 0x5, 0x0) connect$l2tp(r3, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r15, 0x2, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x20}}}, 0x32) 2018/04/21 01:41:42 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x45}, [], {0x95}}, &(0x7f0000000000)='@pH \x00', 0x10000002, 0x35b, &(0x7f0000000000)=""/153}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x5, &(0x7f0000000100)=@framed={{0x18}, [@call={0x85}], {0x95}}, &(0x7f000000c8c0)='syzkaller\x00', 0xd1b, 0xe4, &(0x7f00000001c0)=""/228}, 0x48) 2018/04/21 01:41:42 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) setrlimit(0x1000000000000007, &(0x7f000068d000)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 2018/04/21 01:41:42 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_adjtime(0xfffffffffffffffb, &(0x7f0000000000)) 2018/04/21 01:41:42 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) setrlimit(0x1000000000000007, &(0x7f000068d000)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 2018/04/21 01:41:43 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x45}, [], {0x95}}, &(0x7f0000000000)='@pH \x00', 0x10000002, 0x35b, &(0x7f0000000000)=""/153}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x5, &(0x7f0000000100)=@framed={{0x18}, [@call={0x85}], {0x95}}, &(0x7f000000c8c0)='syzkaller\x00', 0xd1b, 0xe4, &(0x7f00000001c0)=""/228}, 0x48) 2018/04/21 01:41:43 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000583000)={0x5, 0x80000000005, 0x4000, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x18) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = socket(0x9, 0x7, 0x10000) socketpair(0xf, 0x3, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000380)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x80000, r5}) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000400)={r7, r8, 0x5706}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x8, @empty, 0x10000}}}, &(0x7f0000000140)=0x84) r10 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r10, 0x20000003) r11 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r11, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r11) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000480)=0x1, 0x4) r12 = accept4(r10, &(0x7f0000660ff4)=@nl=@unspec, &(0x7f0000000040)=0xf5b19b4c0b1ce647, 0x0) recvfrom$inet(r12, &(0x7f00000002c0)=""/12, 0xb, 0x2, 0x0, 0xfffffe99) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000440)={0x0, 0x4, 0x7, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x6}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000002c0)={r9, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x6, 0x400, 0x1ff, 0x401, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000004c0)={0x7fff, 0x2, 0x2, 0x4, 0x6, 0x6, 0x1, 0x1, r9}, &(0x7f0000000500)=0x20) r13 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r13, &(0x7f000014afe4)={&(0x7f0000b84000)={0x10, 0x34000}, 0xc, &(0x7f0000000000)={&(0x7f0000e4f000)={0x14, 0x25, 0x301, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x8000}) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000100)={0x2e2, r14}) r15 = socket$unix(0x1, 0x5, 0x0) connect$l2tp(r3, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r15, 0x2, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x20}}}, 0x32) 2018/04/21 01:41:43 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0a0775b0d5", 0x5) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)="7312c1a72ce67ebfde5fd3ec91c45248a53f60b5a4c01632f1f64674acd8054b0f78b654a51136f624a6b44eaf0931fdb7c45c3fbd1f9e1cb5850c4957a90130ffdc6e4fb7bbd3934d2fd853c583451ce424ba9daf8070593fff310c3154609c531dc0e8d6d3b4a3fac9857a656ba4383bd2519db51a7d1b809a6769d80a863fc3e7545ef96937cad1410e958bbd584592fe994376", 0x95}], 0x1, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000100)={&(0x7f00007ebffa)=@hci, 0x80, &(0x7f00000005c0)=[{&(0x7f00000008c0)=""/134, 0x86}, {&(0x7f00000003c0)=""/14, 0xe}], 0x2, &(0x7f0000000080)=""/107, 0x6b}, 0x0) 2018/04/21 01:41:43 executing program 4: munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mlock(&(0x7f0000723000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f000025c000)={0x2, 0xffffffffffffff3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x806, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="c5732bd8a937a077783521c471c5991875f1e4fce325a1eb4a3c54aba0cd", 0x1e) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000100), 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x10200000008) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000001300)=ANY=[@ANYRES32=0x0, @ANYBLOB="b000000004215934cb152649e1087d758d0cf9db2fccedbe9eb74271c9ea92221a39e2c78bac18c3db154c30e121681e24e24d2233f9b8ed699b0af7d81bfe366652c1c4efcee84d5d5a91b01eb0cbccdbe8718a4564efba45a886d78b85dfb1af0ef7663125a46de3305a07e377776948c2665c0284e8faffa763fd05be27bda16d6fd3efa98cc83750446501f5fa194bf163725eb725f6ac2a345d56681069b1ce00aada4d9ebad8"], &(0x7f00000013c0)=0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x101000, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00002f7000/0x4000)=nil, 0x4000}}) 2018/04/21 01:41:43 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x11000000, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) 2018/04/21 01:41:43 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000412fd6)="29000000140007b7ffffffff0300e0eb01001000e0a40e07fff00f06000000ffff0100002a00f3ff09", 0x29) 2018/04/21 01:41:43 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0a0775b0d5", 0x5) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)="7312c1a72ce67ebfde5fd3ec91c45248a53f60b5a4c01632f1f64674acd8054b0f78b654a51136f624a6b44eaf0931fdb7c45c3fbd1f9e1cb5850c4957a90130ffdc6e4fb7bbd3934d2fd853c583451ce424ba9daf8070593fff310c3154609c531dc0e8d6d3b4a3fac9857a656ba4383bd2519db51a7d1b809a6769d80a863fc3e7545ef96937cad1410e958bbd584592fe994376", 0x95}], 0x1, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000100)={&(0x7f00007ebffa)=@hci, 0x80, &(0x7f00000005c0)=[{&(0x7f00000008c0)=""/134, 0x86}, {&(0x7f00000003c0)=""/14, 0xe}], 0x2, &(0x7f0000000080)=""/107, 0x6b}, 0x0) 2018/04/21 01:41:43 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x11000000, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) 2018/04/21 01:41:43 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x45}, [], {0x95}}, &(0x7f0000000000)='@pH \x00', 0x10000002, 0x35b, &(0x7f0000000000)=""/153}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x5, &(0x7f0000000100)=@framed={{0x18}, [@call={0x85}], {0x95}}, &(0x7f000000c8c0)='syzkaller\x00', 0xd1b, 0xe4, &(0x7f00000001c0)=""/228}, 0x48) 2018/04/21 01:41:43 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000412fd6)="29000000140007b7ffffffff0300e0eb01001000e0a40e07fff00f06000000ffff0100002a00f3ff09", 0x29) 2018/04/21 01:41:43 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_adjtime(0xfffffffffffffffb, &(0x7f0000000000)) 2018/04/21 01:41:43 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) setrlimit(0x1000000000000007, &(0x7f000068d000)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 2018/04/21 01:41:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mem_hardwall\x00', 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00004b5ff0)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x80000000, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000280)=0x100, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ptype\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000000)) setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000300)=0x8, 0x4) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f000098dffc)=0x6, 0x4) bind$inet6(r3, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r3, &(0x7f0000000200), 0x46, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto(r3, &(0x7f000092d000)="d5", 0x1, 0x1, &(0x7f0000ad9000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80) recvfrom$inet6(r3, &(0x7f00000001c0)=""/163, 0xa3, 0x2062, 0x0, 0x0) 2018/04/21 01:41:43 executing program 4: munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mlock(&(0x7f0000723000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f000025c000)={0x2, 0xffffffffffffff3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x806, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="c5732bd8a937a077783521c471c5991875f1e4fce325a1eb4a3c54aba0cd", 0x1e) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000100), 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x10200000008) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000001300)=ANY=[@ANYRES32=0x0, @ANYBLOB="b000000004215934cb152649e1087d758d0cf9db2fccedbe9eb74271c9ea92221a39e2c78bac18c3db154c30e121681e24e24d2233f9b8ed699b0af7d81bfe366652c1c4efcee84d5d5a91b01eb0cbccdbe8718a4564efba45a886d78b85dfb1af0ef7663125a46de3305a07e377776948c2665c0284e8faffa763fd05be27bda16d6fd3efa98cc83750446501f5fa194bf163725eb725f6ac2a345d56681069b1ce00aada4d9ebad8"], &(0x7f00000013c0)=0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x101000, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00002f7000/0x4000)=nil, 0x4000}}) 2018/04/21 01:41:43 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0a0775b0d5", 0x5) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)="7312c1a72ce67ebfde5fd3ec91c45248a53f60b5a4c01632f1f64674acd8054b0f78b654a51136f624a6b44eaf0931fdb7c45c3fbd1f9e1cb5850c4957a90130ffdc6e4fb7bbd3934d2fd853c583451ce424ba9daf8070593fff310c3154609c531dc0e8d6d3b4a3fac9857a656ba4383bd2519db51a7d1b809a6769d80a863fc3e7545ef96937cad1410e958bbd584592fe994376", 0x95}], 0x1, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000100)={&(0x7f00007ebffa)=@hci, 0x80, &(0x7f00000005c0)=[{&(0x7f00000008c0)=""/134, 0x86}, {&(0x7f00000003c0)=""/14, 0xe}], 0x2, &(0x7f0000000080)=""/107, 0x6b}, 0x0) 2018/04/21 01:41:43 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) setrlimit(0x1000000000000007, &(0x7f000068d000)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 2018/04/21 01:41:43 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x45}, [], {0x95}}, &(0x7f0000000000)='@pH \x00', 0x10000002, 0x35b, &(0x7f0000000000)=""/153}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x5, &(0x7f0000000100)=@framed={{0x18}, [@call={0x85}], {0x95}}, &(0x7f000000c8c0)='syzkaller\x00', 0xd1b, 0xe4, &(0x7f00000001c0)=""/228}, 0x48) 2018/04/21 01:41:43 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_adjtime(0xfffffffffffffffb, &(0x7f0000000000)) 2018/04/21 01:41:43 executing program 4: munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mlock(&(0x7f0000723000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f000025c000)={0x2, 0xffffffffffffff3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x806, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="c5732bd8a937a077783521c471c5991875f1e4fce325a1eb4a3c54aba0cd", 0x1e) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000100), 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x10200000008) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000001300)=ANY=[@ANYRES32=0x0, @ANYBLOB="b000000004215934cb152649e1087d758d0cf9db2fccedbe9eb74271c9ea92221a39e2c78bac18c3db154c30e121681e24e24d2233f9b8ed699b0af7d81bfe366652c1c4efcee84d5d5a91b01eb0cbccdbe8718a4564efba45a886d78b85dfb1af0ef7663125a46de3305a07e377776948c2665c0284e8faffa763fd05be27bda16d6fd3efa98cc83750446501f5fa194bf163725eb725f6ac2a345d56681069b1ce00aada4d9ebad8"], &(0x7f00000013c0)=0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x101000, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00002f7000/0x4000)=nil, 0x4000}}) 2018/04/21 01:41:43 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000412fd6)="29000000140007b7ffffffff0300e0eb01001000e0a40e07fff00f06000000ffff0100002a00f3ff09", 0x29) 2018/04/21 01:41:43 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mem_hardwall\x00', 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00004b5ff0)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x80000000, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000280)=0x100, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ptype\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000000)) setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000300)=0x8, 0x4) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f000098dffc)=0x6, 0x4) bind$inet6(r3, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r3, &(0x7f0000000200), 0x46, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto(r3, &(0x7f000092d000)="d5", 0x1, 0x1, &(0x7f0000ad9000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80) recvfrom$inet6(r3, &(0x7f00000001c0)=""/163, 0xa3, 0x2062, 0x0, 0x0) 2018/04/21 01:41:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mem_hardwall\x00', 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00004b5ff0)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x80000000, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000280)=0x100, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ptype\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000000)) setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000300)=0x8, 0x4) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f000098dffc)=0x6, 0x4) bind$inet6(r3, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r3, &(0x7f0000000200), 0x46, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto(r3, &(0x7f000092d000)="d5", 0x1, 0x1, &(0x7f0000ad9000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80) recvfrom$inet6(r3, &(0x7f00000001c0)=""/163, 0xa3, 0x2062, 0x0, 0x0) 2018/04/21 01:41:43 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0a0775b0d5", 0x5) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)="7312c1a72ce67ebfde5fd3ec91c45248a53f60b5a4c01632f1f64674acd8054b0f78b654a51136f624a6b44eaf0931fdb7c45c3fbd1f9e1cb5850c4957a90130ffdc6e4fb7bbd3934d2fd853c583451ce424ba9daf8070593fff310c3154609c531dc0e8d6d3b4a3fac9857a656ba4383bd2519db51a7d1b809a6769d80a863fc3e7545ef96937cad1410e958bbd584592fe994376", 0x95}], 0x1, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000100)={&(0x7f00007ebffa)=@hci, 0x80, &(0x7f00000005c0)=[{&(0x7f00000008c0)=""/134, 0x86}, {&(0x7f00000003c0)=""/14, 0xe}], 0x2, &(0x7f0000000080)=""/107, 0x6b}, 0x0) 2018/04/21 01:41:43 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x11000000, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) 2018/04/21 01:41:43 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_adjtime(0xfffffffffffffffb, &(0x7f0000000000)) 2018/04/21 01:41:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mem_hardwall\x00', 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00004b5ff0)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x80000000, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000280)=0x100, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ptype\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000000)) setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000300)=0x8, 0x4) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f000098dffc)=0x6, 0x4) bind$inet6(r3, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r3, &(0x7f0000000200), 0x46, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto(r3, &(0x7f000092d000)="d5", 0x1, 0x1, &(0x7f0000ad9000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80) recvfrom$inet6(r3, &(0x7f00000001c0)=""/163, 0xa3, 0x2062, 0x0, 0x0) 2018/04/21 01:41:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mem_hardwall\x00', 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00004b5ff0)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x80000000, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000280)=0x100, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ptype\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000000)) setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000300)=0x8, 0x4) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f000098dffc)=0x6, 0x4) bind$inet6(r3, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r3, &(0x7f0000000200), 0x46, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto(r3, &(0x7f000092d000)="d5", 0x1, 0x1, &(0x7f0000ad9000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80) recvfrom$inet6(r3, &(0x7f00000001c0)=""/163, 0xa3, 0x2062, 0x0, 0x0) 2018/04/21 01:41:43 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000412fd6)="29000000140007b7ffffffff0300e0eb01001000e0a40e07fff00f06000000ffff0100002a00f3ff09", 0x29) 2018/04/21 01:41:43 executing program 4: munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mlock(&(0x7f0000723000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f000025c000)={0x2, 0xffffffffffffff3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x806, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="c5732bd8a937a077783521c471c5991875f1e4fce325a1eb4a3c54aba0cd", 0x1e) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000100), 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x10200000008) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000001300)=ANY=[@ANYRES32=0x0, @ANYBLOB="b000000004215934cb152649e1087d758d0cf9db2fccedbe9eb74271c9ea92221a39e2c78bac18c3db154c30e121681e24e24d2233f9b8ed699b0af7d81bfe366652c1c4efcee84d5d5a91b01eb0cbccdbe8718a4564efba45a886d78b85dfb1af0ef7663125a46de3305a07e377776948c2665c0284e8faffa763fd05be27bda16d6fd3efa98cc83750446501f5fa194bf163725eb725f6ac2a345d56681069b1ce00aada4d9ebad8"], &(0x7f00000013c0)=0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x101000, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00002f7000/0x4000)=nil, 0x4000}}) 2018/04/21 01:41:43 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mem_hardwall\x00', 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00004b5ff0)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x80000000, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000280)=0x100, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ptype\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000000)) setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000300)=0x8, 0x4) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f000098dffc)=0x6, 0x4) bind$inet6(r3, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r3, &(0x7f0000000200), 0x46, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto(r3, &(0x7f000092d000)="d5", 0x1, 0x1, &(0x7f0000ad9000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80) recvfrom$inet6(r3, &(0x7f00000001c0)=""/163, 0xa3, 0x2062, 0x0, 0x0) 2018/04/21 01:41:44 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mem_hardwall\x00', 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00004b5ff0)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x80000000, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000280)=0x100, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ptype\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000000)) setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000300)=0x8, 0x4) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f000098dffc)=0x6, 0x4) bind$inet6(r3, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r3, &(0x7f0000000200), 0x46, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto(r3, &(0x7f000092d000)="d5", 0x1, 0x1, &(0x7f0000ad9000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80) recvfrom$inet6(r3, &(0x7f00000001c0)=""/163, 0xa3, 0x2062, 0x0, 0x0) 2018/04/21 01:41:44 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x11000000, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) 2018/04/21 01:41:44 executing program 3: munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mlock(&(0x7f0000723000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f000025c000)={0x2, 0xffffffffffffff3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x806, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="c5732bd8a937a077783521c471c5991875f1e4fce325a1eb4a3c54aba0cd", 0x1e) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000100), 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x10200000008) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000001300)=ANY=[@ANYRES32=0x0, @ANYBLOB="b000000004215934cb152649e1087d758d0cf9db2fccedbe9eb74271c9ea92221a39e2c78bac18c3db154c30e121681e24e24d2233f9b8ed699b0af7d81bfe366652c1c4efcee84d5d5a91b01eb0cbccdbe8718a4564efba45a886d78b85dfb1af0ef7663125a46de3305a07e377776948c2665c0284e8faffa763fd05be27bda16d6fd3efa98cc83750446501f5fa194bf163725eb725f6ac2a345d56681069b1ce00aada4d9ebad8"], &(0x7f00000013c0)=0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x101000, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00002f7000/0x4000)=nil, 0x4000}}) 2018/04/21 01:41:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mem_hardwall\x00', 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00004b5ff0)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x80000000, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000280)=0x100, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ptype\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000000)) setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000300)=0x8, 0x4) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f000098dffc)=0x6, 0x4) bind$inet6(r3, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r3, &(0x7f0000000200), 0x46, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto(r3, &(0x7f000092d000)="d5", 0x1, 0x1, &(0x7f0000ad9000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80) recvfrom$inet6(r3, &(0x7f00000001c0)=""/163, 0xa3, 0x2062, 0x0, 0x0) 2018/04/21 01:41:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mem_hardwall\x00', 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00004b5ff0)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x80000000, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000280)=0x100, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ptype\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000000)) setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000300)=0x8, 0x4) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f000098dffc)=0x6, 0x4) bind$inet6(r3, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r3, &(0x7f0000000200), 0x46, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto(r3, &(0x7f000092d000)="d5", 0x1, 0x1, &(0x7f0000ad9000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80) recvfrom$inet6(r3, &(0x7f00000001c0)=""/163, 0xa3, 0x2062, 0x0, 0x0) 2018/04/21 01:41:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mem_hardwall\x00', 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00004b5ff0)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x80000000, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000280)=0x100, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ptype\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000000)) setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000300)=0x8, 0x4) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f000098dffc)=0x6, 0x4) bind$inet6(r3, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r3, &(0x7f0000000200), 0x46, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto(r3, &(0x7f000092d000)="d5", 0x1, 0x1, &(0x7f0000ad9000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80) recvfrom$inet6(r3, &(0x7f00000001c0)=""/163, 0xa3, 0x2062, 0x0, 0x0) 2018/04/21 01:41:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000a98000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000a98000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000200)="0f01cf65660f73ddf80f71d4003e670f01d167d13485486d00000fc76c61c2fb9f3e260f182a0fc7a90080ea2300aa00", 0x30}], 0xaaaaaaaaaaaabd5, 0x0, &(0x7f0000000380), 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000c9bec8)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffc, 0x0, 0x0, 0x400060, 0x0, 0xfffffffffffffffe}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)) 2018/04/21 01:41:44 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ff5000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="ff00000000ff0300024d564b0000000005"]) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 01:41:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mem_hardwall\x00', 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00004b5ff0)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x80000000, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000280)=0x100, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ptype\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000000)) setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000300)=0x8, 0x4) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f000098dffc)=0x6, 0x4) bind$inet6(r3, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r3, &(0x7f0000000200), 0x46, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto(r3, &(0x7f000092d000)="d5", 0x1, 0x1, &(0x7f0000ad9000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80) recvfrom$inet6(r3, &(0x7f00000001c0)=""/163, 0xa3, 0x2062, 0x0, 0x0) 2018/04/21 01:41:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000a98000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000a98000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000200)="0f01cf65660f73ddf80f71d4003e670f01d167d13485486d00000fc76c61c2fb9f3e260f182a0fc7a90080ea2300aa00", 0x30}], 0xaaaaaaaaaaaabd5, 0x0, &(0x7f0000000380), 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000c9bec8)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffc, 0x0, 0x0, 0x400060, 0x0, 0xfffffffffffffffe}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)) 2018/04/21 01:41:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mem_hardwall\x00', 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00004b5ff0)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x80000000, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000280)=0x100, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ptype\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000000)) setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000300)=0x8, 0x4) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f000098dffc)=0x6, 0x4) bind$inet6(r3, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r3, &(0x7f0000000200), 0x46, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto(r3, &(0x7f000092d000)="d5", 0x1, 0x1, &(0x7f0000ad9000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80) recvfrom$inet6(r3, &(0x7f00000001c0)=""/163, 0xa3, 0x2062, 0x0, 0x0) 2018/04/21 01:41:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mem_hardwall\x00', 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00004b5ff0)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x80000000, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000280)=0x100, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ptype\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000000)) setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000300)=0x8, 0x4) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f000098dffc)=0x6, 0x4) bind$inet6(r3, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r3, &(0x7f0000000200), 0x46, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto(r3, &(0x7f000092d000)="d5", 0x1, 0x1, &(0x7f0000ad9000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80) recvfrom$inet6(r3, &(0x7f00000001c0)=""/163, 0xa3, 0x2062, 0x0, 0x0) 2018/04/21 01:41:44 executing program 3: munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mlock(&(0x7f0000723000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f000025c000)={0x2, 0xffffffffffffff3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x806, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="c5732bd8a937a077783521c471c5991875f1e4fce325a1eb4a3c54aba0cd", 0x1e) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000100), 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x10200000008) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000001300)=ANY=[@ANYRES32=0x0, @ANYBLOB="b000000004215934cb152649e1087d758d0cf9db2fccedbe9eb74271c9ea92221a39e2c78bac18c3db154c30e121681e24e24d2233f9b8ed699b0af7d81bfe366652c1c4efcee84d5d5a91b01eb0cbccdbe8718a4564efba45a886d78b85dfb1af0ef7663125a46de3305a07e377776948c2665c0284e8faffa763fd05be27bda16d6fd3efa98cc83750446501f5fa194bf163725eb725f6ac2a345d56681069b1ce00aada4d9ebad8"], &(0x7f00000013c0)=0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x101000, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00002f7000/0x4000)=nil, 0x4000}}) 2018/04/21 01:41:44 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ff5000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="ff00000000ff0300024d564b0000000005"]) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 01:41:44 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000a98000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000a98000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000200)="0f01cf65660f73ddf80f71d4003e670f01d167d13485486d00000fc76c61c2fb9f3e260f182a0fc7a90080ea2300aa00", 0x30}], 0xaaaaaaaaaaaabd5, 0x0, &(0x7f0000000380), 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000c9bec8)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffc, 0x0, 0x0, 0x400060, 0x0, 0xfffffffffffffffe}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)) 2018/04/21 01:41:44 executing program 5: request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={0x73, 0x79, 0x7a}, &(0x7f0000001fee)="520972757374e363757367725669643a4465", 0x0) 2018/04/21 01:41:44 executing program 5: request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={0x73, 0x79, 0x7a}, &(0x7f0000001fee)="520972757374e363757367725669643a4465", 0x0) 2018/04/21 01:41:44 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ff5000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="ff00000000ff0300024d564b0000000005"]) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 01:41:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000a98000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000a98000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000200)="0f01cf65660f73ddf80f71d4003e670f01d167d13485486d00000fc76c61c2fb9f3e260f182a0fc7a90080ea2300aa00", 0x30}], 0xaaaaaaaaaaaabd5, 0x0, &(0x7f0000000380), 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000c9bec8)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffc, 0x0, 0x0, 0x400060, 0x0, 0xfffffffffffffffe}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)) 2018/04/21 01:41:44 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ff5000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="ff00000000ff0300024d564b0000000005"]) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 01:41:44 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000db000)='tmpfs\x00', 0x2000000, &(0x7f000000a000)) mknod(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) acct(&(0x7f0000000380)='./file0/file0\x00') umount2(&(0x7f00000075c0)='./file0\x00', 0x0) 2018/04/21 01:41:44 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000a98000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000a98000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000200)="0f01cf65660f73ddf80f71d4003e670f01d167d13485486d00000fc76c61c2fb9f3e260f182a0fc7a90080ea2300aa00", 0x30}], 0xaaaaaaaaaaaabd5, 0x0, &(0x7f0000000380), 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000c9bec8)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffc, 0x0, 0x0, 0x400060, 0x0, 0xfffffffffffffffe}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)) 2018/04/21 01:41:44 executing program 3: munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mlock(&(0x7f0000723000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f000025c000)={0x2, 0xffffffffffffff3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x806, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="c5732bd8a937a077783521c471c5991875f1e4fce325a1eb4a3c54aba0cd", 0x1e) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000100), 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x10200000008) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000001300)=ANY=[@ANYRES32=0x0, @ANYBLOB="b000000004215934cb152649e1087d758d0cf9db2fccedbe9eb74271c9ea92221a39e2c78bac18c3db154c30e121681e24e24d2233f9b8ed699b0af7d81bfe366652c1c4efcee84d5d5a91b01eb0cbccdbe8718a4564efba45a886d78b85dfb1af0ef7663125a46de3305a07e377776948c2665c0284e8faffa763fd05be27bda16d6fd3efa98cc83750446501f5fa194bf163725eb725f6ac2a345d56681069b1ce00aada4d9ebad8"], &(0x7f00000013c0)=0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x101000, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00002f7000/0x4000)=nil, 0x4000}}) 2018/04/21 01:41:44 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000140)='./file0\x00') 2018/04/21 01:41:44 executing program 5: request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={0x73, 0x79, 0x7a}, &(0x7f0000001fee)="520972757374e363757367725669643a4465", 0x0) 2018/04/21 01:41:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000a98000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000a98000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000200)="0f01cf65660f73ddf80f71d4003e670f01d167d13485486d00000fc76c61c2fb9f3e260f182a0fc7a90080ea2300aa00", 0x30}], 0xaaaaaaaaaaaabd5, 0x0, &(0x7f0000000380), 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000c9bec8)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffc, 0x0, 0x0, 0x400060, 0x0, 0xfffffffffffffffe}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)) 2018/04/21 01:41:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xbb, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000e4083972d0f555ab75cfe0b40d8490ff88a44ae7fdb413c5994b763332c0422ce20cc1b1e654327d231d765a7bdbb20b36c775b09f96c72c8656c6db70b955fee75270a85849df5de22d3b5373b4daff817b871851a01a848cea2c7c08b7509494639e3e5b5e253bcce544dc2d1784eda01abd1e8dbf712e7b6a0612f7ee1618e6d8e4b213a494"], 0x6, 0x0, &(0x7f0000000280)="0e41e97e0000"}) r1 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x200000000, 0x42442) ioctl$LOOP_SET_STATUS(r1, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r2 = socket(0x0, 0x0, 0x0) write(r2, &(0x7f00000001c0), 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000004c0)=0x203, 0xfffffffffffffe8f) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x4) getpid() r3 = syz_open_dev$loop(&(0x7f0000000640)='/dev/loop#\x00', 0xfffffffffffffc01, 0x86) r4 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f00004fe000)=0x101, 0x4) recvmmsg(r5, &(0x7f00000096c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/245, 0xf5}, {&(0x7f0000000280)=""/59, 0x3b}], 0x2, &(0x7f0000000300)=""/175, 0xaf, 0x2}, 0x6}, {{&(0x7f00000003c0)=@ethernet, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000440)=""/67, 0x43}, {&(0x7f00000014c0)=""/12, 0xc}, {&(0x7f0000001500)=""/71, 0x47}, {&(0x7f0000001580)=""/125, 0x7d}, {&(0x7f0000001600)}, {&(0x7f00000016c0)=""/148, 0x94}], 0x6, &(0x7f0000001880)=""/4096, 0x1000, 0x100000001}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002a00)=""/236, 0xec}, {&(0x7f0000002b80)=""/69, 0x45}, {&(0x7f0000002d00)=""/98, 0x62}], 0x3, &(0x7f0000002e40)=""/93, 0x5d}}, {{&(0x7f0000002ec0)=@nl=@unspec, 0x80, &(0x7f0000004040), 0x0, &(0x7f0000004080)=""/8, 0x8}}, {{&(0x7f00000040c0)=@generic, 0x80, &(0x7f00000041c0), 0x0, &(0x7f0000004200)=""/232, 0xe8, 0x97f}, 0x80}, {{&(0x7f0000004300)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000006780)=[{&(0x7f0000004440)=""/155, 0x9b}, {&(0x7f0000004600)=""/4096, 0x1000}, {&(0x7f0000006680)=""/240, 0xf0}], 0x3, &(0x7f0000006800)=""/212, 0xd4, 0xffffffff}}, {{&(0x7f0000006900)=@in6={0x0, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000007d00)=[{&(0x7f0000006a00)=""/228, 0xe4}, {&(0x7f0000006b00)=""/4096, 0x1000}], 0x2, &(0x7f0000007d80)=""/4096, 0x1000}, 0xb53}], 0x7, 0x0, 0x0) listen(r6, 0x0) sendto$inet6(r5, &(0x7f00000000c0)='\f\t@b', 0x4, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}, 0x100000}, 0x1c) shutdown(r6, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) fchown(r4, 0x0, r7) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x0, 0x0, &(0x7f0000011f9d)}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x102000004) signalfd(r3, &(0x7f0000000240)={0x9}, 0x8) [ 228.223829] binder: 16580:16586 got transaction with invalid data ptr [ 228.234267] binder: 16580:16586 transaction failed 29201/-14, size 64-8 line 2982 [ 228.243659] Process accounting resumed 2018/04/21 01:41:45 executing program 5: request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={0x73, 0x79, 0x7a}, &(0x7f0000001fee)="520972757374e363757367725669643a4465", 0x0) [ 228.316976] binder: BINDER_SET_CONTEXT_MGR already set [ 228.339584] binder: 16580:16586 ioctl 40046207 0 returned -16 2018/04/21 01:41:45 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000a98000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000a98000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000200)="0f01cf65660f73ddf80f71d4003e670f01d167d13485486d00000fc76c61c2fb9f3e260f182a0fc7a90080ea2300aa00", 0x30}], 0xaaaaaaaaaaaabd5, 0x0, &(0x7f0000000380), 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000c9bec8)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffc, 0x0, 0x0, 0x400060, 0x0, 0xfffffffffffffffe}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)) 2018/04/21 01:41:45 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0xb, &(0x7f00000001c0)="e3", 0x1) sendmsg(r0, &(0x7f0000000900)={&(0x7f00000004c0)=@in6={0x2, 0x4e21, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c, &(0x7f00000007c0), 0x0, &(0x7f0000000800)}, 0x0) recvmsg(r0, &(0x7f0000000000)={&(0x7f0000000140)=@nfc_llcp, 0xfd69, &(0x7f00000009c0), 0x0, &(0x7f0000000040)=""/204, 0xcc}, 0x0) 2018/04/21 01:41:45 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000db000)='tmpfs\x00', 0x2000000, &(0x7f000000a000)) mknod(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) acct(&(0x7f0000000380)='./file0/file0\x00') umount2(&(0x7f00000075c0)='./file0\x00', 0x0) [ 228.369064] Process accounting resumed [ 228.386308] binder: BINDER_SET_CONTEXT_MGR already set [ 228.399429] binder: 16580:16586 ioctl 40046207 0 returned -16 2018/04/21 01:41:45 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000140)='./file0\x00') 2018/04/21 01:41:45 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000140)='./file0\x00') 2018/04/21 01:41:45 executing program 7: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000db000)='tmpfs\x00', 0x2000000, &(0x7f000000a000)) mknod(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) acct(&(0x7f0000000380)='./file0/file0\x00') umount2(&(0x7f00000075c0)='./file0\x00', 0x0) [ 228.414813] binder_alloc: 16580: binder_alloc_buf, no vma [ 228.420553] binder: 16580:16597 transaction failed 29189/-3, size 64-8 line 2963 [ 228.473491] binder: BINDER_SET_CONTEXT_MGR already set [ 228.478982] binder: 16580:16597 ioctl 40046207 0 returned -16 [ 228.540803] binder: undelivered TRANSACTION_ERROR: 29189 [ 228.560386] binder: undelivered TRANSACTION_ERROR: 29201 [ 228.644442] Process accounting resumed [ 228.651872] Process accounting resumed 2018/04/21 01:41:45 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000db000)='tmpfs\x00', 0x2000000, &(0x7f000000a000)) mknod(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) acct(&(0x7f0000000380)='./file0/file0\x00') umount2(&(0x7f00000075c0)='./file0\x00', 0x0) 2018/04/21 01:41:45 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000db000)='tmpfs\x00', 0x2000000, &(0x7f000000a000)) mknod(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) acct(&(0x7f0000000380)='./file0/file0\x00') umount2(&(0x7f00000075c0)='./file0\x00', 0x0) 2018/04/21 01:41:45 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0xb, &(0x7f00000001c0)="e3", 0x1) sendmsg(r0, &(0x7f0000000900)={&(0x7f00000004c0)=@in6={0x2, 0x4e21, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c, &(0x7f00000007c0), 0x0, &(0x7f0000000800)}, 0x0) recvmsg(r0, &(0x7f0000000000)={&(0x7f0000000140)=@nfc_llcp, 0xfd69, &(0x7f00000009c0), 0x0, &(0x7f0000000040)=""/204, 0xcc}, 0x0) 2018/04/21 01:41:45 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000140)='./file0\x00') 2018/04/21 01:41:45 executing program 6: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f000004cff3)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9208, 0xfffffdfd) 2018/04/21 01:41:45 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000140)='./file0\x00') 2018/04/21 01:41:45 executing program 7: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000db000)='tmpfs\x00', 0x2000000, &(0x7f000000a000)) mknod(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) acct(&(0x7f0000000380)='./file0/file0\x00') umount2(&(0x7f00000075c0)='./file0\x00', 0x0) 2018/04/21 01:41:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xbb, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000e4083972d0f555ab75cfe0b40d8490ff88a44ae7fdb413c5994b763332c0422ce20cc1b1e654327d231d765a7bdbb20b36c775b09f96c72c8656c6db70b955fee75270a85849df5de22d3b5373b4daff817b871851a01a848cea2c7c08b7509494639e3e5b5e253bcce544dc2d1784eda01abd1e8dbf712e7b6a0612f7ee1618e6d8e4b213a494"], 0x6, 0x0, &(0x7f0000000280)="0e41e97e0000"}) r1 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x200000000, 0x42442) ioctl$LOOP_SET_STATUS(r1, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r2 = socket(0x0, 0x0, 0x0) write(r2, &(0x7f00000001c0), 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000004c0)=0x203, 0xfffffffffffffe8f) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x4) getpid() r3 = syz_open_dev$loop(&(0x7f0000000640)='/dev/loop#\x00', 0xfffffffffffffc01, 0x86) r4 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f00004fe000)=0x101, 0x4) recvmmsg(r5, &(0x7f00000096c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/245, 0xf5}, {&(0x7f0000000280)=""/59, 0x3b}], 0x2, &(0x7f0000000300)=""/175, 0xaf, 0x2}, 0x6}, {{&(0x7f00000003c0)=@ethernet, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000440)=""/67, 0x43}, {&(0x7f00000014c0)=""/12, 0xc}, {&(0x7f0000001500)=""/71, 0x47}, {&(0x7f0000001580)=""/125, 0x7d}, {&(0x7f0000001600)}, {&(0x7f00000016c0)=""/148, 0x94}], 0x6, &(0x7f0000001880)=""/4096, 0x1000, 0x100000001}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002a00)=""/236, 0xec}, {&(0x7f0000002b80)=""/69, 0x45}, {&(0x7f0000002d00)=""/98, 0x62}], 0x3, &(0x7f0000002e40)=""/93, 0x5d}}, {{&(0x7f0000002ec0)=@nl=@unspec, 0x80, &(0x7f0000004040), 0x0, &(0x7f0000004080)=""/8, 0x8}}, {{&(0x7f00000040c0)=@generic, 0x80, &(0x7f00000041c0), 0x0, &(0x7f0000004200)=""/232, 0xe8, 0x97f}, 0x80}, {{&(0x7f0000004300)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000006780)=[{&(0x7f0000004440)=""/155, 0x9b}, {&(0x7f0000004600)=""/4096, 0x1000}, {&(0x7f0000006680)=""/240, 0xf0}], 0x3, &(0x7f0000006800)=""/212, 0xd4, 0xffffffff}}, {{&(0x7f0000006900)=@in6={0x0, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000007d00)=[{&(0x7f0000006a00)=""/228, 0xe4}, {&(0x7f0000006b00)=""/4096, 0x1000}], 0x2, &(0x7f0000007d80)=""/4096, 0x1000}, 0xb53}], 0x7, 0x0, 0x0) listen(r6, 0x0) sendto$inet6(r5, &(0x7f00000000c0)='\f\t@b', 0x4, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}, 0x100000}, 0x1c) shutdown(r6, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) fchown(r4, 0x0, r7) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x0, 0x0, &(0x7f0000011f9d)}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x102000004) signalfd(r3, &(0x7f0000000240)={0x9}, 0x8) 2018/04/21 01:41:45 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0xb, &(0x7f00000001c0)="e3", 0x1) sendmsg(r0, &(0x7f0000000900)={&(0x7f00000004c0)=@in6={0x2, 0x4e21, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c, &(0x7f00000007c0), 0x0, &(0x7f0000000800)}, 0x0) recvmsg(r0, &(0x7f0000000000)={&(0x7f0000000140)=@nfc_llcp, 0xfd69, &(0x7f00000009c0), 0x0, &(0x7f0000000040)=""/204, 0xcc}, 0x0) [ 228.777048] binder: 16626:16630 got transaction with invalid data ptr [ 228.784756] binder: 16626:16630 transaction failed 29201/-14, size 64-8 line 2982 [ 228.800118] Process accounting resumed 2018/04/21 01:41:45 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000db000)='tmpfs\x00', 0x2000000, &(0x7f000000a000)) mknod(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) acct(&(0x7f0000000380)='./file0/file0\x00') umount2(&(0x7f00000075c0)='./file0\x00', 0x0) [ 228.833125] binder: BINDER_SET_CONTEXT_MGR already set [ 228.851547] binder: 16626:16630 ioctl 40046207 0 returned -16 [ 228.885123] Process accounting resumed 2018/04/21 01:41:45 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000db000)='tmpfs\x00', 0x2000000, &(0x7f000000a000)) mknod(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) acct(&(0x7f0000000380)='./file0/file0\x00') umount2(&(0x7f00000075c0)='./file0\x00', 0x0) 2018/04/21 01:41:45 executing program 6: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f000004cff3)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9208, 0xfffffdfd) 2018/04/21 01:41:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xbb, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000e4083972d0f555ab75cfe0b40d8490ff88a44ae7fdb413c5994b763332c0422ce20cc1b1e654327d231d765a7bdbb20b36c775b09f96c72c8656c6db70b955fee75270a85849df5de22d3b5373b4daff817b871851a01a848cea2c7c08b7509494639e3e5b5e253bcce544dc2d1784eda01abd1e8dbf712e7b6a0612f7ee1618e6d8e4b213a494"], 0x6, 0x0, &(0x7f0000000280)="0e41e97e0000"}) r1 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x200000000, 0x42442) ioctl$LOOP_SET_STATUS(r1, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r2 = socket(0x0, 0x0, 0x0) write(r2, &(0x7f00000001c0), 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000004c0)=0x203, 0xfffffffffffffe8f) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x4) getpid() r3 = syz_open_dev$loop(&(0x7f0000000640)='/dev/loop#\x00', 0xfffffffffffffc01, 0x86) r4 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f00004fe000)=0x101, 0x4) recvmmsg(r5, &(0x7f00000096c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/245, 0xf5}, {&(0x7f0000000280)=""/59, 0x3b}], 0x2, &(0x7f0000000300)=""/175, 0xaf, 0x2}, 0x6}, {{&(0x7f00000003c0)=@ethernet, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000440)=""/67, 0x43}, {&(0x7f00000014c0)=""/12, 0xc}, {&(0x7f0000001500)=""/71, 0x47}, {&(0x7f0000001580)=""/125, 0x7d}, {&(0x7f0000001600)}, {&(0x7f00000016c0)=""/148, 0x94}], 0x6, &(0x7f0000001880)=""/4096, 0x1000, 0x100000001}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002a00)=""/236, 0xec}, {&(0x7f0000002b80)=""/69, 0x45}, {&(0x7f0000002d00)=""/98, 0x62}], 0x3, &(0x7f0000002e40)=""/93, 0x5d}}, {{&(0x7f0000002ec0)=@nl=@unspec, 0x80, &(0x7f0000004040), 0x0, &(0x7f0000004080)=""/8, 0x8}}, {{&(0x7f00000040c0)=@generic, 0x80, &(0x7f00000041c0), 0x0, &(0x7f0000004200)=""/232, 0xe8, 0x97f}, 0x80}, {{&(0x7f0000004300)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000006780)=[{&(0x7f0000004440)=""/155, 0x9b}, {&(0x7f0000004600)=""/4096, 0x1000}, {&(0x7f0000006680)=""/240, 0xf0}], 0x3, &(0x7f0000006800)=""/212, 0xd4, 0xffffffff}}, {{&(0x7f0000006900)=@in6={0x0, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000007d00)=[{&(0x7f0000006a00)=""/228, 0xe4}, {&(0x7f0000006b00)=""/4096, 0x1000}], 0x2, &(0x7f0000007d80)=""/4096, 0x1000}, 0xb53}], 0x7, 0x0, 0x0) listen(r6, 0x0) sendto$inet6(r5, &(0x7f00000000c0)='\f\t@b', 0x4, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}, 0x100000}, 0x1c) shutdown(r6, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) fchown(r4, 0x0, r7) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x0, 0x0, &(0x7f0000011f9d)}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x102000004) signalfd(r3, &(0x7f0000000240)={0x9}, 0x8) 2018/04/21 01:41:45 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000140)='./file0\x00') [ 228.955793] binder: undelivered TRANSACTION_ERROR: 29201 [ 228.970207] Process accounting resumed [ 229.108388] Process accounting resumed [ 229.139102] binder: 16657:16666 got transaction with invalid data ptr [ 229.173172] Process accounting resumed [ 229.174423] binder: 16657:16666 transaction failed 29201/-14, size 64-8 line 2982 2018/04/21 01:41:46 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000db000)='tmpfs\x00', 0x2000000, &(0x7f000000a000)) mknod(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) acct(&(0x7f0000000380)='./file0/file0\x00') umount2(&(0x7f00000075c0)='./file0\x00', 0x0) 2018/04/21 01:41:46 executing program 7: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000db000)='tmpfs\x00', 0x2000000, &(0x7f000000a000)) mknod(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) acct(&(0x7f0000000380)='./file0/file0\x00') umount2(&(0x7f00000075c0)='./file0\x00', 0x0) 2018/04/21 01:41:46 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000140)='./file0\x00') 2018/04/21 01:41:46 executing program 6: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f000004cff3)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9208, 0xfffffdfd) 2018/04/21 01:41:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xbb, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000e4083972d0f555ab75cfe0b40d8490ff88a44ae7fdb413c5994b763332c0422ce20cc1b1e654327d231d765a7bdbb20b36c775b09f96c72c8656c6db70b955fee75270a85849df5de22d3b5373b4daff817b871851a01a848cea2c7c08b7509494639e3e5b5e253bcce544dc2d1784eda01abd1e8dbf712e7b6a0612f7ee1618e6d8e4b213a494"], 0x6, 0x0, &(0x7f0000000280)="0e41e97e0000"}) r1 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x200000000, 0x42442) ioctl$LOOP_SET_STATUS(r1, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r2 = socket(0x0, 0x0, 0x0) write(r2, &(0x7f00000001c0), 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000004c0)=0x203, 0xfffffffffffffe8f) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x4) getpid() r3 = syz_open_dev$loop(&(0x7f0000000640)='/dev/loop#\x00', 0xfffffffffffffc01, 0x86) r4 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f00004fe000)=0x101, 0x4) recvmmsg(r5, &(0x7f00000096c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/245, 0xf5}, {&(0x7f0000000280)=""/59, 0x3b}], 0x2, &(0x7f0000000300)=""/175, 0xaf, 0x2}, 0x6}, {{&(0x7f00000003c0)=@ethernet, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000440)=""/67, 0x43}, {&(0x7f00000014c0)=""/12, 0xc}, {&(0x7f0000001500)=""/71, 0x47}, {&(0x7f0000001580)=""/125, 0x7d}, {&(0x7f0000001600)}, {&(0x7f00000016c0)=""/148, 0x94}], 0x6, &(0x7f0000001880)=""/4096, 0x1000, 0x100000001}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002a00)=""/236, 0xec}, {&(0x7f0000002b80)=""/69, 0x45}, {&(0x7f0000002d00)=""/98, 0x62}], 0x3, &(0x7f0000002e40)=""/93, 0x5d}}, {{&(0x7f0000002ec0)=@nl=@unspec, 0x80, &(0x7f0000004040), 0x0, &(0x7f0000004080)=""/8, 0x8}}, {{&(0x7f00000040c0)=@generic, 0x80, &(0x7f00000041c0), 0x0, &(0x7f0000004200)=""/232, 0xe8, 0x97f}, 0x80}, {{&(0x7f0000004300)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000006780)=[{&(0x7f0000004440)=""/155, 0x9b}, {&(0x7f0000004600)=""/4096, 0x1000}, {&(0x7f0000006680)=""/240, 0xf0}], 0x3, &(0x7f0000006800)=""/212, 0xd4, 0xffffffff}}, {{&(0x7f0000006900)=@in6={0x0, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000007d00)=[{&(0x7f0000006a00)=""/228, 0xe4}, {&(0x7f0000006b00)=""/4096, 0x1000}], 0x2, &(0x7f0000007d80)=""/4096, 0x1000}, 0xb53}], 0x7, 0x0, 0x0) listen(r6, 0x0) sendto$inet6(r5, &(0x7f00000000c0)='\f\t@b', 0x4, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}, 0x100000}, 0x1c) shutdown(r6, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) fchown(r4, 0x0, r7) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x0, 0x0, &(0x7f0000011f9d)}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x102000004) signalfd(r3, &(0x7f0000000240)={0x9}, 0x8) 2018/04/21 01:41:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xbb, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000e4083972d0f555ab75cfe0b40d8490ff88a44ae7fdb413c5994b763332c0422ce20cc1b1e654327d231d765a7bdbb20b36c775b09f96c72c8656c6db70b955fee75270a85849df5de22d3b5373b4daff817b871851a01a848cea2c7c08b7509494639e3e5b5e253bcce544dc2d1784eda01abd1e8dbf712e7b6a0612f7ee1618e6d8e4b213a494"], 0x6, 0x0, &(0x7f0000000280)="0e41e97e0000"}) r1 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x200000000, 0x42442) ioctl$LOOP_SET_STATUS(r1, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r2 = socket(0x0, 0x0, 0x0) write(r2, &(0x7f00000001c0), 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000004c0)=0x203, 0xfffffffffffffe8f) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x4) getpid() r3 = syz_open_dev$loop(&(0x7f0000000640)='/dev/loop#\x00', 0xfffffffffffffc01, 0x86) r4 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f00004fe000)=0x101, 0x4) recvmmsg(r5, &(0x7f00000096c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/245, 0xf5}, {&(0x7f0000000280)=""/59, 0x3b}], 0x2, &(0x7f0000000300)=""/175, 0xaf, 0x2}, 0x6}, {{&(0x7f00000003c0)=@ethernet, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000440)=""/67, 0x43}, {&(0x7f00000014c0)=""/12, 0xc}, {&(0x7f0000001500)=""/71, 0x47}, {&(0x7f0000001580)=""/125, 0x7d}, {&(0x7f0000001600)}, {&(0x7f00000016c0)=""/148, 0x94}], 0x6, &(0x7f0000001880)=""/4096, 0x1000, 0x100000001}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002a00)=""/236, 0xec}, {&(0x7f0000002b80)=""/69, 0x45}, {&(0x7f0000002d00)=""/98, 0x62}], 0x3, &(0x7f0000002e40)=""/93, 0x5d}}, {{&(0x7f0000002ec0)=@nl=@unspec, 0x80, &(0x7f0000004040), 0x0, &(0x7f0000004080)=""/8, 0x8}}, {{&(0x7f00000040c0)=@generic, 0x80, &(0x7f00000041c0), 0x0, &(0x7f0000004200)=""/232, 0xe8, 0x97f}, 0x80}, {{&(0x7f0000004300)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000006780)=[{&(0x7f0000004440)=""/155, 0x9b}, {&(0x7f0000004600)=""/4096, 0x1000}, {&(0x7f0000006680)=""/240, 0xf0}], 0x3, &(0x7f0000006800)=""/212, 0xd4, 0xffffffff}}, {{&(0x7f0000006900)=@in6={0x0, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000007d00)=[{&(0x7f0000006a00)=""/228, 0xe4}, {&(0x7f0000006b00)=""/4096, 0x1000}], 0x2, &(0x7f0000007d80)=""/4096, 0x1000}, 0xb53}], 0x7, 0x0, 0x0) listen(r6, 0x0) sendto$inet6(r5, &(0x7f00000000c0)='\f\t@b', 0x4, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}, 0x100000}, 0x1c) shutdown(r6, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) fchown(r4, 0x0, r7) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x0, 0x0, &(0x7f0000011f9d)}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x102000004) signalfd(r3, &(0x7f0000000240)={0x9}, 0x8) 2018/04/21 01:41:46 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0xb, &(0x7f00000001c0)="e3", 0x1) sendmsg(r0, &(0x7f0000000900)={&(0x7f00000004c0)=@in6={0x2, 0x4e21, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c, &(0x7f00000007c0), 0x0, &(0x7f0000000800)}, 0x0) recvmsg(r0, &(0x7f0000000000)={&(0x7f0000000140)=@nfc_llcp, 0xfd69, &(0x7f00000009c0), 0x0, &(0x7f0000000040)=""/204, 0xcc}, 0x0) 2018/04/21 01:41:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xbb, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000e4083972d0f555ab75cfe0b40d8490ff88a44ae7fdb413c5994b763332c0422ce20cc1b1e654327d231d765a7bdbb20b36c775b09f96c72c8656c6db70b955fee75270a85849df5de22d3b5373b4daff817b871851a01a848cea2c7c08b7509494639e3e5b5e253bcce544dc2d1784eda01abd1e8dbf712e7b6a0612f7ee1618e6d8e4b213a494"], 0x6, 0x0, &(0x7f0000000280)="0e41e97e0000"}) r1 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x200000000, 0x42442) ioctl$LOOP_SET_STATUS(r1, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r2 = socket(0x0, 0x0, 0x0) write(r2, &(0x7f00000001c0), 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000004c0)=0x203, 0xfffffffffffffe8f) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x4) getpid() r3 = syz_open_dev$loop(&(0x7f0000000640)='/dev/loop#\x00', 0xfffffffffffffc01, 0x86) r4 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f00004fe000)=0x101, 0x4) recvmmsg(r5, &(0x7f00000096c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/245, 0xf5}, {&(0x7f0000000280)=""/59, 0x3b}], 0x2, &(0x7f0000000300)=""/175, 0xaf, 0x2}, 0x6}, {{&(0x7f00000003c0)=@ethernet, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000440)=""/67, 0x43}, {&(0x7f00000014c0)=""/12, 0xc}, {&(0x7f0000001500)=""/71, 0x47}, {&(0x7f0000001580)=""/125, 0x7d}, {&(0x7f0000001600)}, {&(0x7f00000016c0)=""/148, 0x94}], 0x6, &(0x7f0000001880)=""/4096, 0x1000, 0x100000001}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002a00)=""/236, 0xec}, {&(0x7f0000002b80)=""/69, 0x45}, {&(0x7f0000002d00)=""/98, 0x62}], 0x3, &(0x7f0000002e40)=""/93, 0x5d}}, {{&(0x7f0000002ec0)=@nl=@unspec, 0x80, &(0x7f0000004040), 0x0, &(0x7f0000004080)=""/8, 0x8}}, {{&(0x7f00000040c0)=@generic, 0x80, &(0x7f00000041c0), 0x0, &(0x7f0000004200)=""/232, 0xe8, 0x97f}, 0x80}, {{&(0x7f0000004300)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000006780)=[{&(0x7f0000004440)=""/155, 0x9b}, {&(0x7f0000004600)=""/4096, 0x1000}, {&(0x7f0000006680)=""/240, 0xf0}], 0x3, &(0x7f0000006800)=""/212, 0xd4, 0xffffffff}}, {{&(0x7f0000006900)=@in6={0x0, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000007d00)=[{&(0x7f0000006a00)=""/228, 0xe4}, {&(0x7f0000006b00)=""/4096, 0x1000}], 0x2, &(0x7f0000007d80)=""/4096, 0x1000}, 0xb53}], 0x7, 0x0, 0x0) listen(r6, 0x0) sendto$inet6(r5, &(0x7f00000000c0)='\f\t@b', 0x4, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}, 0x100000}, 0x1c) shutdown(r6, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) fchown(r4, 0x0, r7) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x0, 0x0, &(0x7f0000011f9d)}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x102000004) signalfd(r3, &(0x7f0000000240)={0x9}, 0x8) [ 229.244582] binder: BINDER_SET_CONTEXT_MGR already set [ 229.250991] binder: 16657:16666 ioctl 40046207 0 returned -16 [ 229.274468] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/21 01:41:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xbb, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000e4083972d0f555ab75cfe0b40d8490ff88a44ae7fdb413c5994b763332c0422ce20cc1b1e654327d231d765a7bdbb20b36c775b09f96c72c8656c6db70b955fee75270a85849df5de22d3b5373b4daff817b871851a01a848cea2c7c08b7509494639e3e5b5e253bcce544dc2d1784eda01abd1e8dbf712e7b6a0612f7ee1618e6d8e4b213a494"], 0x6, 0x0, &(0x7f0000000280)="0e41e97e0000"}) r1 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x200000000, 0x42442) ioctl$LOOP_SET_STATUS(r1, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r2 = socket(0x0, 0x0, 0x0) write(r2, &(0x7f00000001c0), 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000004c0)=0x203, 0xfffffffffffffe8f) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x4) getpid() r3 = syz_open_dev$loop(&(0x7f0000000640)='/dev/loop#\x00', 0xfffffffffffffc01, 0x86) r4 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f00004fe000)=0x101, 0x4) recvmmsg(r5, &(0x7f00000096c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/245, 0xf5}, {&(0x7f0000000280)=""/59, 0x3b}], 0x2, &(0x7f0000000300)=""/175, 0xaf, 0x2}, 0x6}, {{&(0x7f00000003c0)=@ethernet, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000440)=""/67, 0x43}, {&(0x7f00000014c0)=""/12, 0xc}, {&(0x7f0000001500)=""/71, 0x47}, {&(0x7f0000001580)=""/125, 0x7d}, {&(0x7f0000001600)}, {&(0x7f00000016c0)=""/148, 0x94}], 0x6, &(0x7f0000001880)=""/4096, 0x1000, 0x100000001}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002a00)=""/236, 0xec}, {&(0x7f0000002b80)=""/69, 0x45}, {&(0x7f0000002d00)=""/98, 0x62}], 0x3, &(0x7f0000002e40)=""/93, 0x5d}}, {{&(0x7f0000002ec0)=@nl=@unspec, 0x80, &(0x7f0000004040), 0x0, &(0x7f0000004080)=""/8, 0x8}}, {{&(0x7f00000040c0)=@generic, 0x80, &(0x7f00000041c0), 0x0, &(0x7f0000004200)=""/232, 0xe8, 0x97f}, 0x80}, {{&(0x7f0000004300)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000006780)=[{&(0x7f0000004440)=""/155, 0x9b}, {&(0x7f0000004600)=""/4096, 0x1000}, {&(0x7f0000006680)=""/240, 0xf0}], 0x3, &(0x7f0000006800)=""/212, 0xd4, 0xffffffff}}, {{&(0x7f0000006900)=@in6={0x0, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000007d00)=[{&(0x7f0000006a00)=""/228, 0xe4}, {&(0x7f0000006b00)=""/4096, 0x1000}], 0x2, &(0x7f0000007d80)=""/4096, 0x1000}, 0xb53}], 0x7, 0x0, 0x0) listen(r6, 0x0) sendto$inet6(r5, &(0x7f00000000c0)='\f\t@b', 0x4, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}, 0x100000}, 0x1c) shutdown(r6, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) fchown(r4, 0x0, r7) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x0, 0x0, &(0x7f0000011f9d)}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x102000004) signalfd(r3, &(0x7f0000000240)={0x9}, 0x8) [ 229.369538] Process accounting resumed [ 229.373137] Process accounting resumed [ 229.397283] binder: 16683:16689 got transaction with invalid data ptr 2018/04/21 01:41:46 executing program 7: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xbb, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000e4083972d0f555ab75cfe0b40d8490ff88a44ae7fdb413c5994b763332c0422ce20cc1b1e654327d231d765a7bdbb20b36c775b09f96c72c8656c6db70b955fee75270a85849df5de22d3b5373b4daff817b871851a01a848cea2c7c08b7509494639e3e5b5e253bcce544dc2d1784eda01abd1e8dbf712e7b6a0612f7ee1618e6d8e4b213a494"], 0x6, 0x0, &(0x7f0000000280)="0e41e97e0000"}) r1 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x200000000, 0x42442) ioctl$LOOP_SET_STATUS(r1, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r2 = socket(0x0, 0x0, 0x0) write(r2, &(0x7f00000001c0), 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000004c0)=0x203, 0xfffffffffffffe8f) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x4) getpid() r3 = syz_open_dev$loop(&(0x7f0000000640)='/dev/loop#\x00', 0xfffffffffffffc01, 0x86) r4 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f00004fe000)=0x101, 0x4) recvmmsg(r5, &(0x7f00000096c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/245, 0xf5}, {&(0x7f0000000280)=""/59, 0x3b}], 0x2, &(0x7f0000000300)=""/175, 0xaf, 0x2}, 0x6}, {{&(0x7f00000003c0)=@ethernet, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000440)=""/67, 0x43}, {&(0x7f00000014c0)=""/12, 0xc}, {&(0x7f0000001500)=""/71, 0x47}, {&(0x7f0000001580)=""/125, 0x7d}, {&(0x7f0000001600)}, {&(0x7f00000016c0)=""/148, 0x94}], 0x6, &(0x7f0000001880)=""/4096, 0x1000, 0x100000001}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002a00)=""/236, 0xec}, {&(0x7f0000002b80)=""/69, 0x45}, {&(0x7f0000002d00)=""/98, 0x62}], 0x3, &(0x7f0000002e40)=""/93, 0x5d}}, {{&(0x7f0000002ec0)=@nl=@unspec, 0x80, &(0x7f0000004040), 0x0, &(0x7f0000004080)=""/8, 0x8}}, {{&(0x7f00000040c0)=@generic, 0x80, &(0x7f00000041c0), 0x0, &(0x7f0000004200)=""/232, 0xe8, 0x97f}, 0x80}, {{&(0x7f0000004300)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000006780)=[{&(0x7f0000004440)=""/155, 0x9b}, {&(0x7f0000004600)=""/4096, 0x1000}, {&(0x7f0000006680)=""/240, 0xf0}], 0x3, &(0x7f0000006800)=""/212, 0xd4, 0xffffffff}}, {{&(0x7f0000006900)=@in6={0x0, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000007d00)=[{&(0x7f0000006a00)=""/228, 0xe4}, {&(0x7f0000006b00)=""/4096, 0x1000}], 0x2, &(0x7f0000007d80)=""/4096, 0x1000}, 0xb53}], 0x7, 0x0, 0x0) listen(r6, 0x0) sendto$inet6(r5, &(0x7f00000000c0)='\f\t@b', 0x4, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}, 0x100000}, 0x1c) shutdown(r6, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) fchown(r4, 0x0, r7) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x0, 0x0, &(0x7f0000011f9d)}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x102000004) signalfd(r3, &(0x7f0000000240)={0x9}, 0x8) 2018/04/21 01:41:46 executing program 6: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f000004cff3)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9208, 0xfffffdfd) [ 229.438711] binder: BINDER_SET_CONTEXT_MGR already set [ 229.447992] binder: 16691:16694 ioctl 40046207 0 returned -16 [ 229.466514] binder: 16691:16694 got transaction with invalid data ptr [ 229.474503] binder: BINDER_SET_CONTEXT_MGR already set [ 229.474530] binder: 16683:16689 transaction failed 29201/-14, size 64-8 line 2982 2018/04/21 01:41:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000248ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045439, &(0x7f0000000000)) 2018/04/21 01:41:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000008000)={&(0x7f0000cceff4)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000731ef4)={0x20, 0x27, 0x829, 0x0, 0x0, {0x11}, [@nested={0xc, 0x9, [@typed={0x8, 0x1, @ipv4=@broadcast=0xffffffff}]}]}, 0x20}, 0x1}, 0x0) [ 229.481337] binder: 16692:16695 ioctl 40046207 0 returned -16 [ 229.494173] binder: 16691:16694 transaction failed 29201/-14, size 64-8 line 2982 [ 229.526836] binder: 16692:16695 got transaction with invalid data ptr [ 229.542529] binder: BINDER_SET_CONTEXT_MGR already set [ 229.547970] binder: BINDER_SET_CONTEXT_MGR already set [ 229.553764] binder: 16692:16695 transaction failed 29201/-14, size 64-8 line 2982 [ 229.554492] binder: 16683:16689 ioctl 40046207 0 returned -16 [ 229.569536] binder: 16691:16694 ioctl 40046207 0 returned -16 2018/04/21 01:41:46 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x74, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @broadcast=0xffffffff}}}}, &(0x7f0000000000)=0xb0) [ 229.593215] binder: BINDER_SET_CONTEXT_MGR already set [ 229.605640] binder: 16698:16701 ioctl 40046207 0 returned -16 [ 229.615489] binder: undelivered TRANSACTION_ERROR: 29201 [ 229.628565] binder: 16698:16701 got transaction with invalid data ptr 2018/04/21 01:41:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xbb, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000e4083972d0f555ab75cfe0b40d8490ff88a44ae7fdb413c5994b763332c0422ce20cc1b1e654327d231d765a7bdbb20b36c775b09f96c72c8656c6db70b955fee75270a85849df5de22d3b5373b4daff817b871851a01a848cea2c7c08b7509494639e3e5b5e253bcce544dc2d1784eda01abd1e8dbf712e7b6a0612f7ee1618e6d8e4b213a494"], 0x6, 0x0, &(0x7f0000000280)="0e41e97e0000"}) r1 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x200000000, 0x42442) ioctl$LOOP_SET_STATUS(r1, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r2 = socket(0x0, 0x0, 0x0) write(r2, &(0x7f00000001c0), 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000004c0)=0x203, 0xfffffffffffffe8f) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x4) getpid() r3 = syz_open_dev$loop(&(0x7f0000000640)='/dev/loop#\x00', 0xfffffffffffffc01, 0x86) r4 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f00004fe000)=0x101, 0x4) recvmmsg(r5, &(0x7f00000096c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/245, 0xf5}, {&(0x7f0000000280)=""/59, 0x3b}], 0x2, &(0x7f0000000300)=""/175, 0xaf, 0x2}, 0x6}, {{&(0x7f00000003c0)=@ethernet, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000440)=""/67, 0x43}, {&(0x7f00000014c0)=""/12, 0xc}, {&(0x7f0000001500)=""/71, 0x47}, {&(0x7f0000001580)=""/125, 0x7d}, {&(0x7f0000001600)}, {&(0x7f00000016c0)=""/148, 0x94}], 0x6, &(0x7f0000001880)=""/4096, 0x1000, 0x100000001}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002a00)=""/236, 0xec}, {&(0x7f0000002b80)=""/69, 0x45}, {&(0x7f0000002d00)=""/98, 0x62}], 0x3, &(0x7f0000002e40)=""/93, 0x5d}}, {{&(0x7f0000002ec0)=@nl=@unspec, 0x80, &(0x7f0000004040), 0x0, &(0x7f0000004080)=""/8, 0x8}}, {{&(0x7f00000040c0)=@generic, 0x80, &(0x7f00000041c0), 0x0, &(0x7f0000004200)=""/232, 0xe8, 0x97f}, 0x80}, {{&(0x7f0000004300)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000006780)=[{&(0x7f0000004440)=""/155, 0x9b}, {&(0x7f0000004600)=""/4096, 0x1000}, {&(0x7f0000006680)=""/240, 0xf0}], 0x3, &(0x7f0000006800)=""/212, 0xd4, 0xffffffff}}, {{&(0x7f0000006900)=@in6={0x0, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000007d00)=[{&(0x7f0000006a00)=""/228, 0xe4}, {&(0x7f0000006b00)=""/4096, 0x1000}], 0x2, &(0x7f0000007d80)=""/4096, 0x1000}, 0xb53}], 0x7, 0x0, 0x0) listen(r6, 0x0) sendto$inet6(r5, &(0x7f00000000c0)='\f\t@b', 0x4, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}, 0x100000}, 0x1c) shutdown(r6, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) fchown(r4, 0x0, r7) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x0, 0x0, &(0x7f0000011f9d)}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x102000004) signalfd(r3, &(0x7f0000000240)={0x9}, 0x8) [ 229.649869] binder: undelivered TRANSACTION_ERROR: 29201 [ 229.682124] binder: 16704:16712 got transaction with invalid data ptr [ 229.690475] binder: 16698:16701 transaction failed 29201/-14, size 64-8 line 2982 2018/04/21 01:41:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000008000)={&(0x7f0000cceff4)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000731ef4)={0x20, 0x27, 0x829, 0x0, 0x0, {0x11}, [@nested={0xc, 0x9, [@typed={0x8, 0x1, @ipv4=@broadcast=0xffffffff}]}]}, 0x20}, 0x1}, 0x0) 2018/04/21 01:41:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000248ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045439, &(0x7f0000000000)) [ 229.735837] binder: 16704:16712 transaction failed 29201/-14, size 64-8 line 2982 [ 229.780311] binder: BINDER_SET_CONTEXT_MGR already set [ 229.804580] binder: 16698:16701 ioctl 40046207 0 returned -16 [ 229.814667] binder: BINDER_SET_CONTEXT_MGR already set [ 229.820950] binder: 16704:16712 ioctl 40046207 0 returned -16 [ 229.854071] binder: undelivered TRANSACTION_ERROR: 29201 [ 229.860911] binder: BINDER_SET_CONTEXT_MGR already set [ 229.871851] binder: 16719:16724 ioctl 40046207 0 returned -16 [ 229.875573] binder: undelivered TRANSACTION_ERROR: 29201 [ 229.887744] binder: 16719:16724 transaction failed 29189/-22, size 64-8 line 2848 [ 229.983671] binder: undelivered TRANSACTION_ERROR: 29189 [ 230.406908] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/21 01:41:47 executing program 7: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xbb, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000e4083972d0f555ab75cfe0b40d8490ff88a44ae7fdb413c5994b763332c0422ce20cc1b1e654327d231d765a7bdbb20b36c775b09f96c72c8656c6db70b955fee75270a85849df5de22d3b5373b4daff817b871851a01a848cea2c7c08b7509494639e3e5b5e253bcce544dc2d1784eda01abd1e8dbf712e7b6a0612f7ee1618e6d8e4b213a494"], 0x6, 0x0, &(0x7f0000000280)="0e41e97e0000"}) r1 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x200000000, 0x42442) ioctl$LOOP_SET_STATUS(r1, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r2 = socket(0x0, 0x0, 0x0) write(r2, &(0x7f00000001c0), 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000004c0)=0x203, 0xfffffffffffffe8f) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x4) getpid() r3 = syz_open_dev$loop(&(0x7f0000000640)='/dev/loop#\x00', 0xfffffffffffffc01, 0x86) r4 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f00004fe000)=0x101, 0x4) recvmmsg(r5, &(0x7f00000096c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/245, 0xf5}, {&(0x7f0000000280)=""/59, 0x3b}], 0x2, &(0x7f0000000300)=""/175, 0xaf, 0x2}, 0x6}, {{&(0x7f00000003c0)=@ethernet, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000440)=""/67, 0x43}, {&(0x7f00000014c0)=""/12, 0xc}, {&(0x7f0000001500)=""/71, 0x47}, {&(0x7f0000001580)=""/125, 0x7d}, {&(0x7f0000001600)}, {&(0x7f00000016c0)=""/148, 0x94}], 0x6, &(0x7f0000001880)=""/4096, 0x1000, 0x100000001}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002a00)=""/236, 0xec}, {&(0x7f0000002b80)=""/69, 0x45}, {&(0x7f0000002d00)=""/98, 0x62}], 0x3, &(0x7f0000002e40)=""/93, 0x5d}}, {{&(0x7f0000002ec0)=@nl=@unspec, 0x80, &(0x7f0000004040), 0x0, &(0x7f0000004080)=""/8, 0x8}}, {{&(0x7f00000040c0)=@generic, 0x80, &(0x7f00000041c0), 0x0, &(0x7f0000004200)=""/232, 0xe8, 0x97f}, 0x80}, {{&(0x7f0000004300)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000006780)=[{&(0x7f0000004440)=""/155, 0x9b}, {&(0x7f0000004600)=""/4096, 0x1000}, {&(0x7f0000006680)=""/240, 0xf0}], 0x3, &(0x7f0000006800)=""/212, 0xd4, 0xffffffff}}, {{&(0x7f0000006900)=@in6={0x0, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000007d00)=[{&(0x7f0000006a00)=""/228, 0xe4}, {&(0x7f0000006b00)=""/4096, 0x1000}], 0x2, &(0x7f0000007d80)=""/4096, 0x1000}, 0xb53}], 0x7, 0x0, 0x0) listen(r6, 0x0) sendto$inet6(r5, &(0x7f00000000c0)='\f\t@b', 0x4, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}, 0x100000}, 0x1c) shutdown(r6, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) fchown(r4, 0x0, r7) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x0, 0x0, &(0x7f0000011f9d)}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x102000004) signalfd(r3, &(0x7f0000000240)={0x9}, 0x8) 2018/04/21 01:41:47 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x74, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @broadcast=0xffffffff}}}}, &(0x7f0000000000)=0xb0) 2018/04/21 01:41:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xbb, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000e4083972d0f555ab75cfe0b40d8490ff88a44ae7fdb413c5994b763332c0422ce20cc1b1e654327d231d765a7bdbb20b36c775b09f96c72c8656c6db70b955fee75270a85849df5de22d3b5373b4daff817b871851a01a848cea2c7c08b7509494639e3e5b5e253bcce544dc2d1784eda01abd1e8dbf712e7b6a0612f7ee1618e6d8e4b213a494"], 0x6, 0x0, &(0x7f0000000280)="0e41e97e0000"}) r1 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x200000000, 0x42442) ioctl$LOOP_SET_STATUS(r1, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r2 = socket(0x0, 0x0, 0x0) write(r2, &(0x7f00000001c0), 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000004c0)=0x203, 0xfffffffffffffe8f) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x4) getpid() r3 = syz_open_dev$loop(&(0x7f0000000640)='/dev/loop#\x00', 0xfffffffffffffc01, 0x86) r4 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f00004fe000)=0x101, 0x4) recvmmsg(r5, &(0x7f00000096c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/245, 0xf5}, {&(0x7f0000000280)=""/59, 0x3b}], 0x2, &(0x7f0000000300)=""/175, 0xaf, 0x2}, 0x6}, {{&(0x7f00000003c0)=@ethernet, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000440)=""/67, 0x43}, {&(0x7f00000014c0)=""/12, 0xc}, {&(0x7f0000001500)=""/71, 0x47}, {&(0x7f0000001580)=""/125, 0x7d}, {&(0x7f0000001600)}, {&(0x7f00000016c0)=""/148, 0x94}], 0x6, &(0x7f0000001880)=""/4096, 0x1000, 0x100000001}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002a00)=""/236, 0xec}, {&(0x7f0000002b80)=""/69, 0x45}, {&(0x7f0000002d00)=""/98, 0x62}], 0x3, &(0x7f0000002e40)=""/93, 0x5d}}, {{&(0x7f0000002ec0)=@nl=@unspec, 0x80, &(0x7f0000004040), 0x0, &(0x7f0000004080)=""/8, 0x8}}, {{&(0x7f00000040c0)=@generic, 0x80, &(0x7f00000041c0), 0x0, &(0x7f0000004200)=""/232, 0xe8, 0x97f}, 0x80}, {{&(0x7f0000004300)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000006780)=[{&(0x7f0000004440)=""/155, 0x9b}, {&(0x7f0000004600)=""/4096, 0x1000}, {&(0x7f0000006680)=""/240, 0xf0}], 0x3, &(0x7f0000006800)=""/212, 0xd4, 0xffffffff}}, {{&(0x7f0000006900)=@in6={0x0, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000007d00)=[{&(0x7f0000006a00)=""/228, 0xe4}, {&(0x7f0000006b00)=""/4096, 0x1000}], 0x2, &(0x7f0000007d80)=""/4096, 0x1000}, 0xb53}], 0x7, 0x0, 0x0) listen(r6, 0x0) sendto$inet6(r5, &(0x7f00000000c0)='\f\t@b', 0x4, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}, 0x100000}, 0x1c) shutdown(r6, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) fchown(r4, 0x0, r7) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x0, 0x0, &(0x7f0000011f9d)}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x102000004) signalfd(r3, &(0x7f0000000240)={0x9}, 0x8) 2018/04/21 01:41:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xbb, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000e4083972d0f555ab75cfe0b40d8490ff88a44ae7fdb413c5994b763332c0422ce20cc1b1e654327d231d765a7bdbb20b36c775b09f96c72c8656c6db70b955fee75270a85849df5de22d3b5373b4daff817b871851a01a848cea2c7c08b7509494639e3e5b5e253bcce544dc2d1784eda01abd1e8dbf712e7b6a0612f7ee1618e6d8e4b213a494"], 0x6, 0x0, &(0x7f0000000280)="0e41e97e0000"}) r1 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x200000000, 0x42442) ioctl$LOOP_SET_STATUS(r1, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r2 = socket(0x0, 0x0, 0x0) write(r2, &(0x7f00000001c0), 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000004c0)=0x203, 0xfffffffffffffe8f) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x4) getpid() r3 = syz_open_dev$loop(&(0x7f0000000640)='/dev/loop#\x00', 0xfffffffffffffc01, 0x86) r4 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f00004fe000)=0x101, 0x4) recvmmsg(r5, &(0x7f00000096c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/245, 0xf5}, {&(0x7f0000000280)=""/59, 0x3b}], 0x2, &(0x7f0000000300)=""/175, 0xaf, 0x2}, 0x6}, {{&(0x7f00000003c0)=@ethernet, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000440)=""/67, 0x43}, {&(0x7f00000014c0)=""/12, 0xc}, {&(0x7f0000001500)=""/71, 0x47}, {&(0x7f0000001580)=""/125, 0x7d}, {&(0x7f0000001600)}, {&(0x7f00000016c0)=""/148, 0x94}], 0x6, &(0x7f0000001880)=""/4096, 0x1000, 0x100000001}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002a00)=""/236, 0xec}, {&(0x7f0000002b80)=""/69, 0x45}, {&(0x7f0000002d00)=""/98, 0x62}], 0x3, &(0x7f0000002e40)=""/93, 0x5d}}, {{&(0x7f0000002ec0)=@nl=@unspec, 0x80, &(0x7f0000004040), 0x0, &(0x7f0000004080)=""/8, 0x8}}, {{&(0x7f00000040c0)=@generic, 0x80, &(0x7f00000041c0), 0x0, &(0x7f0000004200)=""/232, 0xe8, 0x97f}, 0x80}, {{&(0x7f0000004300)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000006780)=[{&(0x7f0000004440)=""/155, 0x9b}, {&(0x7f0000004600)=""/4096, 0x1000}, {&(0x7f0000006680)=""/240, 0xf0}], 0x3, &(0x7f0000006800)=""/212, 0xd4, 0xffffffff}}, {{&(0x7f0000006900)=@in6={0x0, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000007d00)=[{&(0x7f0000006a00)=""/228, 0xe4}, {&(0x7f0000006b00)=""/4096, 0x1000}], 0x2, &(0x7f0000007d80)=""/4096, 0x1000}, 0xb53}], 0x7, 0x0, 0x0) listen(r6, 0x0) sendto$inet6(r5, &(0x7f00000000c0)='\f\t@b', 0x4, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}, 0x100000}, 0x1c) shutdown(r6, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) fchown(r4, 0x0, r7) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x0, 0x0, &(0x7f0000011f9d)}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x102000004) signalfd(r3, &(0x7f0000000240)={0x9}, 0x8) 2018/04/21 01:41:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000248ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045439, &(0x7f0000000000)) 2018/04/21 01:41:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000008000)={&(0x7f0000cceff4)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000731ef4)={0x20, 0x27, 0x829, 0x0, 0x0, {0x11}, [@nested={0xc, 0x9, [@typed={0x8, 0x1, @ipv4=@broadcast=0xffffffff}]}]}, 0x20}, 0x1}, 0x0) 2018/04/21 01:41:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xbb, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000e4083972d0f555ab75cfe0b40d8490ff88a44ae7fdb413c5994b763332c0422ce20cc1b1e654327d231d765a7bdbb20b36c775b09f96c72c8656c6db70b955fee75270a85849df5de22d3b5373b4daff817b871851a01a848cea2c7c08b7509494639e3e5b5e253bcce544dc2d1784eda01abd1e8dbf712e7b6a0612f7ee1618e6d8e4b213a494"], 0x6, 0x0, &(0x7f0000000280)="0e41e97e0000"}) r1 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x200000000, 0x42442) ioctl$LOOP_SET_STATUS(r1, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r2 = socket(0x0, 0x0, 0x0) write(r2, &(0x7f00000001c0), 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000004c0)=0x203, 0xfffffffffffffe8f) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x4) getpid() r3 = syz_open_dev$loop(&(0x7f0000000640)='/dev/loop#\x00', 0xfffffffffffffc01, 0x86) r4 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f00004fe000)=0x101, 0x4) recvmmsg(r5, &(0x7f00000096c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/245, 0xf5}, {&(0x7f0000000280)=""/59, 0x3b}], 0x2, &(0x7f0000000300)=""/175, 0xaf, 0x2}, 0x6}, {{&(0x7f00000003c0)=@ethernet, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000440)=""/67, 0x43}, {&(0x7f00000014c0)=""/12, 0xc}, {&(0x7f0000001500)=""/71, 0x47}, {&(0x7f0000001580)=""/125, 0x7d}, {&(0x7f0000001600)}, {&(0x7f00000016c0)=""/148, 0x94}], 0x6, &(0x7f0000001880)=""/4096, 0x1000, 0x100000001}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002a00)=""/236, 0xec}, {&(0x7f0000002b80)=""/69, 0x45}, {&(0x7f0000002d00)=""/98, 0x62}], 0x3, &(0x7f0000002e40)=""/93, 0x5d}}, {{&(0x7f0000002ec0)=@nl=@unspec, 0x80, &(0x7f0000004040), 0x0, &(0x7f0000004080)=""/8, 0x8}}, {{&(0x7f00000040c0)=@generic, 0x80, &(0x7f00000041c0), 0x0, &(0x7f0000004200)=""/232, 0xe8, 0x97f}, 0x80}, {{&(0x7f0000004300)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000006780)=[{&(0x7f0000004440)=""/155, 0x9b}, {&(0x7f0000004600)=""/4096, 0x1000}, {&(0x7f0000006680)=""/240, 0xf0}], 0x3, &(0x7f0000006800)=""/212, 0xd4, 0xffffffff}}, {{&(0x7f0000006900)=@in6={0x0, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000007d00)=[{&(0x7f0000006a00)=""/228, 0xe4}, {&(0x7f0000006b00)=""/4096, 0x1000}], 0x2, &(0x7f0000007d80)=""/4096, 0x1000}, 0xb53}], 0x7, 0x0, 0x0) listen(r6, 0x0) sendto$inet6(r5, &(0x7f00000000c0)='\f\t@b', 0x4, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}, 0x100000}, 0x1c) shutdown(r6, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) fchown(r4, 0x0, r7) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x0, 0x0, &(0x7f0000011f9d)}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x102000004) signalfd(r3, &(0x7f0000000240)={0x9}, 0x8) 2018/04/21 01:41:47 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000001c0)=@req={0x10001}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x27, 0x331, 0x0, 0x0, {0x10}}, 0x14}, 0x1}, 0x0) [ 230.867784] binder: BINDER_SET_CONTEXT_MGR already set [ 230.873364] binder: 16745:16754 got transaction with invalid data ptr [ 230.873903] binder: BINDER_SET_CONTEXT_MGR already set [ 230.885789] binder: BINDER_SET_CONTEXT_MGR already set [ 230.886556] binder: 16749:16756 ioctl 40046207 0 returned -16 [ 230.897773] binder: 16751:16755 ioctl 40046207 0 returned -16 [ 230.898982] binder: 16745:16754 transaction failed 29201/-14, size 64-8 line 2982 2018/04/21 01:41:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000008000)={&(0x7f0000cceff4)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000731ef4)={0x20, 0x27, 0x829, 0x0, 0x0, {0x11}, [@nested={0xc, 0x9, [@typed={0x8, 0x1, @ipv4=@broadcast=0xffffffff}]}]}, 0x20}, 0x1}, 0x0) [ 230.917183] binder: 16748:16757 ioctl 40046207 0 returned -16 [ 230.919442] binder: 16749:16756 got transaction with invalid data ptr [ 230.938511] binder: 16748:16757 got transaction with invalid data ptr [ 230.944091] binder: 16751:16755 got transaction with invalid data ptr [ 230.945583] binder: 16749:16756 transaction failed 29201/-14, size 64-8 line 2982 [ 230.952647] binder: 16751:16755 transaction failed 29201/-14, size 64-8 line 2982 2018/04/21 01:41:47 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000001c0)=@req={0x10001}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x27, 0x331, 0x0, 0x0, {0x10}}, 0x14}, 0x1}, 0x0) 2018/04/21 01:41:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000248ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045439, &(0x7f0000000000)) [ 230.960242] binder: 16748:16757 transaction failed 29201/-14, size 64-8 line 2982 [ 231.029663] binder: BINDER_SET_CONTEXT_MGR already set [ 231.040751] binder: 16749:16756 ioctl 40046207 0 returned -16 [ 231.075286] binder: BINDER_SET_CONTEXT_MGR already set [ 231.090742] binder: BINDER_SET_CONTEXT_MGR already set [ 231.100289] binder: 16751:16755 ioctl 40046207 0 returned -16 [ 231.105892] binder: 16745:16754 ioctl 40046207 0 returned -16 2018/04/21 01:41:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xbb, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000e4083972d0f555ab75cfe0b40d8490ff88a44ae7fdb413c5994b763332c0422ce20cc1b1e654327d231d765a7bdbb20b36c775b09f96c72c8656c6db70b955fee75270a85849df5de22d3b5373b4daff817b871851a01a848cea2c7c08b7509494639e3e5b5e253bcce544dc2d1784eda01abd1e8dbf712e7b6a0612f7ee1618e6d8e4b213a494"], 0x6, 0x0, &(0x7f0000000280)="0e41e97e0000"}) r1 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x200000000, 0x42442) ioctl$LOOP_SET_STATUS(r1, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r2 = socket(0x0, 0x0, 0x0) write(r2, &(0x7f00000001c0), 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000004c0)=0x203, 0xfffffffffffffe8f) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x4) getpid() r3 = syz_open_dev$loop(&(0x7f0000000640)='/dev/loop#\x00', 0xfffffffffffffc01, 0x86) r4 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f00004fe000)=0x101, 0x4) recvmmsg(r5, &(0x7f00000096c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/245, 0xf5}, {&(0x7f0000000280)=""/59, 0x3b}], 0x2, &(0x7f0000000300)=""/175, 0xaf, 0x2}, 0x6}, {{&(0x7f00000003c0)=@ethernet, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000440)=""/67, 0x43}, {&(0x7f00000014c0)=""/12, 0xc}, {&(0x7f0000001500)=""/71, 0x47}, {&(0x7f0000001580)=""/125, 0x7d}, {&(0x7f0000001600)}, {&(0x7f00000016c0)=""/148, 0x94}], 0x6, &(0x7f0000001880)=""/4096, 0x1000, 0x100000001}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002a00)=""/236, 0xec}, {&(0x7f0000002b80)=""/69, 0x45}, {&(0x7f0000002d00)=""/98, 0x62}], 0x3, &(0x7f0000002e40)=""/93, 0x5d}}, {{&(0x7f0000002ec0)=@nl=@unspec, 0x80, &(0x7f0000004040), 0x0, &(0x7f0000004080)=""/8, 0x8}}, {{&(0x7f00000040c0)=@generic, 0x80, &(0x7f00000041c0), 0x0, &(0x7f0000004200)=""/232, 0xe8, 0x97f}, 0x80}, {{&(0x7f0000004300)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000006780)=[{&(0x7f0000004440)=""/155, 0x9b}, {&(0x7f0000004600)=""/4096, 0x1000}, {&(0x7f0000006680)=""/240, 0xf0}], 0x3, &(0x7f0000006800)=""/212, 0xd4, 0xffffffff}}, {{&(0x7f0000006900)=@in6={0x0, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000007d00)=[{&(0x7f0000006a00)=""/228, 0xe4}, {&(0x7f0000006b00)=""/4096, 0x1000}], 0x2, &(0x7f0000007d80)=""/4096, 0x1000}, 0xb53}], 0x7, 0x0, 0x0) listen(r6, 0x0) sendto$inet6(r5, &(0x7f00000000c0)='\f\t@b', 0x4, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}, 0x100000}, 0x1c) shutdown(r6, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) fchown(r4, 0x0, r7) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x0, 0x0, &(0x7f0000011f9d)}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x102000004) signalfd(r3, &(0x7f0000000240)={0x9}, 0x8) 2018/04/21 01:41:47 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x6c, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @broadcast=0xffffffff}}}}, &(0x7f0000000000)=0xb0) [ 231.132949] binder: undelivered TRANSACTION_ERROR: 29201 [ 231.167219] binder: undelivered TRANSACTION_ERROR: 29201 [ 231.217054] binder: undelivered TRANSACTION_ERROR: 29201 [ 231.263590] binder: 16778:16782 got transaction with invalid data ptr [ 231.295742] binder: 16778:16782 transaction failed 29201/-14, size 64-8 line 2982 [ 231.326982] binder: BINDER_SET_CONTEXT_MGR already set [ 231.332544] binder: 16778:16782 ioctl 40046207 0 returned -16 [ 231.352889] binder: undelivered TRANSACTION_ERROR: 29201 [ 231.809451] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/21 01:41:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000001c0)=@req={0x10001}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x27, 0x331, 0x0, 0x0, {0x10}}, 0x14}, 0x1}, 0x0) 2018/04/21 01:41:49 executing program 3: r0 = socket(0x10, 0x80002, 0x0) connect$netlink(r0, &(0x7f0000000300)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@getneigh={0x14, 0x1e, 0x1}, 0x14}, 0x1}, 0x0) 2018/04/21 01:41:49 executing program 7: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xbb, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000e4083972d0f555ab75cfe0b40d8490ff88a44ae7fdb413c5994b763332c0422ce20cc1b1e654327d231d765a7bdbb20b36c775b09f96c72c8656c6db70b955fee75270a85849df5de22d3b5373b4daff817b871851a01a848cea2c7c08b7509494639e3e5b5e253bcce544dc2d1784eda01abd1e8dbf712e7b6a0612f7ee1618e6d8e4b213a494"], 0x6, 0x0, &(0x7f0000000280)="0e41e97e0000"}) r1 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x200000000, 0x42442) ioctl$LOOP_SET_STATUS(r1, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r2 = socket(0x0, 0x0, 0x0) write(r2, &(0x7f00000001c0), 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000004c0)=0x203, 0xfffffffffffffe8f) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x4) getpid() r3 = syz_open_dev$loop(&(0x7f0000000640)='/dev/loop#\x00', 0xfffffffffffffc01, 0x86) r4 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f00004fe000)=0x101, 0x4) recvmmsg(r5, &(0x7f00000096c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/245, 0xf5}, {&(0x7f0000000280)=""/59, 0x3b}], 0x2, &(0x7f0000000300)=""/175, 0xaf, 0x2}, 0x6}, {{&(0x7f00000003c0)=@ethernet, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000440)=""/67, 0x43}, {&(0x7f00000014c0)=""/12, 0xc}, {&(0x7f0000001500)=""/71, 0x47}, {&(0x7f0000001580)=""/125, 0x7d}, {&(0x7f0000001600)}, {&(0x7f00000016c0)=""/148, 0x94}], 0x6, &(0x7f0000001880)=""/4096, 0x1000, 0x100000001}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002a00)=""/236, 0xec}, {&(0x7f0000002b80)=""/69, 0x45}, {&(0x7f0000002d00)=""/98, 0x62}], 0x3, &(0x7f0000002e40)=""/93, 0x5d}}, {{&(0x7f0000002ec0)=@nl=@unspec, 0x80, &(0x7f0000004040), 0x0, &(0x7f0000004080)=""/8, 0x8}}, {{&(0x7f00000040c0)=@generic, 0x80, &(0x7f00000041c0), 0x0, &(0x7f0000004200)=""/232, 0xe8, 0x97f}, 0x80}, {{&(0x7f0000004300)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000006780)=[{&(0x7f0000004440)=""/155, 0x9b}, {&(0x7f0000004600)=""/4096, 0x1000}, {&(0x7f0000006680)=""/240, 0xf0}], 0x3, &(0x7f0000006800)=""/212, 0xd4, 0xffffffff}}, {{&(0x7f0000006900)=@in6={0x0, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000007d00)=[{&(0x7f0000006a00)=""/228, 0xe4}, {&(0x7f0000006b00)=""/4096, 0x1000}], 0x2, &(0x7f0000007d80)=""/4096, 0x1000}, 0xb53}], 0x7, 0x0, 0x0) listen(r6, 0x0) sendto$inet6(r5, &(0x7f00000000c0)='\f\t@b', 0x4, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}, 0x100000}, 0x1c) shutdown(r6, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) fchown(r4, 0x0, r7) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x0, 0x0, &(0x7f0000011f9d)}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x102000004) signalfd(r3, &(0x7f0000000240)={0x9}, 0x8) 2018/04/21 01:41:49 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'bond0\x00'}}, 0x1e) write(r0, &(0x7f0000000480), 0x5ea) 2018/04/21 01:41:49 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df821728d598bf6c2c702ff314", 0x20) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f000000a700)=[{{&(0x7f0000000400)=@nl=@proc, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000001500)=""/142, 0x8e}}, {{0x0, 0x0, &(0x7f000000a680)}}], 0x2, 0x0, 0x0) 2018/04/21 01:41:49 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x6c, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @broadcast=0xffffffff}}}}, &(0x7f0000000000)=0xb0) 2018/04/21 01:41:49 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x74, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @broadcast=0xffffffff}}}}, &(0x7f0000000000)=0xb0) 2018/04/21 01:41:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xbb, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000e4083972d0f555ab75cfe0b40d8490ff88a44ae7fdb413c5994b763332c0422ce20cc1b1e654327d231d765a7bdbb20b36c775b09f96c72c8656c6db70b955fee75270a85849df5de22d3b5373b4daff817b871851a01a848cea2c7c08b7509494639e3e5b5e253bcce544dc2d1784eda01abd1e8dbf712e7b6a0612f7ee1618e6d8e4b213a494"], 0x6, 0x0, &(0x7f0000000280)="0e41e97e0000"}) r1 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x200000000, 0x42442) ioctl$LOOP_SET_STATUS(r1, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r2 = socket(0x0, 0x0, 0x0) write(r2, &(0x7f00000001c0), 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000004c0)=0x203, 0xfffffffffffffe8f) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x4) getpid() r3 = syz_open_dev$loop(&(0x7f0000000640)='/dev/loop#\x00', 0xfffffffffffffc01, 0x86) r4 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f00004fe000)=0x101, 0x4) recvmmsg(r5, &(0x7f00000096c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/245, 0xf5}, {&(0x7f0000000280)=""/59, 0x3b}], 0x2, &(0x7f0000000300)=""/175, 0xaf, 0x2}, 0x6}, {{&(0x7f00000003c0)=@ethernet, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000440)=""/67, 0x43}, {&(0x7f00000014c0)=""/12, 0xc}, {&(0x7f0000001500)=""/71, 0x47}, {&(0x7f0000001580)=""/125, 0x7d}, {&(0x7f0000001600)}, {&(0x7f00000016c0)=""/148, 0x94}], 0x6, &(0x7f0000001880)=""/4096, 0x1000, 0x100000001}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002a00)=""/236, 0xec}, {&(0x7f0000002b80)=""/69, 0x45}, {&(0x7f0000002d00)=""/98, 0x62}], 0x3, &(0x7f0000002e40)=""/93, 0x5d}}, {{&(0x7f0000002ec0)=@nl=@unspec, 0x80, &(0x7f0000004040), 0x0, &(0x7f0000004080)=""/8, 0x8}}, {{&(0x7f00000040c0)=@generic, 0x80, &(0x7f00000041c0), 0x0, &(0x7f0000004200)=""/232, 0xe8, 0x97f}, 0x80}, {{&(0x7f0000004300)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000006780)=[{&(0x7f0000004440)=""/155, 0x9b}, {&(0x7f0000004600)=""/4096, 0x1000}, {&(0x7f0000006680)=""/240, 0xf0}], 0x3, &(0x7f0000006800)=""/212, 0xd4, 0xffffffff}}, {{&(0x7f0000006900)=@in6={0x0, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000007d00)=[{&(0x7f0000006a00)=""/228, 0xe4}, {&(0x7f0000006b00)=""/4096, 0x1000}], 0x2, &(0x7f0000007d80)=""/4096, 0x1000}, 0xb53}], 0x7, 0x0, 0x0) listen(r6, 0x0) sendto$inet6(r5, &(0x7f00000000c0)='\f\t@b', 0x4, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}, 0x100000}, 0x1c) shutdown(r6, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) fchown(r4, 0x0, r7) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x0, 0x0, &(0x7f0000011f9d)}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x102000004) signalfd(r3, &(0x7f0000000240)={0x9}, 0x8) 2018/04/21 01:41:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000001c0)=@req={0x10001}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x27, 0x331, 0x0, 0x0, {0x10}}, 0x14}, 0x1}, 0x0) [ 232.314166] binder: 16805:16812 got transaction with invalid data ptr [ 232.321312] binder: BINDER_SET_CONTEXT_MGR already set [ 232.322683] binder: 16805:16812 transaction failed 29201/-14, size 64-8 line 2982 [ 232.333446] binder: 16807:16817 ioctl 40046207 0 returned -16 2018/04/21 01:41:49 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'bond0\x00'}}, 0x1e) write(r0, &(0x7f0000000480), 0x5ea) 2018/04/21 01:41:49 executing program 3: r0 = socket(0x10, 0x80002, 0x0) connect$netlink(r0, &(0x7f0000000300)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@getneigh={0x14, 0x1e, 0x1}, 0x14}, 0x1}, 0x0) [ 232.371101] binder: 16807:16817 got transaction with invalid data ptr [ 232.395715] binder: 16807:16817 transaction failed 29201/-14, size 64-8 line 2982 [ 232.400838] binder: BINDER_SET_CONTEXT_MGR already set [ 232.409945] binder: 16805:16812 ioctl 40046207 0 returned -16 2018/04/21 01:41:49 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df821728d598bf6c2c702ff314", 0x20) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f000000a700)=[{{&(0x7f0000000400)=@nl=@proc, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000001500)=""/142, 0x8e}}, {{0x0, 0x0, &(0x7f000000a680)}}], 0x2, 0x0, 0x0) 2018/04/21 01:41:49 executing program 7: pipe(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="a2", 0x1}], 0x1, 0x0) close(r1) syz_mount_image$vfat(&(0x7f0000001800)='vfat\x00', &(0x7f0000001840)='./file0\x00', 0x0, 0xaaaaaaaaaaaab46, &(0x7f0000000440)=[{&(0x7f0000000380), 0xffffffffffffff5b}], 0x0, &(0x7f00000000c0)=ANY=[]) fallocate(r1, 0x3, 0x0, 0x2841) [ 232.468970] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/21 01:41:49 executing program 3: r0 = socket(0x10, 0x80002, 0x0) connect$netlink(r0, &(0x7f0000000300)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@getneigh={0x14, 0x1e, 0x1}, 0x14}, 0x1}, 0x0) 2018/04/21 01:41:49 executing program 6: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000086fff4)) r3 = getpgrp(0xffffffffffffffff) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f0000000000)={r2, r1, 0x1000000}) 2018/04/21 01:41:49 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'bond0\x00'}}, 0x1e) write(r0, &(0x7f0000000480), 0x5ea) 2018/04/21 01:41:49 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df821728d598bf6c2c702ff314", 0x20) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f000000a700)=[{{&(0x7f0000000400)=@nl=@proc, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000001500)=""/142, 0x8e}}, {{0x0, 0x0, &(0x7f000000a680)}}], 0x2, 0x0, 0x0) 2018/04/21 01:41:49 executing program 3: r0 = socket(0x10, 0x80002, 0x0) connect$netlink(r0, &(0x7f0000000300)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@getneigh={0x14, 0x1e, 0x1}, 0x14}, 0x1}, 0x0) 2018/04/21 01:41:49 executing program 6: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000086fff4)) r3 = getpgrp(0xffffffffffffffff) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f0000000000)={r2, r1, 0x1000000}) 2018/04/21 01:41:49 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'bond0\x00'}}, 0x1e) write(r0, &(0x7f0000000480), 0x5ea) 2018/04/21 01:41:49 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000180)=0x24) [ 233.249691] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/21 01:41:50 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x6c, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @broadcast=0xffffffff}}}}, &(0x7f0000000000)=0xb0) 2018/04/21 01:41:50 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df821728d598bf6c2c702ff314", 0x20) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f000000a700)=[{{&(0x7f0000000400)=@nl=@proc, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000001500)=""/142, 0x8e}}, {{0x0, 0x0, &(0x7f000000a680)}}], 0x2, 0x0, 0x0) 2018/04/21 01:41:50 executing program 6: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000086fff4)) r3 = getpgrp(0xffffffffffffffff) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f0000000000)={r2, r1, 0x1000000}) 2018/04/21 01:41:50 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000380)="ad56b6c5820faeb9952991765a1f9922007c1a56534c90c2", 0x18) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000477000)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=@can={{}, 0x0, 0x0, 0x0, 0x0, "b2ebe2c0125652c7"}, 0x10}, 0x1}, 0x0) recvmmsg(r1, &(0x7f0000003340)=[{{&(0x7f00000000c0)=@sco, 0x80, &(0x7f0000000800), 0x0, &(0x7f0000000140)=""/94, 0x5e}}, {{&(0x7f0000002f40)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000003200)=[{&(0x7f0000003100)=""/226, 0xe2}], 0x1, &(0x7f0000000440)=""/239, 0xef}}], 0x2, 0x0, 0x0) 2018/04/21 01:41:50 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000180)=0x24) 2018/04/21 01:41:50 executing program 4: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000b9c000)) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000140)=@ipx, 0x10, &(0x7f0000002000)=[{&(0x7f0000000000)=""/232, 0xe8}, {&(0x7f000000a000)=""/181, 0x17d}], 0x2, &(0x7f000000c000)=""/105, 0x69}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x3, 0x259, &(0x7f0000386000)=""/195}, 0x48) 2018/04/21 01:41:50 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x74, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @broadcast=0xffffffff}}}}, &(0x7f0000000000)=0xb0) 2018/04/21 01:41:51 executing program 7: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x4000001, 0x1, &(0x7f00000001c0)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000540)=ANY=[]) r0 = open$dir(&(0x7f0000000040)='./file0/file0\x00', 0x110ffd, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x800, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x80047210, &(0x7f00000000c0)) 2018/04/21 01:41:51 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x6c, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @broadcast=0xffffffff}}}}, &(0x7f0000000000)=0xb0) 2018/04/21 01:41:51 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x6000, 0x0, 0x0, 0x0, 0x0, 0x2200081) syz_fuseblk_mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/21 01:41:51 executing program 6: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000086fff4)) r3 = getpgrp(0xffffffffffffffff) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f0000000000)={r2, r1, 0x1000000}) 2018/04/21 01:41:51 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000180)=0x24) 2018/04/21 01:41:51 executing program 4: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000b9c000)) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000140)=@ipx, 0x10, &(0x7f0000002000)=[{&(0x7f0000000000)=""/232, 0xe8}, {&(0x7f000000a000)=""/181, 0x17d}], 0x2, &(0x7f000000c000)=""/105, 0x69}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x3, 0x259, &(0x7f0000386000)=""/195}, 0x48) 2018/04/21 01:41:51 executing program 0: socket$inet6(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000101000)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x2, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback={0x0, 0x1}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}}}}}}}}, 0x0) 2018/04/21 01:41:51 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000380)="ad56b6c5820faeb9952991765a1f9922007c1a56534c90c2", 0x18) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000477000)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=@can={{}, 0x0, 0x0, 0x0, 0x0, "b2ebe2c0125652c7"}, 0x10}, 0x1}, 0x0) recvmmsg(r1, &(0x7f0000003340)=[{{&(0x7f00000000c0)=@sco, 0x80, &(0x7f0000000800), 0x0, &(0x7f0000000140)=""/94, 0x5e}}, {{&(0x7f0000002f40)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000003200)=[{&(0x7f0000003100)=""/226, 0xe2}], 0x1, &(0x7f0000000440)=""/239, 0xef}}], 0x2, 0x0, 0x0) 2018/04/21 01:41:51 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000180)=0x24) 2018/04/21 01:41:51 executing program 0: socket$inet6(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000101000)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x2, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback={0x0, 0x1}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}}}}}}}}, 0x0) 2018/04/21 01:41:51 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000380)="ad56b6c5820faeb9952991765a1f9922007c1a56534c90c2", 0x18) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000477000)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=@can={{}, 0x0, 0x0, 0x0, 0x0, "b2ebe2c0125652c7"}, 0x10}, 0x1}, 0x0) recvmmsg(r1, &(0x7f0000003340)=[{{&(0x7f00000000c0)=@sco, 0x80, &(0x7f0000000800), 0x0, &(0x7f0000000140)=""/94, 0x5e}}, {{&(0x7f0000002f40)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000003200)=[{&(0x7f0000003100)=""/226, 0xe2}], 0x1, &(0x7f0000000440)=""/239, 0xef}}], 0x2, 0x0, 0x0) 2018/04/21 01:41:51 executing program 6: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 2018/04/21 01:41:51 executing program 4: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000b9c000)) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000140)=@ipx, 0x10, &(0x7f0000002000)=[{&(0x7f0000000000)=""/232, 0xe8}, {&(0x7f000000a000)=""/181, 0x17d}], 0x2, &(0x7f000000c000)=""/105, 0x69}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x3, 0x259, &(0x7f0000386000)=""/195}, 0x48) [ 234.873505] device bridge_slave_1 left promiscuous mode [ 234.879737] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.896587] device bridge_slave_0 left promiscuous mode [ 234.902163] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.947656] team0 (unregistering): Port device team_slave_1 removed [ 234.960121] team0 (unregistering): Port device team_slave_0 removed [ 234.972847] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 234.988165] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 235.019859] bond0 (unregistering): Released all slaves 2018/04/21 01:41:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000380)="ad56b6c5820faeb9952991765a1f9922007c1a56534c90c2", 0x18) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000477000)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=@can={{}, 0x0, 0x0, 0x0, 0x0, "b2ebe2c0125652c7"}, 0x10}, 0x1}, 0x0) recvmmsg(r1, &(0x7f0000003340)=[{{&(0x7f00000000c0)=@sco, 0x80, &(0x7f0000000800), 0x0, &(0x7f0000000140)=""/94, 0x5e}}, {{&(0x7f0000002f40)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000003200)=[{&(0x7f0000003100)=""/226, 0xe2}], 0x1, &(0x7f0000000440)=""/239, 0xef}}], 0x2, 0x0, 0x0) 2018/04/21 01:41:52 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x6000, 0x0, 0x0, 0x0, 0x0, 0x2200081) syz_fuseblk_mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/21 01:41:52 executing program 7: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x4000001, 0x1, &(0x7f00000001c0)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000540)=ANY=[]) r0 = open$dir(&(0x7f0000000040)='./file0/file0\x00', 0x110ffd, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x800, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x80047210, &(0x7f00000000c0)) 2018/04/21 01:41:52 executing program 6: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 2018/04/21 01:41:52 executing program 4: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000b9c000)) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000140)=@ipx, 0x10, &(0x7f0000002000)=[{&(0x7f0000000000)=""/232, 0xe8}, {&(0x7f000000a000)=""/181, 0x17d}], 0x2, &(0x7f000000c000)=""/105, 0x69}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x3, 0x259, &(0x7f0000386000)=""/195}, 0x48) 2018/04/21 01:41:52 executing program 0: socket$inet6(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000101000)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x2, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback={0x0, 0x1}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}}}}}}}}, 0x0) 2018/04/21 01:41:52 executing program 5: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x4000001, 0x1, &(0x7f00000001c0)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000540)=ANY=[]) r0 = open$dir(&(0x7f0000000040)='./file0/file0\x00', 0x110ffd, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x800, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x80047210, &(0x7f00000000c0)) 2018/04/21 01:41:52 executing program 3: mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) get_mempolicy(&(0x7f0000000240), &(0x7f0000000040), 0x7ffd, &(0x7f0000002000/0x4000)=nil, 0x2) 2018/04/21 01:41:52 executing program 3: mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) get_mempolicy(&(0x7f0000000240), &(0x7f0000000040), 0x7ffd, &(0x7f0000002000/0x4000)=nil, 0x2) 2018/04/21 01:41:52 executing program 0: socket$inet6(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000101000)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x2, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback={0x0, 0x1}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}}}}}}}}, 0x0) [ 237.020890] IPVS: ftp: loaded support on port[0] = 21 [ 237.372853] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.379259] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.386450] device bridge_slave_0 entered promiscuous mode [ 237.413328] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.419859] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.428133] device bridge_slave_1 entered promiscuous mode [ 237.455482] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 237.482610] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 237.556792] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 237.586673] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 237.696988] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 237.704527] team0: Port device team_slave_0 added [ 237.730223] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 237.737604] team0: Port device team_slave_1 added [ 237.763579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.792777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.821505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.849689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.084728] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.091135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.097814] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.104193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.939311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.034948] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 239.118349] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 239.124538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 239.134514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.213556] 8021q: adding VLAN 0 to HW filter on device team0 2018/04/21 01:41:56 executing program 6: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 2018/04/21 01:41:56 executing program 2: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) getgroups(0x1, &(0x7f00000000c0)=[r0]) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt(r1, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/21 01:41:56 executing program 3: mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) get_mempolicy(&(0x7f0000000240), &(0x7f0000000040), 0x7ffd, &(0x7f0000002000/0x4000)=nil, 0x2) 2018/04/21 01:41:56 executing program 7: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x4000001, 0x1, &(0x7f00000001c0)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000540)=ANY=[]) r0 = open$dir(&(0x7f0000000040)='./file0/file0\x00', 0x110ffd, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x800, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x80047210, &(0x7f00000000c0)) 2018/04/21 01:41:56 executing program 5: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x4000001, 0x1, &(0x7f00000001c0)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000540)=ANY=[]) r0 = open$dir(&(0x7f0000000040)='./file0/file0\x00', 0x110ffd, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x800, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x80047210, &(0x7f00000000c0)) 2018/04/21 01:41:56 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x6000, 0x0, 0x0, 0x0, 0x0, 0x2200081) syz_fuseblk_mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/21 01:41:56 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) r1 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x1102}) 2018/04/21 01:41:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'lo\x00', &(0x7f0000000080)=@ethtool_rxfh={0x47, 0x0, 0x0, 0x0, 0x0, "15d8e5"}}) 2018/04/21 01:41:56 executing program 3: mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) get_mempolicy(&(0x7f0000000240), &(0x7f0000000040), 0x7ffd, &(0x7f0000002000/0x4000)=nil, 0x2) 2018/04/21 01:41:56 executing program 6: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 2018/04/21 01:41:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'lo\x00', &(0x7f0000000080)=@ethtool_rxfh={0x47, 0x0, 0x0, 0x0, 0x0, "15d8e5"}}) 2018/04/21 01:41:56 executing program 2: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) getgroups(0x1, &(0x7f00000000c0)=[r0]) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt(r1, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/21 01:41:56 executing program 7: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x4000001, 0x1, &(0x7f00000001c0)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000540)=ANY=[]) r0 = open$dir(&(0x7f0000000040)='./file0/file0\x00', 0x110ffd, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x800, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x80047210, &(0x7f00000000c0)) 2018/04/21 01:41:56 executing program 5: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x4000001, 0x1, &(0x7f00000001c0)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000540)=ANY=[]) r0 = open$dir(&(0x7f0000000040)='./file0/file0\x00', 0x110ffd, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x800, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x80047210, &(0x7f00000000c0)) 2018/04/21 01:41:56 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000000000004000) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2), 0xfffffdaa) read(r1, &(0x7f0000000000)=""/126, 0xfffffeab) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000604ffc)) dup2(r1, r3) 2018/04/21 01:41:56 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) r1 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x1102}) 2018/04/21 01:41:56 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x6000, 0x0, 0x0, 0x0, 0x0, 0x2200081) syz_fuseblk_mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/21 01:41:56 executing program 2: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) getgroups(0x1, &(0x7f00000000c0)=[r0]) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt(r1, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) [ 240.231626] device bridge_slave_1 left promiscuous mode [ 240.237458] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.344610] IPVS: ftp: loaded support on port[0] = 21 [ 240.355937] device bridge_slave_0 left promiscuous mode [ 240.361751] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.415682] team0 (unregistering): Port device team_slave_1 removed [ 240.430529] team0 (unregistering): Port device team_slave_0 removed [ 240.442130] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 240.460563] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 240.499474] bond0 (unregistering): Released all slaves [ 241.183375] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.189872] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.198105] device bridge_slave_0 entered promiscuous mode [ 241.250432] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.256866] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.276888] device bridge_slave_1 entered promiscuous mode [ 241.323251] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 241.362888] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 241.479076] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 241.522588] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 241.697689] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 241.705705] team0: Port device team_slave_0 added [ 241.746712] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 241.754601] team0: Port device team_slave_1 added [ 241.789070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.831412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.864765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.893273] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 241.900493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.909060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.135808] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.142217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.148881] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.155378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.162745] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 242.912534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.008979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.092406] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 243.174867] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 243.181112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.188801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.271242] 8021q: adding VLAN 0 to HW filter on device team0 2018/04/21 01:42:00 executing program 5: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000240)={[{@utf8='utf8', 0x2c}]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000780)="2e2f66696c65302f66696c6530ff", 0x3fffa, 0x0) 2018/04/21 01:42:00 executing program 2: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) getgroups(0x1, &(0x7f00000000c0)=[r0]) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt(r1, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/21 01:42:00 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}}, @sadb_address={0x3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x88}, 0x1}, 0x0) 2018/04/21 01:42:00 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) r1 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x1102}) 2018/04/21 01:42:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'lo\x00', &(0x7f0000000080)=@ethtool_rxfh={0x47, 0x0, 0x0, 0x0, 0x0, "15d8e5"}}) 2018/04/21 01:42:00 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000000000004000) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2), 0xfffffdaa) read(r1, &(0x7f0000000000)=""/126, 0xfffffeab) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000604ffc)) dup2(r1, r3) 2018/04/21 01:42:00 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000000000004000) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2), 0xfffffdaa) read(r1, &(0x7f0000000000)=""/126, 0xfffffeab) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000604ffc)) dup2(r1, r3) 2018/04/21 01:42:00 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r0) 2018/04/21 01:42:00 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}, [], {0x95}}, &(0x7f00000000c0)='syzkaller\x00', 0x41, 0xc3, &(0x7f0000000300)=""/195}, 0x316) 2018/04/21 01:42:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'lo\x00', &(0x7f0000000080)=@ethtool_rxfh={0x47, 0x0, 0x0, 0x0, 0x0, "15d8e5"}}) 2018/04/21 01:42:00 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}}, @sadb_address={0x3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x88}, 0x1}, 0x0) [ 243.862017] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 243.881852] ntfs: (device loop5): parse_options(): Unrecognized mount option . 2018/04/21 01:42:00 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) r1 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x1102}) 2018/04/21 01:42:00 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}, [], {0x95}}, &(0x7f00000000c0)='syzkaller\x00', 0x41, 0xc3, &(0x7f0000000300)=""/195}, 0x316) 2018/04/21 01:42:00 executing program 5: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000240)={[{@utf8='utf8', 0x2c}]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000780)="2e2f66696c65302f66696c6530ff", 0x3fffa, 0x0) 2018/04/21 01:42:00 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000240)={[{@utf8='utf8', 0x2c}]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000780)="2e2f66696c65302f66696c6530ff", 0x3fffa, 0x0) 2018/04/21 01:42:00 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}}, @sadb_address={0x3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x88}, 0x1}, 0x0) [ 244.154328] device bridge_slave_1 left promiscuous mode [ 244.159991] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.171716] device bridge_slave_0 left promiscuous mode [ 244.177360] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.246266] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 244.266150] ntfs: (device loop4): parse_options(): Unrecognized mount option . [ 244.284970] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 244.304978] ntfs: (device loop5): parse_options(): Unrecognized mount option . [ 244.391013] team0 (unregistering): Port device team_slave_1 removed [ 244.414914] team0 (unregistering): Port device team_slave_0 removed [ 244.447806] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 244.468143] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 244.547334] bond0 (unregistering): Released all slaves 2018/04/21 01:42:01 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000000c0)=""/222, 0xde) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x7005, &(0x7f0000000080)) 2018/04/21 01:42:01 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000240)={[{@utf8='utf8', 0x2c}]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000780)="2e2f66696c65302f66696c6530ff", 0x3fffa, 0x0) 2018/04/21 01:42:01 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}, [], {0x95}}, &(0x7f00000000c0)='syzkaller\x00', 0x41, 0xc3, &(0x7f0000000300)=""/195}, 0x316) 2018/04/21 01:42:01 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}}, @sadb_address={0x3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x88}, 0x1}, 0x0) 2018/04/21 01:42:01 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000240)={[{@utf8='utf8', 0x2c}]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000780)="2e2f66696c65302f66696c6530ff", 0x3fffa, 0x0) 2018/04/21 01:42:01 executing program 5: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000240)={[{@utf8='utf8', 0x2c}]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000780)="2e2f66696c65302f66696c6530ff", 0x3fffa, 0x0) 2018/04/21 01:42:01 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000000000004000) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2), 0xfffffdaa) read(r1, &(0x7f0000000000)=""/126, 0xfffffeab) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000604ffc)) dup2(r1, r3) 2018/04/21 01:42:01 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000000000004000) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2), 0xfffffdaa) read(r1, &(0x7f0000000000)=""/126, 0xfffffeab) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000604ffc)) dup2(r1, r3) 2018/04/21 01:42:01 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}, [], {0x95}}, &(0x7f00000000c0)='syzkaller\x00', 0x41, 0xc3, &(0x7f0000000300)=""/195}, 0x316) [ 244.893980] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 244.913903] ntfs: (device loop5): parse_options(): Unrecognized mount option . 2018/04/21 01:42:01 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000004ffc)=0x10001) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000001240)=0x6) readv(r0, &(0x7f0000008fe0)=[{&(0x7f0000011000)=""/232, 0xe8}], 0x1) [ 244.927467] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 244.948441] ntfs: (device loop4): parse_options(): Unrecognized mount option . 2018/04/21 01:42:01 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000240)={[{@utf8='utf8', 0x2c}]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000780)="2e2f66696c65302f66696c6530ff", 0x3fffa, 0x0) 2018/04/21 01:42:01 executing program 2: r0 = socket$inet(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000240], 0x0, &(0x7f0000008000), &(0x7f0000000240)=ANY=[@ANYBLOB="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"]}, 0x220) 2018/04/21 01:42:01 executing program 5: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000240)={[{@utf8='utf8', 0x2c}]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000780)="2e2f66696c65302f66696c6530ff", 0x3fffa, 0x0) 2018/04/21 01:42:02 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000004ffc)=0x10001) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000001240)=0x6) readv(r0, &(0x7f0000008fe0)=[{&(0x7f0000011000)=""/232, 0xe8}], 0x1) [ 245.254193] IPVS: ftp: loaded support on port[0] = 21 2018/04/21 01:42:02 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000240)={[{@utf8='utf8', 0x2c}]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000780)="2e2f66696c65302f66696c6530ff", 0x3fffa, 0x0) 2018/04/21 01:42:02 executing program 2: r0 = socket$inet(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000240], 0x0, &(0x7f0000008000), &(0x7f0000000240)=ANY=[@ANYBLOB="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"]}, 0x220) [ 246.301883] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.308338] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.315837] device bridge_slave_0 entered promiscuous mode [ 246.361064] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.367591] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.375513] device bridge_slave_1 entered promiscuous mode [ 246.418672] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 246.458328] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 246.572738] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 246.618290] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 246.777062] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 246.784475] team0: Port device team_slave_0 added [ 246.821999] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 246.829455] team0: Port device team_slave_1 added [ 246.857051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 246.885275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 246.913675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 246.943224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.183971] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.190381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.197073] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.203458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.210845] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 248.058388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.143399] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 248.160172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.232797] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 248.239007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.246458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.327832] 8021q: adding VLAN 0 to HW filter on device team0 2018/04/21 01:42:06 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000000000004000) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2), 0xfffffdaa) read(r1, &(0x7f0000000000)=""/126, 0xfffffeab) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000604ffc)) dup2(r1, r3) 2018/04/21 01:42:06 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000000c0)=""/222, 0xde) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x7005, &(0x7f0000000080)) 2018/04/21 01:42:06 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000000000004000) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2), 0xfffffdaa) read(r1, &(0x7f0000000000)=""/126, 0xfffffeab) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000604ffc)) dup2(r1, r3) 2018/04/21 01:42:06 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000240)={[{@utf8='utf8', 0x2c}]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000780)="2e2f66696c65302f66696c6530ff", 0x3fffa, 0x0) 2018/04/21 01:42:06 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000004ffc)=0x10001) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000001240)=0x6) readv(r0, &(0x7f0000008fe0)=[{&(0x7f0000011000)=""/232, 0xe8}], 0x1) 2018/04/21 01:42:06 executing program 5: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f00000002c0)={'bond0\x00', &(0x7f00000001c0)=@ethtool_drvinfo={0x3, "8c9b53eaf3b277a315b3711a6cde411e2882525c8160cdda337769c1b8eb25e4", "b87e522b4cd09c19c7d1cc470a0ffd1a1b526aa32dc047f5fd48de3eaec13337", "3808759e60f26efd577f830b31d38f38aa1e154ddcd15e7d6d21c0ace164d362", "b89fb33a0faa3018ef00498ffbc39ca4b4169d6db1097f03546454c39fe9e1e4", "3ad69b593cc0ba738611ee1e9262178811582460225bdd2237c108e04cec268e", "54b4caef44666f59635c0e8b"}}) 2018/04/21 01:42:06 executing program 2: r0 = socket$inet(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000240], 0x0, &(0x7f0000008000), &(0x7f0000000240)=ANY=[@ANYBLOB="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"]}, 0x220) 2018/04/21 01:42:06 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/235, 0xeb}], 0x1) [ 249.679874] __ntfs_warning: 8 callbacks suppressed [ 249.679887] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 249.704814] ntfs: (device loop0): parse_options(): Unrecognized mount option . 2018/04/21 01:42:07 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/235, 0xeb}], 0x1) 2018/04/21 01:42:07 executing program 2: r0 = socket$inet(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000240], 0x0, &(0x7f0000008000), &(0x7f0000000240)=ANY=[@ANYBLOB="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"]}, 0x220) 2018/04/21 01:42:07 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000004ffc)=0x10001) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000001240)=0x6) readv(r0, &(0x7f0000008fe0)=[{&(0x7f0000011000)=""/232, 0xe8}], 0x1) 2018/04/21 01:42:07 executing program 5: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f00000002c0)={'bond0\x00', &(0x7f00000001c0)=@ethtool_drvinfo={0x3, "8c9b53eaf3b277a315b3711a6cde411e2882525c8160cdda337769c1b8eb25e4", "b87e522b4cd09c19c7d1cc470a0ffd1a1b526aa32dc047f5fd48de3eaec13337", "3808759e60f26efd577f830b31d38f38aa1e154ddcd15e7d6d21c0ace164d362", "b89fb33a0faa3018ef00498ffbc39ca4b4169d6db1097f03546454c39fe9e1e4", "3ad69b593cc0ba738611ee1e9262178811582460225bdd2237c108e04cec268e", "54b4caef44666f59635c0e8b"}}) 2018/04/21 01:42:07 executing program 0: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x7d}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x705000, 0x0, 0x0, &(0x7f0000000480)) 2018/04/21 01:42:07 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 2018/04/21 01:42:07 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000000c0)=""/222, 0xde) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x7005, &(0x7f0000000080)) 2018/04/21 01:42:07 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000002540)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000480)=ANY=[]) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000100)=ANY=[], 0x1023c) fallocate(r1, 0x3, 0x10000, 0x3000000004) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000100)={0x0, 0x8001, 0x1}) 2018/04/21 01:42:07 executing program 2: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000240), &(0x7f0000000280)=0x8) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000080)={0x0, 0x4, [0x1]}) umount2(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) 2018/04/21 01:42:07 executing program 5: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f00000002c0)={'bond0\x00', &(0x7f00000001c0)=@ethtool_drvinfo={0x3, "8c9b53eaf3b277a315b3711a6cde411e2882525c8160cdda337769c1b8eb25e4", "b87e522b4cd09c19c7d1cc470a0ffd1a1b526aa32dc047f5fd48de3eaec13337", "3808759e60f26efd577f830b31d38f38aa1e154ddcd15e7d6d21c0ace164d362", "b89fb33a0faa3018ef00498ffbc39ca4b4169d6db1097f03546454c39fe9e1e4", "3ad69b593cc0ba738611ee1e9262178811582460225bdd2237c108e04cec268e", "54b4caef44666f59635c0e8b"}}) 2018/04/21 01:42:07 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/235, 0xeb}], 0x1) 2018/04/21 01:42:07 executing program 0: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x7d}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x705000, 0x0, 0x0, &(0x7f0000000480)) 2018/04/21 01:42:07 executing program 7: r0 = memfd_create(&(0x7f0000053000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000053000)) [ 250.796994] ================================================================== [ 250.804672] BUG: KASAN: null-ptr-deref in refcount_inc_not_zero+0x8f/0x2d0 [ 250.811746] Read of size 4 at addr 0000000000000004 by task syz-executor3/18055 [ 250.819862] [ 250.821503] CPU: 1 PID: 18055 Comm: syz-executor3 Not tainted 4.17.0-rc1+ #10 [ 250.828788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.838155] Call Trace: [ 250.840766] dump_stack+0x1b9/0x294 [ 250.844419] ? dump_stack_print_info.cold.2+0x52/0x52 [ 250.849628] ? kasan_check_write+0x14/0x20 [ 250.853885] ? do_raw_spin_lock+0xc1/0x200 [ 250.858142] ? vprintk_func+0x81/0xe7 [ 250.861964] ? refcount_inc_not_zero+0x8f/0x2d0 [ 250.866650] kasan_report.cold.7+0x6d/0x2fe [ 250.870996] check_memory_region+0x13e/0x1b0 [ 250.875424] kasan_check_read+0x11/0x20 [ 250.879414] refcount_inc_not_zero+0x8f/0x2d0 [ 250.883928] ? refcount_add_not_zero+0x320/0x320 [ 250.888711] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 250.893744] ? lock_sock_nested+0x9f/0x120 [ 250.898007] refcount_inc+0x15/0x70 [ 250.901659] llc_ui_release+0xba/0x2b0 [ 250.905565] ? fsnotify_first_mark+0x330/0x330 [ 250.910169] sock_release+0x96/0x1b0 [ 250.913914] ? sock_alloc_file+0x4e0/0x4e0 [ 250.918166] sock_close+0x16/0x20 [ 250.921640] __fput+0x34d/0x890 [ 250.924944] ? fput+0x1a0/0x1a0 [ 250.928246] ? _raw_spin_unlock_irq+0x27/0x70 [ 250.932863] ____fput+0x15/0x20 [ 250.936166] task_work_run+0x1e4/0x290 [ 250.940079] ? task_work_cancel+0x240/0x240 [ 250.944422] ? switch_task_namespaces+0xbd/0xd0 [ 250.949097] do_exit+0x1aee/0x2730 [ 250.952638] ? mm_update_next_owner+0x980/0x980 [ 250.957304] ? print_usage_bug+0xc0/0xc0 [ 250.961379] ? graph_lock+0x170/0x170 [ 250.965169] ? do_raw_spin_unlock+0x9e/0x2e0 [ 250.969571] ? rcu_note_context_switch+0x710/0x710 [ 250.974485] ? lock_acquire+0x1dc/0x520 [ 250.978455] ? __might_sleep+0x95/0x190 [ 250.982429] ? __lock_acquire+0x7f5/0x5140 [ 250.986668] ? debug_check_no_locks_freed+0x310/0x310 [ 250.991847] ? do_raw_spin_unlock+0x9e/0x2e0 [ 250.996249] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 251.000825] ? kasan_check_write+0x14/0x20 [ 251.005050] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 251.010235] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 251.015764] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 251.020861] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 251.026390] ? futex_wait+0x5c1/0x9f0 [ 251.030188] ? perf_trace_lock+0xd6/0x900 [ 251.034341] ? perf_trace_lock_acquire+0xe3/0x980 [ 251.039177] ? zap_class+0x720/0x720 [ 251.042882] ? perf_trace_lock+0x900/0x900 [ 251.047112] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 251.052643] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 251.057741] ? futex_wake+0x2f6/0x750 [ 251.061535] ? graph_lock+0x170/0x170 [ 251.065333] ? memset+0x31/0x40 [ 251.068605] ? find_held_lock+0x36/0x1c0 [ 251.072661] ? lock_downgrade+0x8e0/0x8e0 [ 251.076807] do_group_exit+0x16f/0x430 [ 251.080690] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 251.085271] ? __ia32_sys_exit+0x50/0x50 [ 251.089325] ? _raw_spin_unlock_irq+0x27/0x70 [ 251.093810] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 251.098821] get_signal+0x886/0x1960 [ 251.102534] ? ptrace_notify+0x130/0x130 [ 251.106592] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 251.111337] ? graph_lock+0x170/0x170 [ 251.115130] ? rcu_is_watching+0x85/0x140 [ 251.119266] ? graph_lock+0x170/0x170 [ 251.123059] ? find_held_lock+0x36/0x1c0 [ 251.127133] do_signal+0x98/0x2040 [ 251.130675] ? setup_sigcontext+0x7d0/0x7d0 [ 251.134989] ? lock_downgrade+0x8e0/0x8e0 [ 251.139129] ? handle_mm_fault+0x8c0/0xc70 [ 251.143373] ? handle_mm_fault+0x55a/0xc70 [ 251.147605] ? __handle_mm_fault+0x4310/0x4310 [ 251.152192] ? exit_to_usermode_loop+0x87/0x310 [ 251.156873] exit_to_usermode_loop+0x28a/0x310 [ 251.161451] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 251.166380] ? do_syscall_64+0x92/0x800 [ 251.170354] do_syscall_64+0x6ac/0x800 [ 251.174237] ? syscall_return_slowpath+0x5c0/0x5c0 [ 251.179161] ? syscall_return_slowpath+0x30f/0x5c0 [ 251.184088] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 251.189449] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 251.194291] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 251.199469] RIP: 0033:0x455389 [ 251.202646] RSP: 002b:00007f0a5206cce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 251.210349] RAX: fffffffffffffe00 RBX: 000000000072bf80 RCX: 0000000000455389 [ 251.217609] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000072bf80 [ 251.224867] RBP: 000000000072bf80 R08: 0000000000000000 R09: 000000000072bf58 [ 251.232126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.239396] R13: 00007ffeddf8a8df R14: 00007f0a5206d9c0 R15: 0000000000000001 [ 251.246667] ================================================================== [ 251.254017] Disabling lock debugging due to kernel taint [ 251.260942] Kernel panic - not syncing: panic_on_warn set ... [ 251.260942] [ 251.268335] CPU: 1 PID: 18055 Comm: syz-executor3 Tainted: G B 4.17.0-rc1+ #10 [ 251.277012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.286369] Call Trace: [ 251.288972] dump_stack+0x1b9/0x294 [ 251.292622] ? dump_stack_print_info.cold.2+0x52/0x52 2018/04/21 01:42:08 executing program 5: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f00000002c0)={'bond0\x00', &(0x7f00000001c0)=@ethtool_drvinfo={0x3, "8c9b53eaf3b277a315b3711a6cde411e2882525c8160cdda337769c1b8eb25e4", "b87e522b4cd09c19c7d1cc470a0ffd1a1b526aa32dc047f5fd48de3eaec13337", "3808759e60f26efd577f830b31d38f38aa1e154ddcd15e7d6d21c0ace164d362", "b89fb33a0faa3018ef00498ffbc39ca4b4169d6db1097f03546454c39fe9e1e4", "3ad69b593cc0ba738611ee1e9262178811582460225bdd2237c108e04cec268e", "54b4caef44666f59635c0e8b"}}) 2018/04/21 01:42:08 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/235, 0xeb}], 0x1) 2018/04/21 01:42:08 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000002540)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000480)=ANY=[]) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000100)=ANY=[], 0x1023c) fallocate(r1, 0x3, 0x10000, 0x3000000004) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000100)={0x0, 0x8001, 0x1}) [ 251.297828] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 251.302603] ? refcount_add_not_zero+0x300/0x320 [ 251.307370] panic+0x22f/0x4de [ 251.310570] ? add_taint.cold.5+0x16/0x16 [ 251.314730] ? do_raw_spin_unlock+0x9e/0x2e0 [ 251.319153] ? do_raw_spin_unlock+0x9e/0x2e0 [ 251.323576] ? refcount_inc_not_zero+0x8f/0x2d0 [ 251.328255] kasan_end_report+0x47/0x4f [ 251.332246] kasan_report.cold.7+0x76/0x2fe [ 251.336584] check_memory_region+0x13e/0x1b0 [ 251.341099] kasan_check_read+0x11/0x20 [ 251.345093] refcount_inc_not_zero+0x8f/0x2d0 2018/04/21 01:42:08 executing program 7: r0 = memfd_create(&(0x7f0000053000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000053000)) [ 251.349611] ? refcount_add_not_zero+0x320/0x320 [ 251.354385] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 251.359421] ? lock_sock_nested+0x9f/0x120 [ 251.363714] refcount_inc+0x15/0x70 [ 251.367359] llc_ui_release+0xba/0x2b0 [ 251.371261] ? fsnotify_first_mark+0x330/0x330 [ 251.375855] sock_release+0x96/0x1b0 [ 251.379585] ? sock_alloc_file+0x4e0/0x4e0 [ 251.383832] sock_close+0x16/0x20 [ 251.387297] __fput+0x34d/0x890 [ 251.390598] ? fput+0x1a0/0x1a0 [ 251.393893] ? _raw_spin_unlock_irq+0x27/0x70 [ 251.398432] ____fput+0x15/0x20 [ 251.401729] task_work_run+0x1e4/0x290 [ 251.405642] ? task_work_cancel+0x240/0x240 [ 251.409969] ? switch_task_namespaces+0xbd/0xd0 [ 251.414639] do_exit+0x1aee/0x2730 [ 251.418183] ? mm_update_next_owner+0x980/0x980 [ 251.422845] ? print_usage_bug+0xc0/0xc0 [ 251.426893] ? graph_lock+0x170/0x170 [ 251.430682] ? do_raw_spin_unlock+0x9e/0x2e0 [ 251.435082] ? rcu_note_context_switch+0x710/0x710 [ 251.440000] ? lock_acquire+0x1dc/0x520 [ 251.443969] ? __might_sleep+0x95/0x190 [ 251.447943] ? __lock_acquire+0x7f5/0x5140 [ 251.452187] ? debug_check_no_locks_freed+0x310/0x310 [ 251.457439] ? do_raw_spin_unlock+0x9e/0x2e0 [ 251.461853] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 251.466430] ? kasan_check_write+0x14/0x20 [ 251.470656] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 251.475837] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 251.481365] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 251.486461] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 251.491999] ? futex_wait+0x5c1/0x9f0 [ 251.495795] ? perf_trace_lock+0xd6/0x900 [ 251.499932] ? perf_trace_lock_acquire+0xe3/0x980 [ 251.504947] ? zap_class+0x720/0x720 [ 251.508650] ? perf_trace_lock+0x900/0x900 [ 251.512877] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 251.518404] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 251.523504] ? futex_wake+0x2f6/0x750 [ 251.527294] ? graph_lock+0x170/0x170 [ 251.531173] ? memset+0x31/0x40 [ 251.534461] ? find_held_lock+0x36/0x1c0 [ 251.538535] ? lock_downgrade+0x8e0/0x8e0 [ 251.542700] do_group_exit+0x16f/0x430 [ 251.546589] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 251.551201] ? __ia32_sys_exit+0x50/0x50 [ 251.555249] ? _raw_spin_unlock_irq+0x27/0x70 [ 251.559738] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 251.564749] get_signal+0x886/0x1960 [ 251.568462] ? ptrace_notify+0x130/0x130 [ 251.572516] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 251.577253] ? graph_lock+0x170/0x170 [ 251.581040] ? rcu_is_watching+0x85/0x140 [ 251.585174] ? graph_lock+0x170/0x170 [ 251.588961] ? find_held_lock+0x36/0x1c0 [ 251.593026] do_signal+0x98/0x2040 [ 251.596572] ? setup_sigcontext+0x7d0/0x7d0 [ 251.600882] ? lock_downgrade+0x8e0/0x8e0 [ 251.605039] ? handle_mm_fault+0x8c0/0xc70 [ 251.609268] ? handle_mm_fault+0x55a/0xc70 [ 251.613489] ? __handle_mm_fault+0x4310/0x4310 [ 251.618065] ? exit_to_usermode_loop+0x87/0x310 [ 251.622730] exit_to_usermode_loop+0x28a/0x310 [ 251.627298] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 251.632125] ? do_syscall_64+0x92/0x800 [ 251.636089] do_syscall_64+0x6ac/0x800 [ 251.639973] ? syscall_return_slowpath+0x5c0/0x5c0 [ 251.644890] ? syscall_return_slowpath+0x30f/0x5c0 [ 251.649820] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 251.655189] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 251.660033] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 251.665209] RIP: 0033:0x455389 [ 251.668389] RSP: 002b:00007f0a5206cce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 251.676083] RAX: fffffffffffffe00 RBX: 000000000072bf80 RCX: 0000000000455389 [ 251.683338] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000072bf80 [ 251.690591] RBP: 000000000072bf80 R08: 0000000000000000 R09: 000000000072bf58 [ 251.697845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.705101] R13: 00007ffeddf8a8df R14: 00007f0a5206d9c0 R15: 0000000000000001 [ 251.712805] Dumping ftrace buffer: [ 251.716332] (ftrace buffer empty) [ 251.720018] Kernel Offset: disabled [ 251.723630] Rebooting in 86400 seconds..