net(0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa9c00081100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e2000089078000000000000000000"], &(0x7f0000000040)) mlock(&(0x7f0000723000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/12 18:26:43 executing program 3: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x2, 0x8004700d, 0x400000, &(0x7f00000001c0)) 2018/04/12 18:26:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000647000)='/dev/ptmx\x00', 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00001c2000)=0x19) write$tun(r1, &(0x7f0000158000), 0x40) 2018/04/12 18:26:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="ea00280000b30082d6540f30ea030000002c0066b850000f00d066ba4200b802000000efc74424000a000000c7442402acc70000c7442406000000000f0114240f20e035100000000f22e03e64360f01cf0f22c7", 0x54}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/12 18:26:43 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000005edffffff00000044db000000000000000000000900000000000000010000000100b5cf46b47e209d98653c850345000000000000000000000000000000080060b22f4eadc0b44c000000"]) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x8004e20}, 0x1c) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000052f000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) fcntl$setlease(r3, 0x400, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000c9af18)={{{@in=@rand_addr, @in6=@dev={0xfe, 0x80}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2=0xe0000002, 0x4d3, 0x3c}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xe8) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x7, 0x2}, 0x10}, 0x1}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000340)={0x4101, 0x0, 0x5, 0x0, 0x84, 0x0, 0xd624, 0x5, 0x800, 0xffff, 0x3, 0x9, 0x0, 0x8, 0x8, 0x7fff, 0x3, 0x0, 0x81}) close(r4) sendfile(r1, r1, &(0x7f0000000080), 0x102000004) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f000008cff4)='/dev/rfkill\x00', 0x0, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00001b6ff4)) epoll_ctl$EPOLL_CTL_ADD(r6, 0xa000, r5, &(0x7f0000d56ff4)) setsockopt$ipx_IPX_TYPE(r2, 0x100, 0x1, &(0x7f0000000440)=0x7, 0x4) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$sock_netrom_SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000000)) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @broadcast}, &(0x7f0000000180)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={@mcast2={0xff, 0x2, [], 0x1}, 0x4e, r7}) syz_emit_ethernet(0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa9c00081100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e2000089078000000000000000000"], &(0x7f0000000040)) mlock(&(0x7f0000723000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/12 18:26:44 executing program 6: r0 = accept(0xffffffffffffff9c, &(0x7f0000000180)=@ethernet={0x0, @dev}, &(0x7f0000000200)=0x80) r1 = add_key(&(0x7f0000000600)='id_legacy\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000680), 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, r1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) r3 = socket$inet(0x2, 0x3, 0x19) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xfffffffffffffff8, 0x20000) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) getpgrp(0x0) r4 = shmget(0x0, 0x1000, 0x1, &(0x7f0000ffe000/0x1000)=nil) r5 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r5, 0x40405514, &(0x7f0000000440)={0x9, 0x4, 0x9, 0x9, "9af99feeab979e192e9632cb2d30e1535edd88f3f312846ebbc0c17995083cac48c325beedb12fe60cdcaae2"}) shmctl$SHM_LOCK(r4, 0xb) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r5, 0xc0305302, &(0x7f0000000540)={0x8, 0x8, 0x0, 0x10001, 0x3, 0xd86b}) r6 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x2101) close(r6) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0xc78, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2=0xe0000002, @in=@multicast1=0xe0000001}}, {{@in6}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x2000000}}, 0xe8) connect$unix(r6, &(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/mixer\x00', 0x440, 0x0) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f00000005c0)={0x0, @rand_addr, @rand_addr}, &(0x7f0000000300)=0x2b5) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@rand_addr=0x7, 0x4e20, 0x0, 0x4e20, 0x2, 0xa, 0xa0, 0x0, 0xff, r8, r2}, {0x1, 0x3d, 0x398cd27c, 0x100000001, 0x2, 0x10000, 0xfede, 0x4}, {0x0, 0x0, 0x0, 0x400}, 0x3, 0x0, 0x0, 0x0, 0x2, 0x3}, {{@in6, 0x4d3, 0x7c}, 0x0, @in=@broadcast=0xffffffff, 0x0, 0x5, 0x2, 0x0, 0x3f, 0x8}}, 0xe8) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000800)={r8, @broadcast=0xffffffff, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0xc0505350, &(0x7f0000000340)={{0x8, 0x6}, {0x3, 0x5}, 0x8, 0x4, 0x6}) close(r3) close(r3) 2018/04/12 18:26:44 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000005edffffff00000044db000000000000000000000900000000000000010000000100b5cf46b47e209d98653c850345000000000000000000000000000000080060b22f4eadc0b44c000000"]) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x8004e20}, 0x1c) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000052f000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) fcntl$setlease(r3, 0x400, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000c9af18)={{{@in=@rand_addr, @in6=@dev={0xfe, 0x80}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2=0xe0000002, 0x4d3, 0x3c}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xe8) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x7, 0x2}, 0x10}, 0x1}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000340)={0x4101, 0x0, 0x5, 0x0, 0x84, 0x0, 0xd624, 0x5, 0x800, 0xffff, 0x3, 0x9, 0x0, 0x8, 0x8, 0x7fff, 0x3, 0x0, 0x81}) close(r4) sendfile(r1, r1, &(0x7f0000000080), 0x102000004) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f000008cff4)='/dev/rfkill\x00', 0x0, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00001b6ff4)) epoll_ctl$EPOLL_CTL_ADD(r6, 0xa000, r5, &(0x7f0000d56ff4)) setsockopt$ipx_IPX_TYPE(r2, 0x100, 0x1, &(0x7f0000000440)=0x7, 0x4) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$sock_netrom_SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000000)) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @broadcast}, &(0x7f0000000180)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={@mcast2={0xff, 0x2, [], 0x1}, 0x4e, r7}) syz_emit_ethernet(0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa9c00081100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e2000089078000000000000000000"], &(0x7f0000000040)) mlock(&(0x7f0000723000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/12 18:26:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000647000)='/dev/ptmx\x00', 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00001c2000)=0x19) write$tun(r1, &(0x7f0000158000), 0x40) 2018/04/12 18:26:44 executing program 3: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x2, 0x8004700d, 0x400000, &(0x7f00000001c0)) 2018/04/12 18:26:44 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000005edffffff00000044db000000000000000000000900000000000000010000000100b5cf46b47e209d98653c850345000000000000000000000000000000080060b22f4eadc0b44c000000"]) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x8004e20}, 0x1c) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000052f000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) fcntl$setlease(r3, 0x400, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000c9af18)={{{@in=@rand_addr, @in6=@dev={0xfe, 0x80}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2=0xe0000002, 0x4d3, 0x3c}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xe8) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x7, 0x2}, 0x10}, 0x1}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000340)={0x4101, 0x0, 0x5, 0x0, 0x84, 0x0, 0xd624, 0x5, 0x800, 0xffff, 0x3, 0x9, 0x0, 0x8, 0x8, 0x7fff, 0x3, 0x0, 0x81}) close(r4) sendfile(r1, r1, &(0x7f0000000080), 0x102000004) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f000008cff4)='/dev/rfkill\x00', 0x0, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00001b6ff4)) epoll_ctl$EPOLL_CTL_ADD(r6, 0xa000, r5, &(0x7f0000d56ff4)) setsockopt$ipx_IPX_TYPE(r2, 0x100, 0x1, &(0x7f0000000440)=0x7, 0x4) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$sock_netrom_SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000000)) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @broadcast}, &(0x7f0000000180)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={@mcast2={0xff, 0x2, [], 0x1}, 0x4e, r7}) syz_emit_ethernet(0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa9c00081100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e2000089078000000000000000000"], &(0x7f0000000040)) mlock(&(0x7f0000723000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/12 18:26:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="ea00280000b30082d6540f30ea030000002c0066b850000f00d066ba4200b802000000efc74424000a000000c7442402acc70000c7442406000000000f0114240f20e035100000000f22e03e64360f01cf0f22c7", 0x54}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/12 18:26:44 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000005edffffff00000044db000000000000000000000900000000000000010000000100b5cf46b47e209d98653c850345000000000000000000000000000000080060b22f4eadc0b44c000000"]) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x8004e20}, 0x1c) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000052f000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) fcntl$setlease(r3, 0x400, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000c9af18)={{{@in=@rand_addr, @in6=@dev={0xfe, 0x80}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2=0xe0000002, 0x4d3, 0x3c}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xe8) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x7, 0x2}, 0x10}, 0x1}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000340)={0x4101, 0x0, 0x5, 0x0, 0x84, 0x0, 0xd624, 0x5, 0x800, 0xffff, 0x3, 0x9, 0x0, 0x8, 0x8, 0x7fff, 0x3, 0x0, 0x81}) close(r4) sendfile(r1, r1, &(0x7f0000000080), 0x102000004) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f000008cff4)='/dev/rfkill\x00', 0x0, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00001b6ff4)) epoll_ctl$EPOLL_CTL_ADD(r6, 0xa000, r5, &(0x7f0000d56ff4)) setsockopt$ipx_IPX_TYPE(r2, 0x100, 0x1, &(0x7f0000000440)=0x7, 0x4) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$sock_netrom_SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000000)) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @broadcast}, &(0x7f0000000180)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={@mcast2={0xff, 0x2, [], 0x1}, 0x4e, r7}) syz_emit_ethernet(0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa9c00081100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e2000089078000000000000000000"], &(0x7f0000000040)) mlock(&(0x7f0000723000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/12 18:26:44 executing program 1: truncate(&(0x7f00000003c0)='./file0\x00', 0xff) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x2, 0x8, 0x5, 'queue0\x00', 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000), 0x4) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x8, 0xfffffffffffffff9) unlink(&(0x7f0000000580)='./file0\x00') socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000200)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000740), &(0x7f0000000780)=0x4) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000ff01000000000005000000400400003802000028010000ffffffff00000011e8030000e8030000e8030000fffffffefddfc300e803000005000000c489c6912a55627b7c8545d94844794b5b5513055c3ee99974d35514ff261cb24c75e88c1ffe0f42b877e6ce595de06a64fecd6b481555bfe0d5a659bf26d3d5ea9c9833a8772c63d8a4e268a53ac5a7"], 0x1) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) rt_sigqueueinfo(r3, 0x1e, &(0x7f0000000040)={0x0, 0x10000, 0x400, 0x5}) connect$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, "03f4d9931e3bc0a8428581e03ee18838304e624ee8fc12f8abbd026dfd9763ec8618cc07cf99f95baf3052333a69cad313a83de05bce39ab5730be8dda2cb9"}, 0x60) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000100)={'bcsf0\x00'}) iopl(0xb38) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f0000000240)='./file0\x00', 0x6, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="58291f5df912c76fbe252ea641fef083e269848607bbf8722d08bfaab8d77f87f3013be1327374ee0c77f353b708ce1727948ded298974c2416ec02a60628e191dd7f73630e37afa071b3e9724c24dd16b19e9ede35dd88cfc", 0x59, 0x6}], 0x3, &(0x7f0000000880)={[{@errors_remount='errors=remount-ro', 0x2c}, {@fmask={'fmask', 0x3d, [0x32, 0x32, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'koi8-r'}, 0x2c}, {@show_sys_files_yes={'show_sys_files=yes', 0x3d, [0x3d]}, 0x2c}, {@case_sensitive_no={'case_sensitive=no', 0x3d, [0x34]}, 0x2c}, {@case_sensitive_yes={'case_sensitive=yes', 0x3d, [0x39, 0x36, 0x37]}, 0x2c}]}) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f00000007c0)="323415656742c6bfc1ad4e0cbfa423a4349fe47e473894eb67f6f028dd47d481bd68a67052034f88b01dffdbb65f66d51050e75ddc0bf34fd79c8dfca37ab5b1f5024eb2d5f80730928c5820284f3771f5ba4386dbd0f9509474f9135ea49c41fb80e5e3d83f1d5b6e7496340bb79833cbd0c6570b58a57b62aaa4c5dc482042bf3df743866392850eca93c5f2787b12b40ebc5b45aeabfc0ef7dcf9c793f39c32886e3c5bf6b42fc0b0", 0xaa) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x0, 0x0, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x40, 0x2, 0x8, 0x400, 0x8000000000, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000400)={0x0, 0x80000}) restart_syscall() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 2018/04/12 18:26:44 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f0000307000)=&(0x7f0000989fff)) close(r0) 2018/04/12 18:26:44 executing program 6: r0 = accept(0xffffffffffffff9c, &(0x7f0000000180)=@ethernet={0x0, @dev}, &(0x7f0000000200)=0x80) r1 = add_key(&(0x7f0000000600)='id_legacy\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000680), 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, r1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) r3 = socket$inet(0x2, 0x3, 0x19) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xfffffffffffffff8, 0x20000) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) getpgrp(0x0) r4 = shmget(0x0, 0x1000, 0x1, &(0x7f0000ffe000/0x1000)=nil) r5 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r5, 0x40405514, &(0x7f0000000440)={0x9, 0x4, 0x9, 0x9, "9af99feeab979e192e9632cb2d30e1535edd88f3f312846ebbc0c17995083cac48c325beedb12fe60cdcaae2"}) shmctl$SHM_LOCK(r4, 0xb) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r5, 0xc0305302, &(0x7f0000000540)={0x8, 0x8, 0x0, 0x10001, 0x3, 0xd86b}) r6 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x2101) close(r6) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0xc78, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2=0xe0000002, @in=@multicast1=0xe0000001}}, {{@in6}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x2000000}}, 0xe8) connect$unix(r6, &(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/mixer\x00', 0x440, 0x0) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f00000005c0)={0x0, @rand_addr, @rand_addr}, &(0x7f0000000300)=0x2b5) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@rand_addr=0x7, 0x4e20, 0x0, 0x4e20, 0x2, 0xa, 0xa0, 0x0, 0xff, r8, r2}, {0x1, 0x3d, 0x398cd27c, 0x100000001, 0x2, 0x10000, 0xfede, 0x4}, {0x0, 0x0, 0x0, 0x400}, 0x3, 0x0, 0x0, 0x0, 0x2, 0x3}, {{@in6, 0x4d3, 0x7c}, 0x0, @in=@broadcast=0xffffffff, 0x0, 0x5, 0x2, 0x0, 0x3f, 0x8}}, 0xe8) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000800)={r8, @broadcast=0xffffffff, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0xc0505350, &(0x7f0000000340)={{0x8, 0x6}, {0x3, 0x5}, 0x8, 0x4, 0x6}) close(r3) close(r3) 2018/04/12 18:26:44 executing program 3: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x2, 0x8004700d, 0x400000, &(0x7f00000001c0)) [ 230.317459] ntfs: (device loop1): parse_options(): The show_sys_files option requires a boolean argument. 2018/04/12 18:26:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="ea00280000b30082d6540f30ea030000002c0066b850000f00d066ba4200b802000000efc74424000a000000c7442402acc70000c7442406000000000f0114240f20e035100000000f22e03e64360f01cf0f22c7", 0x54}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/12 18:26:44 executing program 3: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x2, 0x8004700d, 0x400000, &(0x7f00000001c0)) [ 230.404214] ntfs: (device loop1): parse_options(): The show_sys_files option requires a boolean argument. 2018/04/12 18:26:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001c00)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b00)=@delpolicy={0x5c, 0x14, 0x421, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14}, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, [@policy_type={0xc, 0x10}]}, 0x5c}, 0x1}, 0x0) 2018/04/12 18:26:44 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000005edffffff00000044db000000000000000000000900000000000000010000000100b5cf46b47e209d98653c850345000000000000000000000000000000080060b22f4eadc0b44c000000"]) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x8004e20}, 0x1c) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000052f000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) fcntl$setlease(r3, 0x400, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000c9af18)={{{@in=@rand_addr, @in6=@dev={0xfe, 0x80}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2=0xe0000002, 0x4d3, 0x3c}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xe8) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x7, 0x2}, 0x10}, 0x1}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000340)={0x4101, 0x0, 0x5, 0x0, 0x84, 0x0, 0xd624, 0x5, 0x800, 0xffff, 0x3, 0x9, 0x0, 0x8, 0x8, 0x7fff, 0x3, 0x0, 0x81}) close(r4) sendfile(r1, r1, &(0x7f0000000080), 0x102000004) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f000008cff4)='/dev/rfkill\x00', 0x0, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00001b6ff4)) epoll_ctl$EPOLL_CTL_ADD(r6, 0xa000, r5, &(0x7f0000d56ff4)) setsockopt$ipx_IPX_TYPE(r2, 0x100, 0x1, &(0x7f0000000440)=0x7, 0x4) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$sock_netrom_SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000000)) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @broadcast}, &(0x7f0000000180)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={@mcast2={0xff, 0x2, [], 0x1}, 0x4e, r7}) syz_emit_ethernet(0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa9c00081100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e2000089078000000000000000000"], &(0x7f0000000040)) mlock(&(0x7f0000723000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/12 18:26:44 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000001200)='net/route\x00') pread64(r0, &(0x7f0000000200)=""/202, 0xca, 0x0) 2018/04/12 18:26:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="ea00280000b30082d6540f30ea030000002c0066b850000f00d066ba4200b802000000efc74424000a000000c7442402acc70000c7442406000000000f0114240f20e035100000000f22e03e64360f01cf0f22c7", 0x54}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/12 18:26:44 executing program 1: truncate(&(0x7f00000003c0)='./file0\x00', 0xff) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x2, 0x8, 0x5, 'queue0\x00', 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000), 0x4) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x8, 0xfffffffffffffff9) unlink(&(0x7f0000000580)='./file0\x00') socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000200)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000740), &(0x7f0000000780)=0x4) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000ff01000000000005000000400400003802000028010000ffffffff00000011e8030000e8030000e8030000fffffffefddfc300e803000005000000c489c6912a55627b7c8545d94844794b5b5513055c3ee99974d35514ff261cb24c75e88c1ffe0f42b877e6ce595de06a64fecd6b481555bfe0d5a659bf26d3d5ea9c9833a8772c63d8a4e268a53ac5a7"], 0x1) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) rt_sigqueueinfo(r3, 0x1e, &(0x7f0000000040)={0x0, 0x10000, 0x400, 0x5}) connect$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, "03f4d9931e3bc0a8428581e03ee18838304e624ee8fc12f8abbd026dfd9763ec8618cc07cf99f95baf3052333a69cad313a83de05bce39ab5730be8dda2cb9"}, 0x60) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000100)={'bcsf0\x00'}) iopl(0xb38) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f0000000240)='./file0\x00', 0x6, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="58291f5df912c76fbe252ea641fef083e269848607bbf8722d08bfaab8d77f87f3013be1327374ee0c77f353b708ce1727948ded298974c2416ec02a60628e191dd7f73630e37afa071b3e9724c24dd16b19e9ede35dd88cfc", 0x59, 0x6}], 0x3, &(0x7f0000000880)={[{@errors_remount='errors=remount-ro', 0x2c}, {@fmask={'fmask', 0x3d, [0x32, 0x32, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'koi8-r'}, 0x2c}, {@show_sys_files_yes={'show_sys_files=yes', 0x3d, [0x3d]}, 0x2c}, {@case_sensitive_no={'case_sensitive=no', 0x3d, [0x34]}, 0x2c}, {@case_sensitive_yes={'case_sensitive=yes', 0x3d, [0x39, 0x36, 0x37]}, 0x2c}]}) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f00000007c0)="323415656742c6bfc1ad4e0cbfa423a4349fe47e473894eb67f6f028dd47d481bd68a67052034f88b01dffdbb65f66d51050e75ddc0bf34fd79c8dfca37ab5b1f5024eb2d5f80730928c5820284f3771f5ba4386dbd0f9509474f9135ea49c41fb80e5e3d83f1d5b6e7496340bb79833cbd0c6570b58a57b62aaa4c5dc482042bf3df743866392850eca93c5f2787b12b40ebc5b45aeabfc0ef7dcf9c793f39c32886e3c5bf6b42fc0b0", 0xaa) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x0, 0x0, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x40, 0x2, 0x8, 0x400, 0x8000000000, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000400)={0x0, 0x80000}) restart_syscall() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 2018/04/12 18:26:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001c00)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b00)=@delpolicy={0x5c, 0x14, 0x421, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14}, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, [@policy_type={0xc, 0x10}]}, 0x5c}, 0x1}, 0x0) 2018/04/12 18:26:44 executing program 4: truncate(&(0x7f00000003c0)='./file0\x00', 0xff) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x2, 0x8, 0x5, 'queue0\x00', 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000), 0x4) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x8, 0xfffffffffffffff9) unlink(&(0x7f0000000580)='./file0\x00') socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000200)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000740), &(0x7f0000000780)=0x4) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000ff01000000000005000000400400003802000028010000ffffffff00000011e8030000e8030000e8030000fffffffefddfc300e803000005000000c489c6912a55627b7c8545d94844794b5b5513055c3ee99974d35514ff261cb24c75e88c1ffe0f42b877e6ce595de06a64fecd6b481555bfe0d5a659bf26d3d5ea9c9833a8772c63d8a4e268a53ac5a7"], 0x1) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) rt_sigqueueinfo(r3, 0x1e, &(0x7f0000000040)={0x0, 0x10000, 0x400, 0x5}) connect$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, "03f4d9931e3bc0a8428581e03ee18838304e624ee8fc12f8abbd026dfd9763ec8618cc07cf99f95baf3052333a69cad313a83de05bce39ab5730be8dda2cb9"}, 0x60) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000100)={'bcsf0\x00'}) iopl(0xb38) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f0000000240)='./file0\x00', 0x6, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="58291f5df912c76fbe252ea641fef083e269848607bbf8722d08bfaab8d77f87f3013be1327374ee0c77f353b708ce1727948ded298974c2416ec02a60628e191dd7f73630e37afa071b3e9724c24dd16b19e9ede35dd88cfc", 0x59, 0x6}], 0x3, &(0x7f0000000880)={[{@errors_remount='errors=remount-ro', 0x2c}, {@fmask={'fmask', 0x3d, [0x32, 0x32, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'koi8-r'}, 0x2c}, {@show_sys_files_yes={'show_sys_files=yes', 0x3d, [0x3d]}, 0x2c}, {@case_sensitive_no={'case_sensitive=no', 0x3d, [0x34]}, 0x2c}, {@case_sensitive_yes={'case_sensitive=yes', 0x3d, [0x39, 0x36, 0x37]}, 0x2c}]}) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f00000007c0)="323415656742c6bfc1ad4e0cbfa423a4349fe47e473894eb67f6f028dd47d481bd68a67052034f88b01dffdbb65f66d51050e75ddc0bf34fd79c8dfca37ab5b1f5024eb2d5f80730928c5820284f3771f5ba4386dbd0f9509474f9135ea49c41fb80e5e3d83f1d5b6e7496340bb79833cbd0c6570b58a57b62aaa4c5dc482042bf3df743866392850eca93c5f2787b12b40ebc5b45aeabfc0ef7dcf9c793f39c32886e3c5bf6b42fc0b0", 0xaa) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x0, 0x0, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x40, 0x2, 0x8, 0x400, 0x8000000000, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000400)={0x0, 0x80000}) restart_syscall() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 2018/04/12 18:26:44 executing program 5: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r0, &(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, 0x0) 2018/04/12 18:26:44 executing program 6: truncate(&(0x7f00000003c0)='./file0\x00', 0xff) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x2, 0x8, 0x5, 'queue0\x00', 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000), 0x4) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x8, 0xfffffffffffffff9) unlink(&(0x7f0000000580)='./file0\x00') socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000200)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000740), &(0x7f0000000780)=0x4) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000ff01000000000005000000400400003802000028010000ffffffff00000011e8030000e8030000e8030000fffffffefddfc300e803000005000000c489c6912a55627b7c8545d94844794b5b5513055c3ee99974d35514ff261cb24c75e88c1ffe0f42b877e6ce595de06a64fecd6b481555bfe0d5a659bf26d3d5ea9c9833a8772c63d8a4e268a53ac5a7"], 0x1) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) rt_sigqueueinfo(r3, 0x1e, &(0x7f0000000040)={0x0, 0x10000, 0x400, 0x5}) connect$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, "03f4d9931e3bc0a8428581e03ee18838304e624ee8fc12f8abbd026dfd9763ec8618cc07cf99f95baf3052333a69cad313a83de05bce39ab5730be8dda2cb9"}, 0x60) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000100)={'bcsf0\x00'}) iopl(0xb38) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f0000000240)='./file0\x00', 0x6, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="58291f5df912c76fbe252ea641fef083e269848607bbf8722d08bfaab8d77f87f3013be1327374ee0c77f353b708ce1727948ded298974c2416ec02a60628e191dd7f73630e37afa071b3e9724c24dd16b19e9ede35dd88cfc", 0x59, 0x6}], 0x3, &(0x7f0000000880)={[{@errors_remount='errors=remount-ro', 0x2c}, {@fmask={'fmask', 0x3d, [0x32, 0x32, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'koi8-r'}, 0x2c}, {@show_sys_files_yes={'show_sys_files=yes', 0x3d, [0x3d]}, 0x2c}, {@case_sensitive_no={'case_sensitive=no', 0x3d, [0x34]}, 0x2c}, {@case_sensitive_yes={'case_sensitive=yes', 0x3d, [0x39, 0x36, 0x37]}, 0x2c}]}) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f00000007c0)="323415656742c6bfc1ad4e0cbfa423a4349fe47e473894eb67f6f028dd47d481bd68a67052034f88b01dffdbb65f66d51050e75ddc0bf34fd79c8dfca37ab5b1f5024eb2d5f80730928c5820284f3771f5ba4386dbd0f9509474f9135ea49c41fb80e5e3d83f1d5b6e7496340bb79833cbd0c6570b58a57b62aaa4c5dc482042bf3df743866392850eca93c5f2787b12b40ebc5b45aeabfc0ef7dcf9c793f39c32886e3c5bf6b42fc0b0", 0xaa) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x0, 0x0, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x40, 0x2, 0x8, 0x400, 0x8000000000, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000400)={0x0, 0x80000}) restart_syscall() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 2018/04/12 18:26:44 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/203, &(0x7f0000000180)=0xcb) 2018/04/12 18:26:44 executing program 7: r0 = eventfd(0x80000002) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, &(0x7f0000000200)={0x77359400}, &(0x7f00000002c0), 0x8) readv(r0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/176, 0xb0}], 0x1) 2018/04/12 18:26:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001c00)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b00)=@delpolicy={0x5c, 0x14, 0x421, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14}, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, [@policy_type={0xc, 0x10}]}, 0x5c}, 0x1}, 0x0) 2018/04/12 18:26:45 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x8000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 230.654661] ntfs: (device loop1): parse_options(): The show_sys_files option requires a boolean argument. [ 230.669085] ntfs: (device loop6): parse_options(): The show_sys_files option requires a boolean argument. [ 230.669859] ntfs: (device loop4): parse_options(): The show_sys_files option requires a boolean argument. 2018/04/12 18:26:46 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/203, &(0x7f0000000180)=0xcb) 2018/04/12 18:26:46 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001c00)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b00)=@delpolicy={0x5c, 0x14, 0x421, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14}, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, [@policy_type={0xc, 0x10}]}, 0x5c}, 0x1}, 0x0) 2018/04/12 18:26:46 executing program 1: truncate(&(0x7f00000003c0)='./file0\x00', 0xff) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x2, 0x8, 0x5, 'queue0\x00', 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000), 0x4) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x8, 0xfffffffffffffff9) unlink(&(0x7f0000000580)='./file0\x00') socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000200)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000740), &(0x7f0000000780)=0x4) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000ff01000000000005000000400400003802000028010000ffffffff00000011e8030000e8030000e8030000fffffffefddfc300e803000005000000c489c6912a55627b7c8545d94844794b5b5513055c3ee99974d35514ff261cb24c75e88c1ffe0f42b877e6ce595de06a64fecd6b481555bfe0d5a659bf26d3d5ea9c9833a8772c63d8a4e268a53ac5a7"], 0x1) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) rt_sigqueueinfo(r3, 0x1e, &(0x7f0000000040)={0x0, 0x10000, 0x400, 0x5}) connect$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, "03f4d9931e3bc0a8428581e03ee18838304e624ee8fc12f8abbd026dfd9763ec8618cc07cf99f95baf3052333a69cad313a83de05bce39ab5730be8dda2cb9"}, 0x60) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000100)={'bcsf0\x00'}) iopl(0xb38) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f0000000240)='./file0\x00', 0x6, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="58291f5df912c76fbe252ea641fef083e269848607bbf8722d08bfaab8d77f87f3013be1327374ee0c77f353b708ce1727948ded298974c2416ec02a60628e191dd7f73630e37afa071b3e9724c24dd16b19e9ede35dd88cfc", 0x59, 0x6}], 0x3, &(0x7f0000000880)={[{@errors_remount='errors=remount-ro', 0x2c}, {@fmask={'fmask', 0x3d, [0x32, 0x32, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'koi8-r'}, 0x2c}, {@show_sys_files_yes={'show_sys_files=yes', 0x3d, [0x3d]}, 0x2c}, {@case_sensitive_no={'case_sensitive=no', 0x3d, [0x34]}, 0x2c}, {@case_sensitive_yes={'case_sensitive=yes', 0x3d, [0x39, 0x36, 0x37]}, 0x2c}]}) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f00000007c0)="323415656742c6bfc1ad4e0cbfa423a4349fe47e473894eb67f6f028dd47d481bd68a67052034f88b01dffdbb65f66d51050e75ddc0bf34fd79c8dfca37ab5b1f5024eb2d5f80730928c5820284f3771f5ba4386dbd0f9509474f9135ea49c41fb80e5e3d83f1d5b6e7496340bb79833cbd0c6570b58a57b62aaa4c5dc482042bf3df743866392850eca93c5f2787b12b40ebc5b45aeabfc0ef7dcf9c793f39c32886e3c5bf6b42fc0b0", 0xaa) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x0, 0x0, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x40, 0x2, 0x8, 0x400, 0x8000000000, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000400)={0x0, 0x80000}) restart_syscall() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 2018/04/12 18:26:46 executing program 6: truncate(&(0x7f00000003c0)='./file0\x00', 0xff) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x2, 0x8, 0x5, 'queue0\x00', 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000), 0x4) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x8, 0xfffffffffffffff9) unlink(&(0x7f0000000580)='./file0\x00') socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000200)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000740), &(0x7f0000000780)=0x4) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000ff01000000000005000000400400003802000028010000ffffffff00000011e8030000e8030000e8030000fffffffefddfc300e803000005000000c489c6912a55627b7c8545d94844794b5b5513055c3ee99974d35514ff261cb24c75e88c1ffe0f42b877e6ce595de06a64fecd6b481555bfe0d5a659bf26d3d5ea9c9833a8772c63d8a4e268a53ac5a7"], 0x1) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) rt_sigqueueinfo(r3, 0x1e, &(0x7f0000000040)={0x0, 0x10000, 0x400, 0x5}) connect$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, "03f4d9931e3bc0a8428581e03ee18838304e624ee8fc12f8abbd026dfd9763ec8618cc07cf99f95baf3052333a69cad313a83de05bce39ab5730be8dda2cb9"}, 0x60) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000100)={'bcsf0\x00'}) iopl(0xb38) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f0000000240)='./file0\x00', 0x6, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="58291f5df912c76fbe252ea641fef083e269848607bbf8722d08bfaab8d77f87f3013be1327374ee0c77f353b708ce1727948ded298974c2416ec02a60628e191dd7f73630e37afa071b3e9724c24dd16b19e9ede35dd88cfc", 0x59, 0x6}], 0x3, &(0x7f0000000880)={[{@errors_remount='errors=remount-ro', 0x2c}, {@fmask={'fmask', 0x3d, [0x32, 0x32, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'koi8-r'}, 0x2c}, {@show_sys_files_yes={'show_sys_files=yes', 0x3d, [0x3d]}, 0x2c}, {@case_sensitive_no={'case_sensitive=no', 0x3d, [0x34]}, 0x2c}, {@case_sensitive_yes={'case_sensitive=yes', 0x3d, [0x39, 0x36, 0x37]}, 0x2c}]}) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f00000007c0)="323415656742c6bfc1ad4e0cbfa423a4349fe47e473894eb67f6f028dd47d481bd68a67052034f88b01dffdbb65f66d51050e75ddc0bf34fd79c8dfca37ab5b1f5024eb2d5f80730928c5820284f3771f5ba4386dbd0f9509474f9135ea49c41fb80e5e3d83f1d5b6e7496340bb79833cbd0c6570b58a57b62aaa4c5dc482042bf3df743866392850eca93c5f2787b12b40ebc5b45aeabfc0ef7dcf9c793f39c32886e3c5bf6b42fc0b0", 0xaa) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x0, 0x0, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x40, 0x2, 0x8, 0x400, 0x8000000000, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000400)={0x0, 0x80000}) restart_syscall() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 2018/04/12 18:26:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000999000)="390000001300094700bb61e1c3e4ffff06000000020000004500000020000000190029000d0000000000280f00000007fd17e9ffff06060400", 0x39}], 0x1) 2018/04/12 18:26:46 executing program 4: truncate(&(0x7f00000003c0)='./file0\x00', 0xff) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x2, 0x8, 0x5, 'queue0\x00', 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000), 0x4) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x8, 0xfffffffffffffff9) unlink(&(0x7f0000000580)='./file0\x00') socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000200)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000740), &(0x7f0000000780)=0x4) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000ff01000000000005000000400400003802000028010000ffffffff00000011e8030000e8030000e8030000fffffffefddfc300e803000005000000c489c6912a55627b7c8545d94844794b5b5513055c3ee99974d35514ff261cb24c75e88c1ffe0f42b877e6ce595de06a64fecd6b481555bfe0d5a659bf26d3d5ea9c9833a8772c63d8a4e268a53ac5a7"], 0x1) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) rt_sigqueueinfo(r3, 0x1e, &(0x7f0000000040)={0x0, 0x10000, 0x400, 0x5}) connect$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, "03f4d9931e3bc0a8428581e03ee18838304e624ee8fc12f8abbd026dfd9763ec8618cc07cf99f95baf3052333a69cad313a83de05bce39ab5730be8dda2cb9"}, 0x60) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000100)={'bcsf0\x00'}) iopl(0xb38) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f0000000240)='./file0\x00', 0x6, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="58291f5df912c76fbe252ea641fef083e269848607bbf8722d08bfaab8d77f87f3013be1327374ee0c77f353b708ce1727948ded298974c2416ec02a60628e191dd7f73630e37afa071b3e9724c24dd16b19e9ede35dd88cfc", 0x59, 0x6}], 0x3, &(0x7f0000000880)={[{@errors_remount='errors=remount-ro', 0x2c}, {@fmask={'fmask', 0x3d, [0x32, 0x32, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'koi8-r'}, 0x2c}, {@show_sys_files_yes={'show_sys_files=yes', 0x3d, [0x3d]}, 0x2c}, {@case_sensitive_no={'case_sensitive=no', 0x3d, [0x34]}, 0x2c}, {@case_sensitive_yes={'case_sensitive=yes', 0x3d, [0x39, 0x36, 0x37]}, 0x2c}]}) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f00000007c0)="323415656742c6bfc1ad4e0cbfa423a4349fe47e473894eb67f6f028dd47d481bd68a67052034f88b01dffdbb65f66d51050e75ddc0bf34fd79c8dfca37ab5b1f5024eb2d5f80730928c5820284f3771f5ba4386dbd0f9509474f9135ea49c41fb80e5e3d83f1d5b6e7496340bb79833cbd0c6570b58a57b62aaa4c5dc482042bf3df743866392850eca93c5f2787b12b40ebc5b45aeabfc0ef7dcf9c793f39c32886e3c5bf6b42fc0b0", 0xaa) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x0, 0x0, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x40, 0x2, 0x8, 0x400, 0x8000000000, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000400)={0x0, 0x80000}) restart_syscall() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 2018/04/12 18:26:46 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) write(r0, &(0x7f00000001c0)="4f7ad0c9ed429f765e0211f2eeffe9486f1748144523c0c253773edcf50bbc54c90c0ea1901b4262b411b2ef8c11b3837564025833c9fe3d13", 0x39) r1 = syz_open_pts(r0, 0x41) writev(r1, &(0x7f0000000080)=[{&(0x7f0000dcb000)="14", 0x1}], 0x1) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 2018/04/12 18:26:46 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x8000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 231.677624] ntfs: (device loop1): parse_options(): The show_sys_files option requires a boolean argument. [ 231.690475] validate_nla: 46 callbacks suppressed [ 231.690481] netlink: 'syz-executor2': attribute type 41 has an invalid length. 2018/04/12 18:26:46 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/203, &(0x7f0000000180)=0xcb) 2018/04/12 18:26:46 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(cipher_null))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001880)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="24bb", 0x2}], 0x1, &(0x7f0000001240)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x5c, &(0x7f0000000000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/12 18:26:46 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) write(r0, &(0x7f00000001c0)="4f7ad0c9ed429f765e0211f2eeffe9486f1748144523c0c253773edcf50bbc54c90c0ea1901b4262b411b2ef8c11b3837564025833c9fe3d13", 0x39) r1 = syz_open_pts(r0, 0x41) writev(r1, &(0x7f0000000080)=[{&(0x7f0000dcb000)="14", 0x1}], 0x1) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) [ 231.719745] ntfs: (device loop4): parse_options(): The show_sys_files option requires a boolean argument. [ 231.732480] ntfs: (device loop6): parse_options(): The show_sys_files option requires a boolean argument. 2018/04/12 18:26:46 executing program 1: truncate(&(0x7f00000003c0)='./file0\x00', 0xff) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x2, 0x8, 0x5, 'queue0\x00', 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000), 0x4) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x8, 0xfffffffffffffff9) unlink(&(0x7f0000000580)='./file0\x00') socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000200)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000740), &(0x7f0000000780)=0x4) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000ff01000000000005000000400400003802000028010000ffffffff00000011e8030000e8030000e8030000fffffffefddfc300e803000005000000c489c6912a55627b7c8545d94844794b5b5513055c3ee99974d35514ff261cb24c75e88c1ffe0f42b877e6ce595de06a64fecd6b481555bfe0d5a659bf26d3d5ea9c9833a8772c63d8a4e268a53ac5a7"], 0x1) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) rt_sigqueueinfo(r3, 0x1e, &(0x7f0000000040)={0x0, 0x10000, 0x400, 0x5}) connect$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, "03f4d9931e3bc0a8428581e03ee18838304e624ee8fc12f8abbd026dfd9763ec8618cc07cf99f95baf3052333a69cad313a83de05bce39ab5730be8dda2cb9"}, 0x60) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000100)={'bcsf0\x00'}) iopl(0xb38) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f0000000240)='./file0\x00', 0x6, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="58291f5df912c76fbe252ea641fef083e269848607bbf8722d08bfaab8d77f87f3013be1327374ee0c77f353b708ce1727948ded298974c2416ec02a60628e191dd7f73630e37afa071b3e9724c24dd16b19e9ede35dd88cfc", 0x59, 0x6}], 0x3, &(0x7f0000000880)={[{@errors_remount='errors=remount-ro', 0x2c}, {@fmask={'fmask', 0x3d, [0x32, 0x32, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'koi8-r'}, 0x2c}, {@show_sys_files_yes={'show_sys_files=yes', 0x3d, [0x3d]}, 0x2c}, {@case_sensitive_no={'case_sensitive=no', 0x3d, [0x34]}, 0x2c}, {@case_sensitive_yes={'case_sensitive=yes', 0x3d, [0x39, 0x36, 0x37]}, 0x2c}]}) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f00000007c0)="323415656742c6bfc1ad4e0cbfa423a4349fe47e473894eb67f6f028dd47d481bd68a67052034f88b01dffdbb65f66d51050e75ddc0bf34fd79c8dfca37ab5b1f5024eb2d5f80730928c5820284f3771f5ba4386dbd0f9509474f9135ea49c41fb80e5e3d83f1d5b6e7496340bb79833cbd0c6570b58a57b62aaa4c5dc482042bf3df743866392850eca93c5f2787b12b40ebc5b45aeabfc0ef7dcf9c793f39c32886e3c5bf6b42fc0b0", 0xaa) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x0, 0x0, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x40, 0x2, 0x8, 0x400, 0x8000000000, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000400)={0x0, 0x80000}) restart_syscall() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 2018/04/12 18:26:46 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x8000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2018/04/12 18:26:46 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/203, &(0x7f0000000180)=0xcb) 2018/04/12 18:26:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000999000)="390000001300094700bb61e1c3e4ffff06000000020000004500000020000000190029000d0000000000280f00000007fd17e9ffff06060400", 0x39}], 0x1) 2018/04/12 18:26:46 executing program 4: truncate(&(0x7f00000003c0)='./file0\x00', 0xff) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x2, 0x8, 0x5, 'queue0\x00', 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000), 0x4) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x8, 0xfffffffffffffff9) unlink(&(0x7f0000000580)='./file0\x00') socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000200)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000740), &(0x7f0000000780)=0x4) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000ff01000000000005000000400400003802000028010000ffffffff00000011e8030000e8030000e8030000fffffffefddfc300e803000005000000c489c6912a55627b7c8545d94844794b5b5513055c3ee99974d35514ff261cb24c75e88c1ffe0f42b877e6ce595de06a64fecd6b481555bfe0d5a659bf26d3d5ea9c9833a8772c63d8a4e268a53ac5a7"], 0x1) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) rt_sigqueueinfo(r3, 0x1e, &(0x7f0000000040)={0x0, 0x10000, 0x400, 0x5}) connect$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, "03f4d9931e3bc0a8428581e03ee18838304e624ee8fc12f8abbd026dfd9763ec8618cc07cf99f95baf3052333a69cad313a83de05bce39ab5730be8dda2cb9"}, 0x60) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000100)={'bcsf0\x00'}) iopl(0xb38) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f0000000240)='./file0\x00', 0x6, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="58291f5df912c76fbe252ea641fef083e269848607bbf8722d08bfaab8d77f87f3013be1327374ee0c77f353b708ce1727948ded298974c2416ec02a60628e191dd7f73630e37afa071b3e9724c24dd16b19e9ede35dd88cfc", 0x59, 0x6}], 0x3, &(0x7f0000000880)={[{@errors_remount='errors=remount-ro', 0x2c}, {@fmask={'fmask', 0x3d, [0x32, 0x32, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'koi8-r'}, 0x2c}, {@show_sys_files_yes={'show_sys_files=yes', 0x3d, [0x3d]}, 0x2c}, {@case_sensitive_no={'case_sensitive=no', 0x3d, [0x34]}, 0x2c}, {@case_sensitive_yes={'case_sensitive=yes', 0x3d, [0x39, 0x36, 0x37]}, 0x2c}]}) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f00000007c0)="323415656742c6bfc1ad4e0cbfa423a4349fe47e473894eb67f6f028dd47d481bd68a67052034f88b01dffdbb65f66d51050e75ddc0bf34fd79c8dfca37ab5b1f5024eb2d5f80730928c5820284f3771f5ba4386dbd0f9509474f9135ea49c41fb80e5e3d83f1d5b6e7496340bb79833cbd0c6570b58a57b62aaa4c5dc482042bf3df743866392850eca93c5f2787b12b40ebc5b45aeabfc0ef7dcf9c793f39c32886e3c5bf6b42fc0b0", 0xaa) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x0, 0x0, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x40, 0x2, 0x8, 0x400, 0x8000000000, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000400)={0x0, 0x80000}) restart_syscall() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 2018/04/12 18:26:46 executing program 6: truncate(&(0x7f00000003c0)='./file0\x00', 0xff) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x2, 0x8, 0x5, 'queue0\x00', 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000), 0x4) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x8, 0xfffffffffffffff9) unlink(&(0x7f0000000580)='./file0\x00') socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000200)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000740), &(0x7f0000000780)=0x4) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000ff01000000000005000000400400003802000028010000ffffffff00000011e8030000e8030000e8030000fffffffefddfc300e803000005000000c489c6912a55627b7c8545d94844794b5b5513055c3ee99974d35514ff261cb24c75e88c1ffe0f42b877e6ce595de06a64fecd6b481555bfe0d5a659bf26d3d5ea9c9833a8772c63d8a4e268a53ac5a7"], 0x1) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) rt_sigqueueinfo(r3, 0x1e, &(0x7f0000000040)={0x0, 0x10000, 0x400, 0x5}) connect$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, "03f4d9931e3bc0a8428581e03ee18838304e624ee8fc12f8abbd026dfd9763ec8618cc07cf99f95baf3052333a69cad313a83de05bce39ab5730be8dda2cb9"}, 0x60) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000100)={'bcsf0\x00'}) iopl(0xb38) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f0000000240)='./file0\x00', 0x6, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="58291f5df912c76fbe252ea641fef083e269848607bbf8722d08bfaab8d77f87f3013be1327374ee0c77f353b708ce1727948ded298974c2416ec02a60628e191dd7f73630e37afa071b3e9724c24dd16b19e9ede35dd88cfc", 0x59, 0x6}], 0x3, &(0x7f0000000880)={[{@errors_remount='errors=remount-ro', 0x2c}, {@fmask={'fmask', 0x3d, [0x32, 0x32, 0x30]}, 0x2c}, {@nls={'nls', 0x3d, 'koi8-r'}, 0x2c}, {@show_sys_files_yes={'show_sys_files=yes', 0x3d, [0x3d]}, 0x2c}, {@case_sensitive_no={'case_sensitive=no', 0x3d, [0x34]}, 0x2c}, {@case_sensitive_yes={'case_sensitive=yes', 0x3d, [0x39, 0x36, 0x37]}, 0x2c}]}) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f00000007c0)="323415656742c6bfc1ad4e0cbfa423a4349fe47e473894eb67f6f028dd47d481bd68a67052034f88b01dffdbb65f66d51050e75ddc0bf34fd79c8dfca37ab5b1f5024eb2d5f80730928c5820284f3771f5ba4386dbd0f9509474f9135ea49c41fb80e5e3d83f1d5b6e7496340bb79833cbd0c6570b58a57b62aaa4c5dc482042bf3df743866392850eca93c5f2787b12b40ebc5b45aeabfc0ef7dcf9c793f39c32886e3c5bf6b42fc0b0", 0xaa) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x0, 0x0, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x40, 0x2, 0x8, 0x400, 0x8000000000, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000400)={0x0, 0x80000}) restart_syscall() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) [ 231.843752] ntfs: (device loop1): parse_options(): The show_sys_files option requires a boolean argument. 2018/04/12 18:26:46 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001240), 0x0, &(0x7f00000012c0)={[{@block={'block', 0x3d, [0x38]}, 0x2c}]}) [ 231.905520] netlink: 'syz-executor2': attribute type 41 has an invalid length. [ 231.961488] ntfs: (device loop6): parse_options(): The show_sys_files option requires a boolean argument. 2018/04/12 18:26:47 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x8000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2018/04/12 18:26:47 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001240), 0x0, &(0x7f00000012c0)={[{@block={'block', 0x3d, [0x38]}, 0x2c}]}) 2018/04/12 18:26:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(cipher_null))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001880)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="24bb", 0x2}], 0x1, &(0x7f0000001240)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x5c, &(0x7f0000000000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/12 18:26:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000999000)="390000001300094700bb61e1c3e4ffff06000000020000004500000020000000190029000d0000000000280f00000007fd17e9ffff06060400", 0x39}], 0x1) 2018/04/12 18:26:47 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) write(r0, &(0x7f00000001c0)="4f7ad0c9ed429f765e0211f2eeffe9486f1748144523c0c253773edcf50bbc54c90c0ea1901b4262b411b2ef8c11b3837564025833c9fe3d13", 0x39) r1 = syz_open_pts(r0, 0x41) writev(r1, &(0x7f0000000080)=[{&(0x7f0000dcb000)="14", 0x1}], 0x1) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 2018/04/12 18:26:47 executing program 6: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x114, 0x3, &(0x7f0000000740)={{{@in6, @in6=@dev={0xfe, 0x80}}}, {{@in6=@loopback={0x0, 0x1}}, 0x0, @in=@multicast2=0xe0000002}}, 0x10) 2018/04/12 18:26:47 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r1) sendmsg$netlink(r2, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000011000), 0x0, &(0x7f00000001c0)}, 0x2) 2018/04/12 18:26:47 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000c1aff9)='ns/uts\x00') setns(r0, 0x4000002) [ 232.744517] netlink: 'syz-executor2': attribute type 41 has an invalid length. 2018/04/12 18:26:47 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r1) sendmsg$netlink(r2, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000011000), 0x0, &(0x7f00000001c0)}, 0x2) 2018/04/12 18:26:47 executing program 6: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x114, 0x3, &(0x7f0000000740)={{{@in6, @in6=@dev={0xfe, 0x80}}}, {{@in6=@loopback={0x0, 0x1}}, 0x0, @in=@multicast2=0xe0000002}}, 0x10) 2018/04/12 18:26:47 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000c1aff9)='ns/uts\x00') setns(r0, 0x4000002) 2018/04/12 18:26:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(cipher_null))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001880)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="24bb", 0x2}], 0x1, &(0x7f0000001240)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x5c, &(0x7f0000000000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/12 18:26:47 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001240), 0x0, &(0x7f00000012c0)={[{@block={'block', 0x3d, [0x38]}, 0x2c}]}) 2018/04/12 18:26:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000999000)="390000001300094700bb61e1c3e4ffff06000000020000004500000020000000190029000d0000000000280f00000007fd17e9ffff06060400", 0x39}], 0x1) 2018/04/12 18:26:47 executing program 5: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x10d, 0xa, &(0x7f00009b4000)=@raw={'raw\x00', 0x9, 0x4, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0x70, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4, &(0x7f0000455000), {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) 2018/04/12 18:26:47 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r1) sendmsg$netlink(r2, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000011000), 0x0, &(0x7f00000001c0)}, 0x2) 2018/04/12 18:26:47 executing program 6: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x114, 0x3, &(0x7f0000000740)={{{@in6, @in6=@dev={0xfe, 0x80}}}, {{@in6=@loopback={0x0, 0x1}}, 0x0, @in=@multicast2=0xe0000002}}, 0x10) [ 232.951678] netlink: 'syz-executor2': attribute type 41 has an invalid length. 2018/04/12 18:26:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000c1aff9)='ns/uts\x00') setns(r0, 0x4000002) 2018/04/12 18:26:48 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001240), 0x0, &(0x7f00000012c0)={[{@block={'block', 0x3d, [0x38]}, 0x2c}]}) 2018/04/12 18:26:48 executing program 5: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x10d, 0xa, &(0x7f00009b4000)=@raw={'raw\x00', 0x9, 0x4, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0x70, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4, &(0x7f0000455000), {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) 2018/04/12 18:26:48 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(cipher_null))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001880)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="24bb", 0x2}], 0x1, &(0x7f0000001240)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x5c, &(0x7f0000000000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/12 18:26:48 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2) io_setup(0x469, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f00000016c0)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)}]) 2018/04/12 18:26:48 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r1) sendmsg$netlink(r2, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000011000), 0x0, &(0x7f00000001c0)}, 0x2) 2018/04/12 18:26:48 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) write(r0, &(0x7f00000001c0)="4f7ad0c9ed429f765e0211f2eeffe9486f1748144523c0c253773edcf50bbc54c90c0ea1901b4262b411b2ef8c11b3837564025833c9fe3d13", 0x39) r1 = syz_open_pts(r0, 0x41) writev(r1, &(0x7f0000000080)=[{&(0x7f0000dcb000)="14", 0x1}], 0x1) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 2018/04/12 18:26:48 executing program 6: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x114, 0x3, &(0x7f0000000740)={{{@in6, @in6=@dev={0xfe, 0x80}}}, {{@in6=@loopback={0x0, 0x1}}, 0x0, @in=@multicast2=0xe0000002}}, 0x10) 2018/04/12 18:26:48 executing program 5: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x10d, 0xa, &(0x7f00009b4000)=@raw={'raw\x00', 0x9, 0x4, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0x70, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4, &(0x7f0000455000), {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) 2018/04/12 18:26:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000c1aff9)='ns/uts\x00') setns(r0, 0x4000002) 2018/04/12 18:26:48 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000400008fe7bb5cd4e344cd0002800000720a00ff"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5, 0x0, 0xffffffcd}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) 2018/04/12 18:26:48 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2) io_setup(0x469, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f00000016c0)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)}]) 2018/04/12 18:26:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns/ipc\x00') fremovexattr(r0, &(0x7f0000000000)=@known='security.evm\x00') 2018/04/12 18:26:48 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = shmget(0x2, 0x2000, 0x200, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_RMID(r0, 0x0) 2018/04/12 18:26:48 executing program 6: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff)) r0 = creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_notify(r0, &(0x7f0000477fa0)={0x0, 0x0, 0x0, @thr={&(0x7f0000bc8000), &(0x7f0000589000)}}) close(r0) 2018/04/12 18:26:48 executing program 5: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x10d, 0xa, &(0x7f00009b4000)=@raw={'raw\x00', 0x9, 0x4, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0x70, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4, &(0x7f0000455000), {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) 2018/04/12 18:26:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000032cff7)='/dev/kvm\x00', 0x0, 0x0) r1 = eventfd2(0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000071fe0)={r1}) write$eventfd(r1, &(0x7f0000000080), 0x8) 2018/04/12 18:26:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns/ipc\x00') fremovexattr(r0, &(0x7f0000000000)=@known='security.evm\x00') 2018/04/12 18:26:48 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2) io_setup(0x469, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f00000016c0)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)}]) 2018/04/12 18:26:48 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000400008fe7bb5cd4e344cd0002800000720a00ff"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5, 0x0, 0xffffffcd}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) 2018/04/12 18:26:48 executing program 0: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendmsg$rds(r0, &(0x7f0000000c40)={&(0x7f0000000240)={0x2, 0x0, @rand_addr=0xffff}, 0x10, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/22, 0x16}, {&(0x7f0000000400)=""/212, 0xd4}, {&(0x7f0000000500)=""/52, 0x34}, {&(0x7f0000000540)=""/231, 0xe7}, {&(0x7f0000000640)=""/188, 0xbc}, {&(0x7f0000000700)=""/67, 0x43}], 0x6, &(0x7f0000000b00)=ANY=[@ANYBLOB="3000000000000000140100000300"], 0xe, 0x1}, 0x40000) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000100)={0x0, 0x3, 0x1, 0x2, 0x13, 0x7fff}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4) r2 = socket(0x40000000015, 0x1, 0xfffffffffffffffc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000000)=0x100000000, 0x4) setreuid(0x0, r4) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) ptrace$peekuser(0x3, r3, 0x5) fcntl$getownex(r5, 0x10, &(0x7f0000000300)={0x0, 0x0}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f000010aff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r7, 0x541f, 0xffffffffffffff88) ptrace$setopts(0x4206, r6, 0x0, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000c80)={{0xa, 0x4e24, 0x6cf5, @loopback={0x0, 0x1}, 0xa1}, {0xa, 0x4e20, 0xff, @remote={0xfe, 0x80, [], 0xbb}, 0xffffffffffffffc0}, 0x0, [0x9, 0x1, 0x1f, 0x8, 0x8, 0xa8, 0x4, 0x5763badf]}, 0x5c) r9 = add_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000300)="64e2ac15c6aab872075a6392705ee2d9ccd29b0c9b87f7443e8879b1221232c9ca89b1a0bbb510846a7906000000366852f3633a246c801fd939bcd0472b95db041dc47682c7461ff6a0e210f4ceac1264afd613cc09ae6b2042b3a3efdfebe828980292c3a6529c5ab6906e0516b682013d1a0eaa626fc989d54b21a27ad624ad1dbdbc444b7e06d88bffe1edda7560c0bc722d9b16c0fd96e358b7ce30056723e6425648fa5c0e7679a38abcafd7ba000000000000", 0xb6, 0xfffffffffffffffb) request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000001200)='big_key\x00', r9) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket(0x15, 0x80005, 0x0) getsockopt(r10, 0x100000114, 0x2711, &(0x7f0000000000)=""/40, &(0x7f0000dcaffc)=0xfcc6) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000800)=0xffffffffffff79e9) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)={0xb, 0x5, 0x1, 0x5, 0x12, r0, 0x1f}, 0x2c) accept$ax25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000008c0)=0x7, 0x4) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000880)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) 2018/04/12 18:26:48 executing program 6: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff)) r0 = creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_notify(r0, &(0x7f0000477fa0)={0x0, 0x0, 0x0, @thr={&(0x7f0000bc8000), &(0x7f0000589000)}}) close(r0) 2018/04/12 18:26:48 executing program 7: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f0000043ff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(r1, &(0x7f000086ffc8)={&(0x7f0000af4000)=@ethernet={0x0, @remote}, 0x10, &(0x7f0000b5efc0)=[{&(0x7f0000102000)=""/1, 0x1}], 0x1, &(0x7f0000c2f000)=""/16, 0x10}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x80000000032, 0xffffffffffffffff, 0x0) shutdown(r0, 0x2) 2018/04/12 18:26:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000008000)={&(0x7f000000c000)={0x10, 0x34000}, 0xc, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x2e, 0x301, 0x0, 0x0, {0x3}, [@typed={0x8, 0x0, @u32}]}, 0x8c}, 0x1}, 0x0) 2018/04/12 18:26:49 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2) io_setup(0x469, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f00000016c0)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)}]) [ 234.635279] nla_parse: 46 callbacks suppressed [ 234.635300] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. 2018/04/12 18:26:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns/ipc\x00') fremovexattr(r0, &(0x7f0000000000)=@known='security.evm\x00') 2018/04/12 18:26:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000008000)={&(0x7f000000c000)={0x10, 0x34000}, 0xc, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x2e, 0x301, 0x0, 0x0, {0x3}, [@typed={0x8, 0x0, @u32}]}, 0x8c}, 0x1}, 0x0) 2018/04/12 18:26:49 executing program 6: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff)) r0 = creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_notify(r0, &(0x7f0000477fa0)={0x0, 0x0, 0x0, @thr={&(0x7f0000bc8000), &(0x7f0000589000)}}) close(r0) 2018/04/12 18:26:49 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000400008fe7bb5cd4e344cd0002800000720a00ff"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5, 0x0, 0xffffffcd}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) 2018/04/12 18:26:49 executing program 0: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendmsg$rds(r0, &(0x7f0000000c40)={&(0x7f0000000240)={0x2, 0x0, @rand_addr=0xffff}, 0x10, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/22, 0x16}, {&(0x7f0000000400)=""/212, 0xd4}, {&(0x7f0000000500)=""/52, 0x34}, {&(0x7f0000000540)=""/231, 0xe7}, {&(0x7f0000000640)=""/188, 0xbc}, {&(0x7f0000000700)=""/67, 0x43}], 0x6, &(0x7f0000000b00)=ANY=[@ANYBLOB="3000000000000000140100000300"], 0xe, 0x1}, 0x40000) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000100)={0x0, 0x3, 0x1, 0x2, 0x13, 0x7fff}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4) r2 = socket(0x40000000015, 0x1, 0xfffffffffffffffc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000000)=0x100000000, 0x4) setreuid(0x0, r4) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) ptrace$peekuser(0x3, r3, 0x5) fcntl$getownex(r5, 0x10, &(0x7f0000000300)={0x0, 0x0}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f000010aff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r7, 0x541f, 0xffffffffffffff88) ptrace$setopts(0x4206, r6, 0x0, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000c80)={{0xa, 0x4e24, 0x6cf5, @loopback={0x0, 0x1}, 0xa1}, {0xa, 0x4e20, 0xff, @remote={0xfe, 0x80, [], 0xbb}, 0xffffffffffffffc0}, 0x0, [0x9, 0x1, 0x1f, 0x8, 0x8, 0xa8, 0x4, 0x5763badf]}, 0x5c) r9 = add_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000300)="64e2ac15c6aab872075a6392705ee2d9ccd29b0c9b87f7443e8879b1221232c9ca89b1a0bbb510846a7906000000366852f3633a246c801fd939bcd0472b95db041dc47682c7461ff6a0e210f4ceac1264afd613cc09ae6b2042b3a3efdfebe828980292c3a6529c5ab6906e0516b682013d1a0eaa626fc989d54b21a27ad624ad1dbdbc444b7e06d88bffe1edda7560c0bc722d9b16c0fd96e358b7ce30056723e6425648fa5c0e7679a38abcafd7ba000000000000", 0xb6, 0xfffffffffffffffb) request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000001200)='big_key\x00', r9) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket(0x15, 0x80005, 0x0) getsockopt(r10, 0x100000114, 0x2711, &(0x7f0000000000)=""/40, &(0x7f0000dcaffc)=0xfcc6) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000800)=0xffffffffffff79e9) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)={0xb, 0x5, 0x1, 0x5, 0x12, r0, 0x1f}, 0x2c) accept$ax25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000008c0)=0x7, 0x4) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000880)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) 2018/04/12 18:26:49 executing program 2: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendmsg$rds(r0, &(0x7f0000000c40)={&(0x7f0000000240)={0x2, 0x0, @rand_addr=0xffff}, 0x10, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/22, 0x16}, {&(0x7f0000000400)=""/212, 0xd4}, {&(0x7f0000000500)=""/52, 0x34}, {&(0x7f0000000540)=""/231, 0xe7}, {&(0x7f0000000640)=""/188, 0xbc}, {&(0x7f0000000700)=""/67, 0x43}], 0x6, &(0x7f0000000b00)=ANY=[@ANYBLOB="3000000000000000140100000300"], 0xe, 0x1}, 0x40000) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000100)={0x0, 0x3, 0x1, 0x2, 0x13, 0x7fff}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4) r2 = socket(0x40000000015, 0x1, 0xfffffffffffffffc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000000)=0x100000000, 0x4) setreuid(0x0, r4) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) ptrace$peekuser(0x3, r3, 0x5) fcntl$getownex(r5, 0x10, &(0x7f0000000300)={0x0, 0x0}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f000010aff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r7, 0x541f, 0xffffffffffffff88) ptrace$setopts(0x4206, r6, 0x0, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000c80)={{0xa, 0x4e24, 0x6cf5, @loopback={0x0, 0x1}, 0xa1}, {0xa, 0x4e20, 0xff, @remote={0xfe, 0x80, [], 0xbb}, 0xffffffffffffffc0}, 0x0, [0x9, 0x1, 0x1f, 0x8, 0x8, 0xa8, 0x4, 0x5763badf]}, 0x5c) r9 = add_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000300)="64e2ac15c6aab872075a6392705ee2d9ccd29b0c9b87f7443e8879b1221232c9ca89b1a0bbb510846a7906000000366852f3633a246c801fd939bcd0472b95db041dc47682c7461ff6a0e210f4ceac1264afd613cc09ae6b2042b3a3efdfebe828980292c3a6529c5ab6906e0516b682013d1a0eaa626fc989d54b21a27ad624ad1dbdbc444b7e06d88bffe1edda7560c0bc722d9b16c0fd96e358b7ce30056723e6425648fa5c0e7679a38abcafd7ba000000000000", 0xb6, 0xfffffffffffffffb) request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000001200)='big_key\x00', r9) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket(0x15, 0x80005, 0x0) getsockopt(r10, 0x100000114, 0x2711, &(0x7f0000000000)=""/40, &(0x7f0000dcaffc)=0xfcc6) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000800)=0xffffffffffff79e9) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)={0xb, 0x5, 0x1, 0x5, 0x12, r0, 0x1f}, 0x2c) accept$ax25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000008c0)=0x7, 0x4) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000880)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) [ 234.775200] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. 2018/04/12 18:26:49 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000400008fe7bb5cd4e344cd0002800000720a00ff"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5, 0x0, 0xffffffcd}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) 2018/04/12 18:26:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns/ipc\x00') fremovexattr(r0, &(0x7f0000000000)=@known='security.evm\x00') 2018/04/12 18:26:49 executing program 6: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff)) r0 = creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_notify(r0, &(0x7f0000477fa0)={0x0, 0x0, 0x0, @thr={&(0x7f0000bc8000), &(0x7f0000589000)}}) close(r0) 2018/04/12 18:26:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000008000)={&(0x7f000000c000)={0x10, 0x34000}, 0xc, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x2e, 0x301, 0x0, 0x0, {0x3}, [@typed={0x8, 0x0, @u32}]}, 0x8c}, 0x1}, 0x0) 2018/04/12 18:26:49 executing program 4: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendmsg$rds(r0, &(0x7f0000000c40)={&(0x7f0000000240)={0x2, 0x0, @rand_addr=0xffff}, 0x10, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/22, 0x16}, {&(0x7f0000000400)=""/212, 0xd4}, {&(0x7f0000000500)=""/52, 0x34}, {&(0x7f0000000540)=""/231, 0xe7}, {&(0x7f0000000640)=""/188, 0xbc}, {&(0x7f0000000700)=""/67, 0x43}], 0x6, &(0x7f0000000b00)=ANY=[@ANYBLOB="3000000000000000140100000300"], 0xe, 0x1}, 0x40000) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000100)={0x0, 0x3, 0x1, 0x2, 0x13, 0x7fff}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4) r2 = socket(0x40000000015, 0x1, 0xfffffffffffffffc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000000)=0x100000000, 0x4) setreuid(0x0, r4) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) ptrace$peekuser(0x3, r3, 0x5) fcntl$getownex(r5, 0x10, &(0x7f0000000300)={0x0, 0x0}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f000010aff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r7, 0x541f, 0xffffffffffffff88) ptrace$setopts(0x4206, r6, 0x0, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000c80)={{0xa, 0x4e24, 0x6cf5, @loopback={0x0, 0x1}, 0xa1}, {0xa, 0x4e20, 0xff, @remote={0xfe, 0x80, [], 0xbb}, 0xffffffffffffffc0}, 0x0, [0x9, 0x1, 0x1f, 0x8, 0x8, 0xa8, 0x4, 0x5763badf]}, 0x5c) r9 = add_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000300)="64e2ac15c6aab872075a6392705ee2d9ccd29b0c9b87f7443e8879b1221232c9ca89b1a0bbb510846a7906000000366852f3633a246c801fd939bcd0472b95db041dc47682c7461ff6a0e210f4ceac1264afd613cc09ae6b2042b3a3efdfebe828980292c3a6529c5ab6906e0516b682013d1a0eaa626fc989d54b21a27ad624ad1dbdbc444b7e06d88bffe1edda7560c0bc722d9b16c0fd96e358b7ce30056723e6425648fa5c0e7679a38abcafd7ba000000000000", 0xb6, 0xfffffffffffffffb) request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000001200)='big_key\x00', r9) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket(0x15, 0x80005, 0x0) getsockopt(r10, 0x100000114, 0x2711, &(0x7f0000000000)=""/40, &(0x7f0000dcaffc)=0xfcc6) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000800)=0xffffffffffff79e9) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)={0xb, 0x5, 0x1, 0x5, 0x12, r0, 0x1f}, 0x2c) accept$ax25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000008c0)=0x7, 0x4) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000880)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) 2018/04/12 18:26:49 executing program 2: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendmsg$rds(r0, &(0x7f0000000c40)={&(0x7f0000000240)={0x2, 0x0, @rand_addr=0xffff}, 0x10, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/22, 0x16}, {&(0x7f0000000400)=""/212, 0xd4}, {&(0x7f0000000500)=""/52, 0x34}, {&(0x7f0000000540)=""/231, 0xe7}, {&(0x7f0000000640)=""/188, 0xbc}, {&(0x7f0000000700)=""/67, 0x43}], 0x6, &(0x7f0000000b00)=ANY=[@ANYBLOB="3000000000000000140100000300"], 0xe, 0x1}, 0x40000) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000100)={0x0, 0x3, 0x1, 0x2, 0x13, 0x7fff}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4) r2 = socket(0x40000000015, 0x1, 0xfffffffffffffffc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000000)=0x100000000, 0x4) setreuid(0x0, r4) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) ptrace$peekuser(0x3, r3, 0x5) fcntl$getownex(r5, 0x10, &(0x7f0000000300)={0x0, 0x0}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f000010aff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r7, 0x541f, 0xffffffffffffff88) ptrace$setopts(0x4206, r6, 0x0, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000c80)={{0xa, 0x4e24, 0x6cf5, @loopback={0x0, 0x1}, 0xa1}, {0xa, 0x4e20, 0xff, @remote={0xfe, 0x80, [], 0xbb}, 0xffffffffffffffc0}, 0x0, [0x9, 0x1, 0x1f, 0x8, 0x8, 0xa8, 0x4, 0x5763badf]}, 0x5c) r9 = add_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000300)="64e2ac15c6aab872075a6392705ee2d9ccd29b0c9b87f7443e8879b1221232c9ca89b1a0bbb510846a7906000000366852f3633a246c801fd939bcd0472b95db041dc47682c7461ff6a0e210f4ceac1264afd613cc09ae6b2042b3a3efdfebe828980292c3a6529c5ab6906e0516b682013d1a0eaa626fc989d54b21a27ad624ad1dbdbc444b7e06d88bffe1edda7560c0bc722d9b16c0fd96e358b7ce30056723e6425648fa5c0e7679a38abcafd7ba000000000000", 0xb6, 0xfffffffffffffffb) request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000001200)='big_key\x00', r9) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket(0x15, 0x80005, 0x0) getsockopt(r10, 0x100000114, 0x2711, &(0x7f0000000000)=""/40, &(0x7f0000dcaffc)=0xfcc6) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000800)=0xffffffffffff79e9) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)={0xb, 0x5, 0x1, 0x5, 0x12, r0, 0x1f}, 0x2c) accept$ax25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000008c0)=0x7, 0x4) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000880)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) 2018/04/12 18:26:49 executing program 7: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f0000043ff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(r1, &(0x7f000086ffc8)={&(0x7f0000af4000)=@ethernet={0x0, @remote}, 0x10, &(0x7f0000b5efc0)=[{&(0x7f0000102000)=""/1, 0x1}], 0x1, &(0x7f0000c2f000)=""/16, 0x10}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x80000000032, 0xffffffffffffffff, 0x0) shutdown(r0, 0x2) 2018/04/12 18:26:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000032cff7)='/dev/kvm\x00', 0x0, 0x0) r1 = eventfd2(0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000071fe0)={r1}) write$eventfd(r1, &(0x7f0000000080), 0x8) 2018/04/12 18:26:49 executing program 0: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendmsg$rds(r0, &(0x7f0000000c40)={&(0x7f0000000240)={0x2, 0x0, @rand_addr=0xffff}, 0x10, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/22, 0x16}, {&(0x7f0000000400)=""/212, 0xd4}, {&(0x7f0000000500)=""/52, 0x34}, {&(0x7f0000000540)=""/231, 0xe7}, {&(0x7f0000000640)=""/188, 0xbc}, {&(0x7f0000000700)=""/67, 0x43}], 0x6, &(0x7f0000000b00)=ANY=[@ANYBLOB="3000000000000000140100000300"], 0xe, 0x1}, 0x40000) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000100)={0x0, 0x3, 0x1, 0x2, 0x13, 0x7fff}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4) r2 = socket(0x40000000015, 0x1, 0xfffffffffffffffc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000000)=0x100000000, 0x4) setreuid(0x0, r4) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) ptrace$peekuser(0x3, r3, 0x5) fcntl$getownex(r5, 0x10, &(0x7f0000000300)={0x0, 0x0}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f000010aff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r7, 0x541f, 0xffffffffffffff88) ptrace$setopts(0x4206, r6, 0x0, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000c80)={{0xa, 0x4e24, 0x6cf5, @loopback={0x0, 0x1}, 0xa1}, {0xa, 0x4e20, 0xff, @remote={0xfe, 0x80, [], 0xbb}, 0xffffffffffffffc0}, 0x0, [0x9, 0x1, 0x1f, 0x8, 0x8, 0xa8, 0x4, 0x5763badf]}, 0x5c) r9 = add_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000300)="64e2ac15c6aab872075a6392705ee2d9ccd29b0c9b87f7443e8879b1221232c9ca89b1a0bbb510846a7906000000366852f3633a246c801fd939bcd0472b95db041dc47682c7461ff6a0e210f4ceac1264afd613cc09ae6b2042b3a3efdfebe828980292c3a6529c5ab6906e0516b682013d1a0eaa626fc989d54b21a27ad624ad1dbdbc444b7e06d88bffe1edda7560c0bc722d9b16c0fd96e358b7ce30056723e6425648fa5c0e7679a38abcafd7ba000000000000", 0xb6, 0xfffffffffffffffb) request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000001200)='big_key\x00', r9) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket(0x15, 0x80005, 0x0) getsockopt(r10, 0x100000114, 0x2711, &(0x7f0000000000)=""/40, &(0x7f0000dcaffc)=0xfcc6) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000800)=0xffffffffffff79e9) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)={0xb, 0x5, 0x1, 0x5, 0x12, r0, 0x1f}, 0x2c) accept$ax25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000008c0)=0x7, 0x4) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000880)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) 2018/04/12 18:26:49 executing program 1: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendmsg$rds(r0, &(0x7f0000000c40)={&(0x7f0000000240)={0x2, 0x0, @rand_addr=0xffff}, 0x10, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/22, 0x16}, {&(0x7f0000000400)=""/212, 0xd4}, {&(0x7f0000000500)=""/52, 0x34}, {&(0x7f0000000540)=""/231, 0xe7}, {&(0x7f0000000640)=""/188, 0xbc}, {&(0x7f0000000700)=""/67, 0x43}], 0x6, &(0x7f0000000b00)=ANY=[@ANYBLOB="3000000000000000140100000300"], 0xe, 0x1}, 0x40000) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000100)={0x0, 0x3, 0x1, 0x2, 0x13, 0x7fff}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4) r2 = socket(0x40000000015, 0x1, 0xfffffffffffffffc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000000)=0x100000000, 0x4) setreuid(0x0, r4) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) ptrace$peekuser(0x3, r3, 0x5) fcntl$getownex(r5, 0x10, &(0x7f0000000300)={0x0, 0x0}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f000010aff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r7, 0x541f, 0xffffffffffffff88) ptrace$setopts(0x4206, r6, 0x0, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000c80)={{0xa, 0x4e24, 0x6cf5, @loopback={0x0, 0x1}, 0xa1}, {0xa, 0x4e20, 0xff, @remote={0xfe, 0x80, [], 0xbb}, 0xffffffffffffffc0}, 0x0, [0x9, 0x1, 0x1f, 0x8, 0x8, 0xa8, 0x4, 0x5763badf]}, 0x5c) r9 = add_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000300)="64e2ac15c6aab872075a6392705ee2d9ccd29b0c9b87f7443e8879b1221232c9ca89b1a0bbb510846a7906000000366852f3633a246c801fd939bcd0472b95db041dc47682c7461ff6a0e210f4ceac1264afd613cc09ae6b2042b3a3efdfebe828980292c3a6529c5ab6906e0516b682013d1a0eaa626fc989d54b21a27ad624ad1dbdbc444b7e06d88bffe1edda7560c0bc722d9b16c0fd96e358b7ce30056723e6425648fa5c0e7679a38abcafd7ba000000000000", 0xb6, 0xfffffffffffffffb) request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000001200)='big_key\x00', r9) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket(0x15, 0x80005, 0x0) getsockopt(r10, 0x100000114, 0x2711, &(0x7f0000000000)=""/40, &(0x7f0000dcaffc)=0xfcc6) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000800)=0xffffffffffff79e9) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)={0xb, 0x5, 0x1, 0x5, 0x12, r0, 0x1f}, 0x2c) accept$ax25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000008c0)=0x7, 0x4) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000880)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) 2018/04/12 18:26:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000008000)={&(0x7f000000c000)={0x10, 0x34000}, 0xc, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x2e, 0x301, 0x0, 0x0, {0x3}, [@typed={0x8, 0x0, @u32}]}, 0x8c}, 0x1}, 0x0) [ 235.589282] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. 2018/04/12 18:26:50 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f}, 0xe) 2018/04/12 18:26:50 executing program 4: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendmsg$rds(r0, &(0x7f0000000c40)={&(0x7f0000000240)={0x2, 0x0, @rand_addr=0xffff}, 0x10, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/22, 0x16}, {&(0x7f0000000400)=""/212, 0xd4}, {&(0x7f0000000500)=""/52, 0x34}, {&(0x7f0000000540)=""/231, 0xe7}, {&(0x7f0000000640)=""/188, 0xbc}, {&(0x7f0000000700)=""/67, 0x43}], 0x6, &(0x7f0000000b00)=ANY=[@ANYBLOB="3000000000000000140100000300"], 0xe, 0x1}, 0x40000) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000100)={0x0, 0x3, 0x1, 0x2, 0x13, 0x7fff}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4) r2 = socket(0x40000000015, 0x1, 0xfffffffffffffffc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000000)=0x100000000, 0x4) setreuid(0x0, r4) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) ptrace$peekuser(0x3, r3, 0x5) fcntl$getownex(r5, 0x10, &(0x7f0000000300)={0x0, 0x0}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f000010aff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r7, 0x541f, 0xffffffffffffff88) ptrace$setopts(0x4206, r6, 0x0, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000c80)={{0xa, 0x4e24, 0x6cf5, @loopback={0x0, 0x1}, 0xa1}, {0xa, 0x4e20, 0xff, @remote={0xfe, 0x80, [], 0xbb}, 0xffffffffffffffc0}, 0x0, [0x9, 0x1, 0x1f, 0x8, 0x8, 0xa8, 0x4, 0x5763badf]}, 0x5c) r9 = add_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000300)="64e2ac15c6aab872075a6392705ee2d9ccd29b0c9b87f7443e8879b1221232c9ca89b1a0bbb510846a7906000000366852f3633a246c801fd939bcd0472b95db041dc47682c7461ff6a0e210f4ceac1264afd613cc09ae6b2042b3a3efdfebe828980292c3a6529c5ab6906e0516b682013d1a0eaa626fc989d54b21a27ad624ad1dbdbc444b7e06d88bffe1edda7560c0bc722d9b16c0fd96e358b7ce30056723e6425648fa5c0e7679a38abcafd7ba000000000000", 0xb6, 0xfffffffffffffffb) request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000001200)='big_key\x00', r9) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket(0x15, 0x80005, 0x0) getsockopt(r10, 0x100000114, 0x2711, &(0x7f0000000000)=""/40, &(0x7f0000dcaffc)=0xfcc6) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000800)=0xffffffffffff79e9) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)={0xb, 0x5, 0x1, 0x5, 0x12, r0, 0x1f}, 0x2c) accept$ax25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000008c0)=0x7, 0x4) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000880)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) 2018/04/12 18:26:50 executing program 0: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendmsg$rds(r0, &(0x7f0000000c40)={&(0x7f0000000240)={0x2, 0x0, @rand_addr=0xffff}, 0x10, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/22, 0x16}, {&(0x7f0000000400)=""/212, 0xd4}, {&(0x7f0000000500)=""/52, 0x34}, {&(0x7f0000000540)=""/231, 0xe7}, {&(0x7f0000000640)=""/188, 0xbc}, {&(0x7f0000000700)=""/67, 0x43}], 0x6, &(0x7f0000000b00)=ANY=[@ANYBLOB="3000000000000000140100000300"], 0xe, 0x1}, 0x40000) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000100)={0x0, 0x3, 0x1, 0x2, 0x13, 0x7fff}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4) r2 = socket(0x40000000015, 0x1, 0xfffffffffffffffc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000000)=0x100000000, 0x4) setreuid(0x0, r4) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) ptrace$peekuser(0x3, r3, 0x5) fcntl$getownex(r5, 0x10, &(0x7f0000000300)={0x0, 0x0}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f000010aff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r7, 0x541f, 0xffffffffffffff88) ptrace$setopts(0x4206, r6, 0x0, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000c80)={{0xa, 0x4e24, 0x6cf5, @loopback={0x0, 0x1}, 0xa1}, {0xa, 0x4e20, 0xff, @remote={0xfe, 0x80, [], 0xbb}, 0xffffffffffffffc0}, 0x0, [0x9, 0x1, 0x1f, 0x8, 0x8, 0xa8, 0x4, 0x5763badf]}, 0x5c) r9 = add_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000300)="64e2ac15c6aab872075a6392705ee2d9ccd29b0c9b87f7443e8879b1221232c9ca89b1a0bbb510846a7906000000366852f3633a246c801fd939bcd0472b95db041dc47682c7461ff6a0e210f4ceac1264afd613cc09ae6b2042b3a3efdfebe828980292c3a6529c5ab6906e0516b682013d1a0eaa626fc989d54b21a27ad624ad1dbdbc444b7e06d88bffe1edda7560c0bc722d9b16c0fd96e358b7ce30056723e6425648fa5c0e7679a38abcafd7ba000000000000", 0xb6, 0xfffffffffffffffb) request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000001200)='big_key\x00', r9) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket(0x15, 0x80005, 0x0) getsockopt(r10, 0x100000114, 0x2711, &(0x7f0000000000)=""/40, &(0x7f0000dcaffc)=0xfcc6) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000800)=0xffffffffffff79e9) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)={0xb, 0x5, 0x1, 0x5, 0x12, r0, 0x1f}, 0x2c) accept$ax25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000008c0)=0x7, 0x4) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000880)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) 2018/04/12 18:26:50 executing program 2: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendmsg$rds(r0, &(0x7f0000000c40)={&(0x7f0000000240)={0x2, 0x0, @rand_addr=0xffff}, 0x10, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/22, 0x16}, {&(0x7f0000000400)=""/212, 0xd4}, {&(0x7f0000000500)=""/52, 0x34}, {&(0x7f0000000540)=""/231, 0xe7}, {&(0x7f0000000640)=""/188, 0xbc}, {&(0x7f0000000700)=""/67, 0x43}], 0x6, &(0x7f0000000b00)=ANY=[@ANYBLOB="3000000000000000140100000300"], 0xe, 0x1}, 0x40000) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000100)={0x0, 0x3, 0x1, 0x2, 0x13, 0x7fff}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4) r2 = socket(0x40000000015, 0x1, 0xfffffffffffffffc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000000)=0x100000000, 0x4) setreuid(0x0, r4) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) ptrace$peekuser(0x3, r3, 0x5) fcntl$getownex(r5, 0x10, &(0x7f0000000300)={0x0, 0x0}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f000010aff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r7, 0x541f, 0xffffffffffffff88) ptrace$setopts(0x4206, r6, 0x0, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000c80)={{0xa, 0x4e24, 0x6cf5, @loopback={0x0, 0x1}, 0xa1}, {0xa, 0x4e20, 0xff, @remote={0xfe, 0x80, [], 0xbb}, 0xffffffffffffffc0}, 0x0, [0x9, 0x1, 0x1f, 0x8, 0x8, 0xa8, 0x4, 0x5763badf]}, 0x5c) r9 = add_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000300)="64e2ac15c6aab872075a6392705ee2d9ccd29b0c9b87f7443e8879b1221232c9ca89b1a0bbb510846a7906000000366852f3633a246c801fd939bcd0472b95db041dc47682c7461ff6a0e210f4ceac1264afd613cc09ae6b2042b3a3efdfebe828980292c3a6529c5ab6906e0516b682013d1a0eaa626fc989d54b21a27ad624ad1dbdbc444b7e06d88bffe1edda7560c0bc722d9b16c0fd96e358b7ce30056723e6425648fa5c0e7679a38abcafd7ba000000000000", 0xb6, 0xfffffffffffffffb) request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000001200)='big_key\x00', r9) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket(0x15, 0x80005, 0x0) getsockopt(r10, 0x100000114, 0x2711, &(0x7f0000000000)=""/40, &(0x7f0000dcaffc)=0xfcc6) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000800)=0xffffffffffff79e9) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)={0xb, 0x5, 0x1, 0x5, 0x12, r0, 0x1f}, 0x2c) accept$ax25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000008c0)=0x7, 0x4) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000880)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) 2018/04/12 18:26:50 executing program 1: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendmsg$rds(r0, &(0x7f0000000c40)={&(0x7f0000000240)={0x2, 0x0, @rand_addr=0xffff}, 0x10, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/22, 0x16}, {&(0x7f0000000400)=""/212, 0xd4}, {&(0x7f0000000500)=""/52, 0x34}, {&(0x7f0000000540)=""/231, 0xe7}, {&(0x7f0000000640)=""/188, 0xbc}, {&(0x7f0000000700)=""/67, 0x43}], 0x6, &(0x7f0000000b00)=ANY=[@ANYBLOB="3000000000000000140100000300"], 0xe, 0x1}, 0x40000) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000100)={0x0, 0x3, 0x1, 0x2, 0x13, 0x7fff}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4) r2 = socket(0x40000000015, 0x1, 0xfffffffffffffffc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000000)=0x100000000, 0x4) setreuid(0x0, r4) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) ptrace$peekuser(0x3, r3, 0x5) fcntl$getownex(r5, 0x10, &(0x7f0000000300)={0x0, 0x0}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f000010aff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r7, 0x541f, 0xffffffffffffff88) ptrace$setopts(0x4206, r6, 0x0, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000c80)={{0xa, 0x4e24, 0x6cf5, @loopback={0x0, 0x1}, 0xa1}, {0xa, 0x4e20, 0xff, @remote={0xfe, 0x80, [], 0xbb}, 0xffffffffffffffc0}, 0x0, [0x9, 0x1, 0x1f, 0x8, 0x8, 0xa8, 0x4, 0x5763badf]}, 0x5c) r9 = add_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000300)="64e2ac15c6aab872075a6392705ee2d9ccd29b0c9b87f7443e8879b1221232c9ca89b1a0bbb510846a7906000000366852f3633a246c801fd939bcd0472b95db041dc47682c7461ff6a0e210f4ceac1264afd613cc09ae6b2042b3a3efdfebe828980292c3a6529c5ab6906e0516b682013d1a0eaa626fc989d54b21a27ad624ad1dbdbc444b7e06d88bffe1edda7560c0bc722d9b16c0fd96e358b7ce30056723e6425648fa5c0e7679a38abcafd7ba000000000000", 0xb6, 0xfffffffffffffffb) request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000001200)='big_key\x00', r9) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket(0x15, 0x80005, 0x0) getsockopt(r10, 0x100000114, 0x2711, &(0x7f0000000000)=""/40, &(0x7f0000dcaffc)=0xfcc6) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000800)=0xffffffffffff79e9) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)={0xb, 0x5, 0x1, 0x5, 0x12, r0, 0x1f}, 0x2c) accept$ax25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000008c0)=0x7, 0x4) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000880)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) [ 235.719251] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. 2018/04/12 18:26:50 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f}, 0xe) 2018/04/12 18:26:50 executing program 7: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f0000043ff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(r1, &(0x7f000086ffc8)={&(0x7f0000af4000)=@ethernet={0x0, @remote}, 0x10, &(0x7f0000b5efc0)=[{&(0x7f0000102000)=""/1, 0x1}], 0x1, &(0x7f0000c2f000)=""/16, 0x10}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x80000000032, 0xffffffffffffffff, 0x0) shutdown(r0, 0x2) 2018/04/12 18:26:50 executing program 4: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendmsg$rds(r0, &(0x7f0000000c40)={&(0x7f0000000240)={0x2, 0x0, @rand_addr=0xffff}, 0x10, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/22, 0x16}, {&(0x7f0000000400)=""/212, 0xd4}, {&(0x7f0000000500)=""/52, 0x34}, {&(0x7f0000000540)=""/231, 0xe7}, {&(0x7f0000000640)=""/188, 0xbc}, {&(0x7f0000000700)=""/67, 0x43}], 0x6, &(0x7f0000000b00)=ANY=[@ANYBLOB="3000000000000000140100000300"], 0xe, 0x1}, 0x40000) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000100)={0x0, 0x3, 0x1, 0x2, 0x13, 0x7fff}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4) r2 = socket(0x40000000015, 0x1, 0xfffffffffffffffc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000000)=0x100000000, 0x4) setreuid(0x0, r4) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) ptrace$peekuser(0x3, r3, 0x5) fcntl$getownex(r5, 0x10, &(0x7f0000000300)={0x0, 0x0}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f000010aff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r7, 0x541f, 0xffffffffffffff88) ptrace$setopts(0x4206, r6, 0x0, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000c80)={{0xa, 0x4e24, 0x6cf5, @loopback={0x0, 0x1}, 0xa1}, {0xa, 0x4e20, 0xff, @remote={0xfe, 0x80, [], 0xbb}, 0xffffffffffffffc0}, 0x0, [0x9, 0x1, 0x1f, 0x8, 0x8, 0xa8, 0x4, 0x5763badf]}, 0x5c) r9 = add_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000300)="64e2ac15c6aab872075a6392705ee2d9ccd29b0c9b87f7443e8879b1221232c9ca89b1a0bbb510846a7906000000366852f3633a246c801fd939bcd0472b95db041dc47682c7461ff6a0e210f4ceac1264afd613cc09ae6b2042b3a3efdfebe828980292c3a6529c5ab6906e0516b682013d1a0eaa626fc989d54b21a27ad624ad1dbdbc444b7e06d88bffe1edda7560c0bc722d9b16c0fd96e358b7ce30056723e6425648fa5c0e7679a38abcafd7ba000000000000", 0xb6, 0xfffffffffffffffb) request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000001200)='big_key\x00', r9) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket(0x15, 0x80005, 0x0) getsockopt(r10, 0x100000114, 0x2711, &(0x7f0000000000)=""/40, &(0x7f0000dcaffc)=0xfcc6) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000800)=0xffffffffffff79e9) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)={0xb, 0x5, 0x1, 0x5, 0x12, r0, 0x1f}, 0x2c) accept$ax25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000008c0)=0x7, 0x4) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000880)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) 2018/04/12 18:26:50 executing program 1: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendmsg$rds(r0, &(0x7f0000000c40)={&(0x7f0000000240)={0x2, 0x0, @rand_addr=0xffff}, 0x10, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/22, 0x16}, {&(0x7f0000000400)=""/212, 0xd4}, {&(0x7f0000000500)=""/52, 0x34}, {&(0x7f0000000540)=""/231, 0xe7}, {&(0x7f0000000640)=""/188, 0xbc}, {&(0x7f0000000700)=""/67, 0x43}], 0x6, &(0x7f0000000b00)=ANY=[@ANYBLOB="3000000000000000140100000300"], 0xe, 0x1}, 0x40000) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000100)={0x0, 0x3, 0x1, 0x2, 0x13, 0x7fff}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4) r2 = socket(0x40000000015, 0x1, 0xfffffffffffffffc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000000)=0x100000000, 0x4) setreuid(0x0, r4) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) ptrace$peekuser(0x3, r3, 0x5) fcntl$getownex(r5, 0x10, &(0x7f0000000300)={0x0, 0x0}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f000010aff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r7, 0x541f, 0xffffffffffffff88) ptrace$setopts(0x4206, r6, 0x0, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000c80)={{0xa, 0x4e24, 0x6cf5, @loopback={0x0, 0x1}, 0xa1}, {0xa, 0x4e20, 0xff, @remote={0xfe, 0x80, [], 0xbb}, 0xffffffffffffffc0}, 0x0, [0x9, 0x1, 0x1f, 0x8, 0x8, 0xa8, 0x4, 0x5763badf]}, 0x5c) r9 = add_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000300)="64e2ac15c6aab872075a6392705ee2d9ccd29b0c9b87f7443e8879b1221232c9ca89b1a0bbb510846a7906000000366852f3633a246c801fd939bcd0472b95db041dc47682c7461ff6a0e210f4ceac1264afd613cc09ae6b2042b3a3efdfebe828980292c3a6529c5ab6906e0516b682013d1a0eaa626fc989d54b21a27ad624ad1dbdbc444b7e06d88bffe1edda7560c0bc722d9b16c0fd96e358b7ce30056723e6425648fa5c0e7679a38abcafd7ba000000000000", 0xb6, 0xfffffffffffffffb) request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000001200)='big_key\x00', r9) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket(0x15, 0x80005, 0x0) getsockopt(r10, 0x100000114, 0x2711, &(0x7f0000000000)=""/40, &(0x7f0000dcaffc)=0xfcc6) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000800)=0xffffffffffff79e9) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)={0xb, 0x5, 0x1, 0x5, 0x12, r0, 0x1f}, 0x2c) accept$ax25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000008c0)=0x7, 0x4) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000880)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) 2018/04/12 18:26:50 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x80000000a) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 2018/04/12 18:26:50 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f}, 0xe) 2018/04/12 18:26:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000032cff7)='/dev/kvm\x00', 0x0, 0x0) r1 = eventfd2(0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000071fe0)={r1}) write$eventfd(r1, &(0x7f0000000080), 0x8) 2018/04/12 18:26:50 executing program 0: r0 = socket(0x100000001e, 0x1, 0x0) setsockopt(r0, 0x10f, 0x7f, &(0x7f0000f76ffa)="f1ffffff", 0x4) 2018/04/12 18:26:50 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(blowfish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab2719", 0x4) 2018/04/12 18:26:50 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f}, 0xe) 2018/04/12 18:26:50 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x80000000a) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) [ 236.578208] Trying to set illegal importance in message 2018/04/12 18:26:50 executing program 0: r0 = socket(0x100000001e, 0x1, 0x0) setsockopt(r0, 0x10f, 0x7f, &(0x7f0000f76ffa)="f1ffffff", 0x4) 2018/04/12 18:26:51 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) semget(0x2, 0x1, 0x200) semget(0x2, 0x3, 0x8) semget$private(0x0, 0x0, 0xd1) r0 = semget$private(0x0, 0x4, 0x4) semctl$IPC_RMID(r0, 0x2, 0x10) 2018/04/12 18:26:51 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000100)={{0x108, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x218}}, 0x20) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000240), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000007060804002000fffc0c6565643b799365195f1b76"], 0x1000) [ 236.681860] Trying to set illegal importance in message 2018/04/12 18:26:51 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(blowfish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab2719", 0x4) 2018/04/12 18:26:51 executing program 0: r0 = socket(0x100000001e, 0x1, 0x0) setsockopt(r0, 0x10f, 0x7f, &(0x7f0000f76ffa)="f1ffffff", 0x4) [ 236.797088] Trying to set illegal importance in message 2018/04/12 18:26:51 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x80000000a) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 2018/04/12 18:26:51 executing program 6: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040), 0x8) 2018/04/12 18:26:51 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) semget(0x2, 0x1, 0x200) semget(0x2, 0x3, 0x8) semget$private(0x0, 0x0, 0xd1) r0 = semget$private(0x0, 0x4, 0x4) semctl$IPC_RMID(r0, 0x2, 0x10) 2018/04/12 18:26:51 executing program 0: r0 = socket(0x100000001e, 0x1, 0x0) setsockopt(r0, 0x10f, 0x7f, &(0x7f0000f76ffa)="f1ffffff", 0x4) 2018/04/12 18:26:51 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(blowfish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab2719", 0x4) 2018/04/12 18:26:51 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000100)={{0x108, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x218}}, 0x20) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000240), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000007060804002000fffc0c6565643b799365195f1b76"], 0x1000) 2018/04/12 18:26:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000032cff7)='/dev/kvm\x00', 0x0, 0x0) r1 = eventfd2(0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000071fe0)={r1}) write$eventfd(r1, &(0x7f0000000080), 0x8) 2018/04/12 18:26:51 executing program 7: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f0000043ff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(r1, &(0x7f000086ffc8)={&(0x7f0000af4000)=@ethernet={0x0, @remote}, 0x10, &(0x7f0000b5efc0)=[{&(0x7f0000102000)=""/1, 0x1}], 0x1, &(0x7f0000c2f000)=""/16, 0x10}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x80000000032, 0xffffffffffffffff, 0x0) shutdown(r0, 0x2) 2018/04/12 18:26:51 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x80000000a) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) [ 237.511103] Trying to set illegal importance in message 2018/04/12 18:26:51 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(blowfish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab2719", 0x4) 2018/04/12 18:26:51 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) semget(0x2, 0x1, 0x200) semget(0x2, 0x3, 0x8) semget$private(0x0, 0x0, 0xd1) r0 = semget$private(0x0, 0x4, 0x4) semctl$IPC_RMID(r0, 0x2, 0x10) 2018/04/12 18:26:51 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) semget(0x2, 0x1, 0x200) semget(0x2, 0x3, 0x8) semget$private(0x0, 0x0, 0xd1) r0 = semget$private(0x0, 0x4, 0x4) semctl$IPC_RMID(r0, 0x2, 0x10) 2018/04/12 18:26:51 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000100)={{0x108, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x218}}, 0x20) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000240), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000007060804002000fffc0c6565643b799365195f1b76"], 0x1000) 2018/04/12 18:26:52 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) semget(0x2, 0x1, 0x200) semget(0x2, 0x3, 0x8) semget$private(0x0, 0x0, 0xd1) r0 = semget$private(0x0, 0x4, 0x4) semctl$IPC_RMID(r0, 0x2, 0x10) 2018/04/12 18:26:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x8000000000541b, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f00000000c0)={{0x0, @empty, 0x4e24, 0x0, 'lblcr\x00', 0x0, 0x0, 0xb}, {@remote={0xac, 0x14, 0x14, 0xbb}}}, 0x44) 2018/04/12 18:26:52 executing program 3: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="f9"], 0x1, 0x0) msgrcv(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x1, 0x3, 0x2000) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{0x1}, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xd}) 2018/04/12 18:26:52 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) semget(0x2, 0x1, 0x200) semget(0x2, 0x3, 0x8) semget$private(0x0, 0x0, 0xd1) r0 = semget$private(0x0, 0x4, 0x4) semctl$IPC_RMID(r0, 0x2, 0x10) 2018/04/12 18:26:52 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000100)={{0x108, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x218}}, 0x20) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000240), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000007060804002000fffc0c6565643b799365195f1b76"], 0x1000) 2018/04/12 18:26:52 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000039ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) close(r2) bind$unix(r1, &(0x7f0000904000)=@file={0x1, './file0\x00'}, 0xa) open(&(0x7f00006aa000)='./file0\x00', 0x200000, 0x0) sendmsg$unix(r0, &(0x7f0000163000)={&(0x7f0000000000)=@abs, 0x8, &(0x7f0000026000), 0x0, &(0x7f0000000ff0)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/25, 0x19}], 0x1) 2018/04/12 18:26:52 executing program 6: add_key(&(0x7f0000000200)='pkcs7_test\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x104, 0x0) 2018/04/12 18:26:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="3900000011000947011b61e600000000070000000200000045efffff08009b0019001a000f00000900000100000000000600040004000d0005", 0x39}], 0x1) 2018/04/12 18:26:52 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x0, 0x0, &(0x7f0000000280)=""/254, &(0x7f0000000040)=0xfe) 2018/04/12 18:26:53 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff)) umount2(&(0x7f0000000280)='./file0\x00', 0x4) creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) 2018/04/12 18:26:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="3900000011000947011b61e600000000070000000200000045efffff08009b0019001a000f00000900000100000000000600040004000d0005", 0x39}], 0x1) 2018/04/12 18:26:53 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x3ff, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xe}}}}}, &(0x7f0000000200)=0x84) read(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0x3}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000240)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 2018/04/12 18:26:53 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000039ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) close(r2) bind$unix(r1, &(0x7f0000904000)=@file={0x1, './file0\x00'}, 0xa) open(&(0x7f00006aa000)='./file0\x00', 0x200000, 0x0) sendmsg$unix(r0, &(0x7f0000163000)={&(0x7f0000000000)=@abs, 0x8, &(0x7f0000026000), 0x0, &(0x7f0000000ff0)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/25, 0x19}], 0x1) 2018/04/12 18:26:53 executing program 6: add_key(&(0x7f0000000200)='pkcs7_test\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x104, 0x0) 2018/04/12 18:26:53 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) semget(0x2, 0x1, 0x200) semget(0x2, 0x3, 0x8) semget$private(0x0, 0x0, 0xd1) r0 = semget$private(0x0, 0x4, 0x4) semctl$IPC_RMID(r0, 0x2, 0x10) 2018/04/12 18:26:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x0, 0x0, &(0x7f0000000280)=""/254, &(0x7f0000000040)=0xfe) 2018/04/12 18:26:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000039ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) close(r2) bind$unix(r1, &(0x7f0000904000)=@file={0x1, './file0\x00'}, 0xa) open(&(0x7f00006aa000)='./file0\x00', 0x200000, 0x0) sendmsg$unix(r0, &(0x7f0000163000)={&(0x7f0000000000)=@abs, 0x8, &(0x7f0000026000), 0x0, &(0x7f0000000ff0)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/25, 0x19}], 0x1) 2018/04/12 18:26:53 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff)) umount2(&(0x7f0000000280)='./file0\x00', 0x4) creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) 2018/04/12 18:26:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="3900000011000947011b61e600000000070000000200000045efffff08009b0019001a000f00000900000100000000000600040004000d0005", 0x39}], 0x1) 2018/04/12 18:26:53 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f000017c000)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80}, @in=@rand_addr}, {@in6=@ipv4={[], [0xff, 0xff]}, 0x0, 0x32}, @in6=@ipv4={[], [0xff, 0xff]}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sm3\x00'}, 0x254}}]}, 0x138}, 0x1}, 0x0) 2018/04/12 18:26:53 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000039ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) close(r2) bind$unix(r1, &(0x7f0000904000)=@file={0x1, './file0\x00'}, 0xa) open(&(0x7f00006aa000)='./file0\x00', 0x200000, 0x0) sendmsg$unix(r0, &(0x7f0000163000)={&(0x7f0000000000)=@abs, 0x8, &(0x7f0000026000), 0x0, &(0x7f0000000ff0)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/25, 0x19}], 0x1) 2018/04/12 18:26:54 executing program 6: add_key(&(0x7f0000000200)='pkcs7_test\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x104, 0x0) 2018/04/12 18:26:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000039ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) close(r2) bind$unix(r1, &(0x7f0000904000)=@file={0x1, './file0\x00'}, 0xa) open(&(0x7f00006aa000)='./file0\x00', 0x200000, 0x0) sendmsg$unix(r0, &(0x7f0000163000)={&(0x7f0000000000)=@abs, 0x8, &(0x7f0000026000), 0x0, &(0x7f0000000ff0)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/25, 0x19}], 0x1) 2018/04/12 18:26:54 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x0, 0x0, &(0x7f0000000280)=""/254, &(0x7f0000000040)=0xfe) 2018/04/12 18:26:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="3900000011000947011b61e600000000070000000200000045efffff08009b0019001a000f00000900000100000000000600040004000d0005", 0x39}], 0x1) 2018/04/12 18:26:54 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff)) umount2(&(0x7f0000000280)='./file0\x00', 0x4) creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) 2018/04/12 18:26:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f000017c000)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80}, @in=@rand_addr}, {@in6=@ipv4={[], [0xff, 0xff]}, 0x0, 0x32}, @in6=@ipv4={[], [0xff, 0xff]}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sm3\x00'}, 0x254}}]}, 0x138}, 0x1}, 0x0) 2018/04/12 18:26:54 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x3ff, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xe}}}}}, &(0x7f0000000200)=0x84) read(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0x3}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000240)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 2018/04/12 18:26:54 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000039ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) close(r2) bind$unix(r1, &(0x7f0000904000)=@file={0x1, './file0\x00'}, 0xa) open(&(0x7f00006aa000)='./file0\x00', 0x200000, 0x0) sendmsg$unix(r0, &(0x7f0000163000)={&(0x7f0000000000)=@abs, 0x8, &(0x7f0000026000), 0x0, &(0x7f0000000ff0)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/25, 0x19}], 0x1) 2018/04/12 18:26:54 executing program 6: add_key(&(0x7f0000000200)='pkcs7_test\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x104, 0x0) 2018/04/12 18:26:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f000017c000)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80}, @in=@rand_addr}, {@in6=@ipv4={[], [0xff, 0xff]}, 0x0, 0x32}, @in6=@ipv4={[], [0xff, 0xff]}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sm3\x00'}, 0x254}}]}, 0x138}, 0x1}, 0x0) 2018/04/12 18:26:54 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x3ff, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xe}}}}}, &(0x7f0000000200)=0x84) read(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0x3}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000240)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 2018/04/12 18:26:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000039ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) close(r2) bind$unix(r1, &(0x7f0000904000)=@file={0x1, './file0\x00'}, 0xa) open(&(0x7f00006aa000)='./file0\x00', 0x200000, 0x0) sendmsg$unix(r0, &(0x7f0000163000)={&(0x7f0000000000)=@abs, 0x8, &(0x7f0000026000), 0x0, &(0x7f0000000ff0)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/25, 0x19}], 0x1) 2018/04/12 18:26:54 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff)) umount2(&(0x7f0000000280)='./file0\x00', 0x4) creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) 2018/04/12 18:26:54 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x0, 0x0, &(0x7f0000000280)=""/254, &(0x7f0000000040)=0xfe) 2018/04/12 18:26:54 executing program 7: r0 = socket(0x10, 0x802, 0x0) ioctl$sock_ifreq(r0, 0x891e, &(0x7f0000000000)={'tunl0\x00', @ifru_ivalue}) 2018/04/12 18:26:55 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x3ff, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xe}}}}}, &(0x7f0000000200)=0x84) read(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0x3}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000240)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 2018/04/12 18:26:55 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f000017c000)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80}, @in=@rand_addr}, {@in6=@ipv4={[], [0xff, 0xff]}, 0x0, 0x32}, @in6=@ipv4={[], [0xff, 0xff]}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sm3\x00'}, 0x254}}]}, 0x138}, 0x1}, 0x0) 2018/04/12 18:26:55 executing program 3: r0 = epoll_create1(0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000041bff4)) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ebcffc), 0x4) 2018/04/12 18:26:55 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x3ff, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xe}}}}}, &(0x7f0000000200)=0x84) read(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0x3}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000240)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 2018/04/12 18:26:55 executing program 7: r0 = socket(0x10, 0x802, 0x0) ioctl$sock_ifreq(r0, 0x891e, &(0x7f0000000000)={'tunl0\x00', @ifru_ivalue}) 2018/04/12 18:26:55 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000e9f000)=0x600210) pread64(r0, &(0x7f0000974f42)=""/190, 0xbe, 0x0) pwritev(r0, &(0x7f0000161000)=[{&(0x7f0000d33000)="f5425a9c887a991bec3531b2f3dcea35a00eea45b78433ce639c7b2e6342a72a6c3aca28a2e0638a01c1eb82e642033e1be27912869750d85643601f2278034bd4aca5a28d2f0f421008a8263f53ee434c1d1a49115d4f259dca447c08261e086f79293f44ff000a0a9c3794fdff37965e9bca789fe11330676657c01152a16cb60dff317886b6691fa0c0e33fc0b37934935e2ea22a1ac7a5eba85b137b7e9fbff117739f8d34d3c8f4a171883a13cd8e68352a901e5d8ccb4d0726033fd3", 0xbf}], 0x1, 0x0) 2018/04/12 18:26:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f00000000c0)='b'}) r1 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303, r1}, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0)}}}], 0x0, 0x0, &(0x7f0000000500)}) 2018/04/12 18:26:55 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000ffc), &(0x7f0000000000)=0x4) 2018/04/12 18:26:55 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast=0xffffffff}, {0x1, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xe, {0x2, 0x0, @broadcast=0xffffffff}, "00080700000400a0b22c582bf3aed17d"}) 2018/04/12 18:26:55 executing program 7: r0 = socket(0x10, 0x802, 0x0) ioctl$sock_ifreq(r0, 0x891e, &(0x7f0000000000)={'tunl0\x00', @ifru_ivalue}) 2018/04/12 18:26:55 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast=0xffffffff}, {0x1, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xe, {0x2, 0x0, @broadcast=0xffffffff}, "00080700000400a0b22c582bf3aed17d"}) 2018/04/12 18:26:55 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000ffc), &(0x7f0000000000)=0x4) 2018/04/12 18:26:55 executing program 3: r0 = epoll_create1(0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000041bff4)) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ebcffc), 0x4) [ 241.763213] binder: 16369:16375 ioctl c0306201 20004000 returned -14 [ 241.766983] binder: BINDER_SET_CONTEXT_MGR already set [ 241.776585] binder: 16369:16399 ioctl 40046207 0 returned -16 [ 241.783835] binder_alloc: 16369: binder_alloc_buf, no vma [ 241.789638] binder: 16369:16402 transaction failed 29189/-3, size 0-0 line 2963 [ 241.810349] binder: undelivered TRANSACTION_ERROR: 29189 [ 241.820308] binder: undelivered TRANSACTION_COMPLETE [ 241.825538] binder: undelivered TRANSACTION_COMPLETE [ 241.830703] binder: undelivered transaction 32, process died. 2018/04/12 18:26:56 executing program 7: r0 = socket(0x10, 0x802, 0x0) ioctl$sock_ifreq(r0, 0x891e, &(0x7f0000000000)={'tunl0\x00', @ifru_ivalue}) 2018/04/12 18:26:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast=0xffffffff}, {0x1, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xe, {0x2, 0x0, @broadcast=0xffffffff}, "00080700000400a0b22c582bf3aed17d"}) 2018/04/12 18:26:56 executing program 3: r0 = epoll_create1(0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000041bff4)) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ebcffc), 0x4) 2018/04/12 18:26:56 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000ffc), &(0x7f0000000000)=0x4) 2018/04/12 18:26:56 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000e9f000)=0x600210) pread64(r0, &(0x7f0000974f42)=""/190, 0xbe, 0x0) pwritev(r0, &(0x7f0000161000)=[{&(0x7f0000d33000)="f5425a9c887a991bec3531b2f3dcea35a00eea45b78433ce639c7b2e6342a72a6c3aca28a2e0638a01c1eb82e642033e1be27912869750d85643601f2278034bd4aca5a28d2f0f421008a8263f53ee434c1d1a49115d4f259dca447c08261e086f79293f44ff000a0a9c3794fdff37965e9bca789fe11330676657c01152a16cb60dff317886b6691fa0c0e33fc0b37934935e2ea22a1ac7a5eba85b137b7e9fbff117739f8d34d3c8f4a171883a13cd8e68352a901e5d8ccb4d0726033fd3", 0xbf}], 0x1, 0x0) 2018/04/12 18:26:56 executing program 1: r0 = epoll_create1(0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000041bff4)) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ebcffc), 0x4) 2018/04/12 18:26:56 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x3ff, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xe}}}}}, &(0x7f0000000200)=0x84) read(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0x3}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000240)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 2018/04/12 18:26:56 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x3ff, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xe}}}}}, &(0x7f0000000200)=0x84) read(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0x3}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000240)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 2018/04/12 18:26:56 executing program 3: r0 = epoll_create1(0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000041bff4)) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ebcffc), 0x4) 2018/04/12 18:26:56 executing program 1: r0 = epoll_create1(0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000041bff4)) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ebcffc), 0x4) 2018/04/12 18:26:56 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000ffc), &(0x7f0000000000)=0x4) 2018/04/12 18:26:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast=0xffffffff}, {0x1, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xe, {0x2, 0x0, @broadcast=0xffffffff}, "00080700000400a0b22c582bf3aed17d"}) 2018/04/12 18:26:56 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x4d) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x9}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) 2018/04/12 18:26:56 executing program 1: r0 = epoll_create1(0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000041bff4)) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ebcffc), 0x4) 2018/04/12 18:26:56 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, {}, 0x0, 0x401}, 0xe) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x2) 2018/04/12 18:26:57 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x4d) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x9}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) 2018/04/12 18:26:57 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000080)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000040)={0x1c, r1, 0x9, 0x0, 0x0, {0x3}, [@FOU_ATTR_AF={0x8, 0x2}]}, 0x1c}, 0x1}, 0x0) 2018/04/12 18:26:57 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0xb, &(0x7f0000001000), &(0x7f0000012000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 2018/04/12 18:26:57 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, {}, 0x0, 0x401}, 0xe) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x2) 2018/04/12 18:26:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='wchan\x00') sendfile(r0, r0, &(0x7f0000000080)=0x3fffffff, 0x4) 2018/04/12 18:26:57 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000e9f000)=0x600210) pread64(r0, &(0x7f0000974f42)=""/190, 0xbe, 0x0) pwritev(r0, &(0x7f0000161000)=[{&(0x7f0000d33000)="f5425a9c887a991bec3531b2f3dcea35a00eea45b78433ce639c7b2e6342a72a6c3aca28a2e0638a01c1eb82e642033e1be27912869750d85643601f2278034bd4aca5a28d2f0f421008a8263f53ee434c1d1a49115d4f259dca447c08261e086f79293f44ff000a0a9c3794fdff37965e9bca789fe11330676657c01152a16cb60dff317886b6691fa0c0e33fc0b37934935e2ea22a1ac7a5eba85b137b7e9fbff117739f8d34d3c8f4a171883a13cd8e68352a901e5d8ccb4d0726033fd3", 0xbf}], 0x1, 0x0) 2018/04/12 18:26:57 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000003c0)='./file0/file0\x00', 0x4001, 0x0) fallocate(r0, 0x0, 0x0, 0x1fffff) 2018/04/12 18:26:57 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/04/12 18:26:57 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, {}, 0x0, 0x401}, 0xe) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x2) 2018/04/12 18:26:57 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x4d) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x9}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) 2018/04/12 18:26:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='wchan\x00') sendfile(r0, r0, &(0x7f0000000080)=0x3fffffff, 0x4) [ 243.072387] netlink: 'syz-executor6': attribute type 2 has an invalid length. 2018/04/12 18:26:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs_stats\x00') r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000280)={0x3f, 0x0, 'client0\x00', 0x0, "7db1a36f7054a27b", "5066ca0b783abe75631a40464666ca5f5756bc5ff4edbb5aeb031eebbd196ed8"}) pread64(r0, &(0x7f00000000c0)=""/4096, 0x8b8, 0x10) 2018/04/12 18:26:57 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x4d) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x9}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) [ 243.118383] FAT-fs (loop5): Directory bread(block 112) failed [ 243.125181] netlink: 'syz-executor6': attribute type 2 has an invalid length. 2018/04/12 18:26:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='wchan\x00') sendfile(r0, r0, &(0x7f0000000080)=0x3fffffff, 0x4) 2018/04/12 18:26:57 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, {}, 0x0, 0x401}, 0xe) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x2) 2018/04/12 18:26:57 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000080)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000040)={0x1c, r1, 0x9, 0x0, 0x0, {0x3}, [@FOU_ATTR_AF={0x8, 0x2}]}, 0x1c}, 0x1}, 0x0) [ 243.162833] FAT-fs (loop5): Directory bread(block 112) failed [ 243.178376] FAT-fs (loop5): Directory bread(block 112) failed 2018/04/12 18:26:57 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000004fc8)={&(0x7f000000aff4)={0x10}, 0xc, &(0x7f0000001000)={&(0x7f0000014fdc)={0x14, 0x2000004f, 0x443}, 0x14}, 0x1}, 0x0) 2018/04/12 18:26:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs_stats\x00') r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000280)={0x3f, 0x0, 'client0\x00', 0x0, "7db1a36f7054a27b", "5066ca0b783abe75631a40464666ca5f5756bc5ff4edbb5aeb031eebbd196ed8"}) pread64(r0, &(0x7f00000000c0)=""/4096, 0x8b8, 0x10) [ 243.231322] netlink: 'syz-executor6': attribute type 2 has an invalid length. [ 243.338236] attempt to access beyond end of device [ 243.343225] loop5: rw=1, want=246, limit=112 [ 243.347646] Buffer I/O error on dev loop5, logical block 245, lost async page write [ 243.355468] attempt to access beyond end of device [ 243.360414] loop5: rw=1, want=247, limit=112 [ 243.364825] Buffer I/O error on dev loop5, logical block 246, lost async page write [ 243.372639] attempt to access beyond end of device [ 243.377589] loop5: rw=1, want=248, limit=112 [ 243.382024] Buffer I/O error on dev loop5, logical block 247, lost async page write [ 243.389836] attempt to access beyond end of device [ 243.394776] loop5: rw=1, want=249, limit=112 [ 243.399212] Buffer I/O error on dev loop5, logical block 248, lost async page write [ 243.407064] attempt to access beyond end of device [ 243.412029] loop5: rw=1, want=262, limit=112 [ 243.416440] Buffer I/O error on dev loop5, logical block 261, lost async page write [ 243.424265] attempt to access beyond end of device [ 243.429206] loop5: rw=1, want=263, limit=112 [ 243.433646] Buffer I/O error on dev loop5, logical block 262, lost async page write [ 243.441505] attempt to access beyond end of device [ 243.446541] loop5: rw=1, want=264, limit=112 [ 243.450986] Buffer I/O error on dev loop5, logical block 263, lost async page write [ 243.458828] attempt to access beyond end of device [ 243.463804] loop5: rw=1, want=265, limit=112 [ 243.468235] Buffer I/O error on dev loop5, logical block 264, lost async page write [ 243.477378] attempt to access beyond end of device [ 243.482359] loop5: rw=1, want=2153, limit=112 2018/04/12 18:26:58 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000e9f000)=0x600210) pread64(r0, &(0x7f0000974f42)=""/190, 0xbe, 0x0) pwritev(r0, &(0x7f0000161000)=[{&(0x7f0000d33000)="f5425a9c887a991bec3531b2f3dcea35a00eea45b78433ce639c7b2e6342a72a6c3aca28a2e0638a01c1eb82e642033e1be27912869750d85643601f2278034bd4aca5a28d2f0f421008a8263f53ee434c1d1a49115d4f259dca447c08261e086f79293f44ff000a0a9c3794fdff37965e9bca789fe11330676657c01152a16cb60dff317886b6691fa0c0e33fc0b37934935e2ea22a1ac7a5eba85b137b7e9fbff117739f8d34d3c8f4a171883a13cd8e68352a901e5d8ccb4d0726033fd3", 0xbf}], 0x1, 0x0) 2018/04/12 18:26:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs_stats\x00') r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000280)={0x3f, 0x0, 'client0\x00', 0x0, "7db1a36f7054a27b", "5066ca0b783abe75631a40464666ca5f5756bc5ff4edbb5aeb031eebbd196ed8"}) pread64(r0, &(0x7f00000000c0)=""/4096, 0x8b8, 0x10) 2018/04/12 18:26:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs_stats\x00') r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000280)={0x3f, 0x0, 'client0\x00', 0x0, "7db1a36f7054a27b", "5066ca0b783abe75631a40464666ca5f5756bc5ff4edbb5aeb031eebbd196ed8"}) pread64(r0, &(0x7f00000000c0)=""/4096, 0x8b8, 0x10) 2018/04/12 18:26:58 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0xb, &(0x7f0000001000), &(0x7f0000012000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 2018/04/12 18:26:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/kvm\x00', 0x0, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'user.', '/dev/kvm\x00'}, &(0x7f00000000c0)=""/4096, 0x1000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000c68000)={r2}) 2018/04/12 18:26:58 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='wchan\x00') sendfile(r0, r0, &(0x7f0000000080)=0x3fffffff, 0x4) 2018/04/12 18:26:58 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000004fc8)={&(0x7f000000aff4)={0x10}, 0xc, &(0x7f0000001000)={&(0x7f0000014fdc)={0x14, 0x2000004f, 0x443}, 0x14}, 0x1}, 0x0) 2018/04/12 18:26:58 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000080)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000040)={0x1c, r1, 0x9, 0x0, 0x0, {0x3}, [@FOU_ATTR_AF={0x8, 0x2}]}, 0x1c}, 0x1}, 0x0) 2018/04/12 18:26:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs_stats\x00') r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000280)={0x3f, 0x0, 'client0\x00', 0x0, "7db1a36f7054a27b", "5066ca0b783abe75631a40464666ca5f5756bc5ff4edbb5aeb031eebbd196ed8"}) pread64(r0, &(0x7f00000000c0)=""/4096, 0x8b8, 0x10) 2018/04/12 18:26:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs_stats\x00') r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000280)={0x3f, 0x0, 'client0\x00', 0x0, "7db1a36f7054a27b", "5066ca0b783abe75631a40464666ca5f5756bc5ff4edbb5aeb031eebbd196ed8"}) pread64(r0, &(0x7f00000000c0)=""/4096, 0x8b8, 0x10) 2018/04/12 18:26:58 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000004fc8)={&(0x7f000000aff4)={0x10}, 0xc, &(0x7f0000001000)={&(0x7f0000014fdc)={0x14, 0x2000004f, 0x443}, 0x14}, 0x1}, 0x0) [ 243.905461] netlink: 'syz-executor6': attribute type 2 has an invalid length. 2018/04/12 18:26:58 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000080)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000040)={0x1c, r1, 0x9, 0x0, 0x0, {0x3}, [@FOU_ATTR_AF={0x8, 0x2}]}, 0x1c}, 0x1}, 0x0) 2018/04/12 18:26:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/kvm\x00', 0x0, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'user.', '/dev/kvm\x00'}, &(0x7f00000000c0)=""/4096, 0x1000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000c68000)={r2}) 2018/04/12 18:26:58 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000004fc8)={&(0x7f000000aff4)={0x10}, 0xc, &(0x7f0000001000)={&(0x7f0000014fdc)={0x14, 0x2000004f, 0x443}, 0x14}, 0x1}, 0x0) 2018/04/12 18:26:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs_stats\x00') r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000280)={0x3f, 0x0, 'client0\x00', 0x0, "7db1a36f7054a27b", "5066ca0b783abe75631a40464666ca5f5756bc5ff4edbb5aeb031eebbd196ed8"}) pread64(r0, &(0x7f00000000c0)=""/4096, 0x8b8, 0x10) [ 244.008726] netlink: 'syz-executor6': attribute type 2 has an invalid length. 2018/04/12 18:26:59 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0xb, &(0x7f0000001000), &(0x7f0000012000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 2018/04/12 18:26:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/kvm\x00', 0x0, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'user.', '/dev/kvm\x00'}, &(0x7f00000000c0)=""/4096, 0x1000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000c68000)={r2}) 2018/04/12 18:26:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/kvm\x00', 0x0, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'user.', '/dev/kvm\x00'}, &(0x7f00000000c0)=""/4096, 0x1000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000c68000)={r2}) 2018/04/12 18:26:59 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0xb, &(0x7f0000001000), &(0x7f0000012000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 2018/04/12 18:27:00 executing program 1: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x52, r1, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}, 0x4) 2018/04/12 18:27:00 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000000), 0x4) 2018/04/12 18:27:00 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x1) 2018/04/12 18:27:00 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) io_setup(0x1000, &(0x7f0000000040)=0x0) sendmsg$can_bcm(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x1d}, 0x10, &(0x7f0000000580)={&(0x7f0000000500)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "be8ac2688e3f1b1b"}}, 0x48}, 0x1}, 0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="070000008cf46cfde19a4e3bcfbdbedee32e68b3a251fd2cfd09684d9c7afae320bbf22a2ce3cb58fa63c42a238cb85f1023fa813c9a0e46", 0x38}]) 2018/04/12 18:27:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000240)=@ethtool_eeprom={0xb}}) 2018/04/12 18:27:00 executing program 6: syz_emit_ethernet(0x66, &(0x7f0000015e15)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff81, 0x0, 0x0, 0x0, [0x14], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 2018/04/12 18:27:00 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f000059aff4)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) 2018/04/12 18:27:00 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x1) 2018/04/12 18:27:00 executing program 6: syz_emit_ethernet(0x66, &(0x7f0000015e15)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff81, 0x0, 0x0, 0x0, [0x14], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 2018/04/12 18:27:00 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) io_setup(0x1000, &(0x7f0000000040)=0x0) sendmsg$can_bcm(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x1d}, 0x10, &(0x7f0000000580)={&(0x7f0000000500)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "be8ac2688e3f1b1b"}}, 0x48}, 0x1}, 0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="070000008cf46cfde19a4e3bcfbdbedee32e68b3a251fd2cfd09684d9c7afae320bbf22a2ce3cb58fa63c42a238cb85f1023fa813c9a0e46", 0x38}]) 2018/04/12 18:27:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000240)=@ethtool_eeprom={0xb}}) 2018/04/12 18:27:00 executing program 1: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x52, r1, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}, 0x4) 2018/04/12 18:27:00 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f000059aff4)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) 2018/04/12 18:27:00 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x1) 2018/04/12 18:27:00 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000000), 0x4) 2018/04/12 18:27:00 executing program 3: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000ab2000)=0x1002, 0x4) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/04/12 18:27:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000240)=@ethtool_eeprom={0xb}}) 2018/04/12 18:27:00 executing program 1: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x52, r1, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}, 0x4) 2018/04/12 18:27:00 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) io_setup(0x1000, &(0x7f0000000040)=0x0) sendmsg$can_bcm(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x1d}, 0x10, &(0x7f0000000580)={&(0x7f0000000500)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "be8ac2688e3f1b1b"}}, 0x48}, 0x1}, 0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="070000008cf46cfde19a4e3bcfbdbedee32e68b3a251fd2cfd09684d9c7afae320bbf22a2ce3cb58fa63c42a238cb85f1023fa813c9a0e46", 0x38}]) 2018/04/12 18:27:00 executing program 6: syz_emit_ethernet(0x66, &(0x7f0000015e15)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff81, 0x0, 0x0, 0x0, [0x14], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 2018/04/12 18:27:00 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f000059aff4)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) 2018/04/12 18:27:00 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x1) 2018/04/12 18:27:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000240)=@ethtool_eeprom={0xb}}) 2018/04/12 18:27:00 executing program 1: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x52, r1, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}, 0x4) 2018/04/12 18:27:00 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3de, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400)}, 0x0, 0x3, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000001c0)={0x0, 0xf2, &(0x7f0000000200), 0x12d, &(0x7f0000000000)=""/251, 0xffffffffffffffc9}, 0x0) sendmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000100)="bf", 0x1}], 0x1, &(0x7f0000001180)}, 0x0) 2018/04/12 18:27:00 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) io_setup(0x1000, &(0x7f0000000040)=0x0) sendmsg$can_bcm(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x1d}, 0x10, &(0x7f0000000580)={&(0x7f0000000500)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "be8ac2688e3f1b1b"}}, 0x48}, 0x1}, 0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="070000008cf46cfde19a4e3bcfbdbedee32e68b3a251fd2cfd09684d9c7afae320bbf22a2ce3cb58fa63c42a238cb85f1023fa813c9a0e46", 0x38}]) 2018/04/12 18:27:00 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000000), 0x4) 2018/04/12 18:27:00 executing program 6: syz_emit_ethernet(0x66, &(0x7f0000015e15)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff81, 0x0, 0x0, 0x0, [0x14], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 2018/04/12 18:27:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000000c0)={"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"}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000007100004000000000ff09000000b14d26"]) 2018/04/12 18:27:00 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f000059aff4)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) 2018/04/12 18:27:00 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000b80)=@updsa={0x13c, 0x1a, 0x209, 0x0, 0x0, {{@in=@multicast2=0xe0000002, @in6=@dev={0xfe, 0x80}}, {@in6=@mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x33}, @in6, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'gcm_base(cbc-serpent-avx,digest_null)\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/12 18:27:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(seed-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2ad61a", 0x3}], 0x1, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000b2dfc8)={&(0x7f00007ebffa)=@hci, 0x80, &(0x7f0000f75000)=[{&(0x7f0000f75000)=""/175, 0xaf}], 0x1, &(0x7f0000ec7000)}, 0x0) 2018/04/12 18:27:00 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000004c0)) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000b80)) stat(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)) getegid() r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) listen(r0, 0x20) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="480000001400190d76a81014aed182f302844700809d79acdfffe00600000000000000a2bc5603ca0016087f890000002000002ef774a99de48b143500d5413da836d48a566e8ef9", 0x48}], 0x1) 2018/04/12 18:27:00 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000000), 0x4) 2018/04/12 18:27:00 executing program 0: r0 = socket$inet(0x2, 0x4000000000000005, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4000004e23, @rand_addr}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/04/12 18:27:01 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000b80)=@updsa={0x13c, 0x1a, 0x209, 0x0, 0x0, {{@in=@multicast2=0xe0000002, @in6=@dev={0xfe, 0x80}}, {@in6=@mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x33}, @in6, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'gcm_base(cbc-serpent-avx,digest_null)\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/12 18:27:01 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f000033efc8)={0x0, 0x0, &(0x7f0000aa8000)={&(0x7f0000000000)={0x2, 0x9, 0x0, 0x7, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/12 18:27:01 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000004c0)) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000b80)) stat(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)) getegid() r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) listen(r0, 0x20) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="480000001400190d76a81014aed182f302844700809d79acdfffe00600000000000000a2bc5603ca0016087f890000002000002ef774a99de48b143500d5413da836d48a566e8ef9", 0x48}], 0x1) 2018/04/12 18:27:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000000c0)={"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"}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000007100004000000000ff09000000b14d26"]) 2018/04/12 18:27:01 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000b80)=@updsa={0x13c, 0x1a, 0x209, 0x0, 0x0, {{@in=@multicast2=0xe0000002, @in6=@dev={0xfe, 0x80}}, {@in6=@mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x33}, @in6, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'gcm_base(cbc-serpent-avx,digest_null)\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/12 18:27:01 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f000033efc8)={0x0, 0x0, &(0x7f0000aa8000)={&(0x7f0000000000)={0x2, 0x9, 0x0, 0x7, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/12 18:27:01 executing program 2: unshare(0x60000000) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={"73797a6b04436c6564391f8eacf1978d", @ifru_map}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) 2018/04/12 18:27:01 executing program 0: r0 = socket$inet(0x2, 0x4000000000000005, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4000004e23, @rand_addr}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/04/12 18:27:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000000c0)={"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"}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000007100004000000000ff09000000b14d26"]) 2018/04/12 18:27:01 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3de, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400)}, 0x0, 0x3, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000001c0)={0x0, 0xf2, &(0x7f0000000200), 0x12d, &(0x7f0000000000)=""/251, 0xffffffffffffffc9}, 0x0) sendmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000100)="bf", 0x1}], 0x1, &(0x7f0000001180)}, 0x0) 2018/04/12 18:27:01 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000b80)=@updsa={0x13c, 0x1a, 0x209, 0x0, 0x0, {{@in=@multicast2=0xe0000002, @in6=@dev={0xfe, 0x80}}, {@in6=@mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x33}, @in6, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'gcm_base(cbc-serpent-avx,digest_null)\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/12 18:27:01 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000004c0)) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000b80)) stat(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)) getegid() r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) listen(r0, 0x20) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="480000001400190d76a81014aed182f302844700809d79acdfffe00600000000000000a2bc5603ca0016087f890000002000002ef774a99de48b143500d5413da836d48a566e8ef9", 0x48}], 0x1) 2018/04/12 18:27:01 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(seed-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2ad61a", 0x3}], 0x1, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000b2dfc8)={&(0x7f00007ebffa)=@hci, 0x80, &(0x7f0000f75000)=[{&(0x7f0000f75000)=""/175, 0xaf}], 0x1, &(0x7f0000ec7000)}, 0x0) 2018/04/12 18:27:01 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(seed-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2ad61a", 0x3}], 0x1, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000b2dfc8)={&(0x7f00007ebffa)=@hci, 0x80, &(0x7f0000f75000)=[{&(0x7f0000f75000)=""/175, 0xaf}], 0x1, &(0x7f0000ec7000)}, 0x0) [ 247.365350] IPVS: ftp: loaded support on port[0] = 21 2018/04/12 18:27:01 executing program 0: r0 = socket$inet(0x2, 0x4000000000000005, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4000004e23, @rand_addr}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/04/12 18:27:01 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000004c0)) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000b80)) stat(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)) getegid() r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) listen(r0, 0x20) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="480000001400190d76a81014aed182f302844700809d79acdfffe00600000000000000a2bc5603ca0016087f890000002000002ef774a99de48b143500d5413da836d48a566e8ef9", 0x48}], 0x1) 2018/04/12 18:27:02 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f000033efc8)={0x0, 0x0, &(0x7f0000aa8000)={&(0x7f0000000000)={0x2, 0x9, 0x0, 0x7, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/12 18:27:02 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3de, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400)}, 0x0, 0x3, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000001c0)={0x0, 0xf2, &(0x7f0000000200), 0x12d, &(0x7f0000000000)=""/251, 0xffffffffffffffc9}, 0x0) sendmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000100)="bf", 0x1}], 0x1, &(0x7f0000001180)}, 0x0) 2018/04/12 18:27:02 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(seed-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2ad61a", 0x3}], 0x1, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000b2dfc8)={&(0x7f00007ebffa)=@hci, 0x80, &(0x7f0000f75000)=[{&(0x7f0000f75000)=""/175, 0xaf}], 0x1, &(0x7f0000ec7000)}, 0x0) 2018/04/12 18:27:02 executing program 6: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7ff00ffe90009144a000ae9", 0x12, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001280)={&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001240)}, 0x0) recvmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000001580)=@can, 0x80, &(0x7f0000001780)}, 0x0) recvmsg(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)=""/208, 0xd0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@pptp={0x0, 0x0, {0x0, @loopback}}, 0x20, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=""/27, 0x1b}, 0x0) 2018/04/12 18:27:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000000c0)={"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"}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000007100004000000000ff09000000b14d26"]) 2018/04/12 18:27:02 executing program 0: r0 = socket$inet(0x2, 0x4000000000000005, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4000004e23, @rand_addr}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/04/12 18:27:02 executing program 2: unshare(0x60000000) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={"73797a6b04436c6564391f8eacf1978d", @ifru_map}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) 2018/04/12 18:27:02 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(seed-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2ad61a", 0x3}], 0x1, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000b2dfc8)={&(0x7f00007ebffa)=@hci, 0x80, &(0x7f0000f75000)=[{&(0x7f0000f75000)=""/175, 0xaf}], 0x1, &(0x7f0000ec7000)}, 0x0) [ 248.295809] IPVS: ftp: loaded support on port[0] = 21 2018/04/12 18:27:02 executing program 6: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7ff00ffe90009144a000ae9", 0x12, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001280)={&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001240)}, 0x0) recvmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000001580)=@can, 0x80, &(0x7f0000001780)}, 0x0) recvmsg(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)=""/208, 0xd0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@pptp={0x0, 0x0, {0x0, @loopback}}, 0x20, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=""/27, 0x1b}, 0x0) 2018/04/12 18:27:02 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f000033efc8)={0x0, 0x0, &(0x7f0000aa8000)={&(0x7f0000000000)={0x2, 0x9, 0x0, 0x7, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/12 18:27:02 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(seed-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2ad61a", 0x3}], 0x1, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000b2dfc8)={&(0x7f00007ebffa)=@hci, 0x80, &(0x7f0000f75000)=[{&(0x7f0000f75000)=""/175, 0xaf}], 0x1, &(0x7f0000ec7000)}, 0x0) 2018/04/12 18:27:02 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(seed-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2ad61a", 0x3}], 0x1, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000b2dfc8)={&(0x7f00007ebffa)=@hci, 0x80, &(0x7f0000f75000)=[{&(0x7f0000f75000)=""/175, 0xaf}], 0x1, &(0x7f0000ec7000)}, 0x0) 2018/04/12 18:27:02 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x9, 0x7d, 0x9}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000039afe0)={r0, &(0x7f000035b000), &(0x7f0000359f9e)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f000022cff0)={r0, &(0x7f00002a5000)}, 0x10) 2018/04/12 18:27:03 executing program 2: unshare(0x60000000) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={"73797a6b04436c6564391f8eacf1978d", @ifru_map}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) 2018/04/12 18:27:03 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='sit0\x00', 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2}, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/04/12 18:27:03 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x9, 0x7d, 0x9}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000039afe0)={r0, &(0x7f000035b000), &(0x7f0000359f9e)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f000022cff0)={r0, &(0x7f00002a5000)}, 0x10) 2018/04/12 18:27:03 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x9, 0x7d, 0x9}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000039afe0)={r0, &(0x7f000035b000), &(0x7f0000359f9e)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f000022cff0)={r0, &(0x7f00002a5000)}, 0x10) 2018/04/12 18:27:03 executing program 5: r0 = memfd_create(&(0x7f0000000000)="17", 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000580), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/04/12 18:27:03 executing program 6: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7ff00ffe90009144a000ae9", 0x12, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001280)={&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001240)}, 0x0) recvmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000001580)=@can, 0x80, &(0x7f0000001780)}, 0x0) recvmsg(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)=""/208, 0xd0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@pptp={0x0, 0x0, {0x0, @loopback}}, 0x20, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=""/27, 0x1b}, 0x0) 2018/04/12 18:27:03 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3de, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400)}, 0x0, 0x3, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000001c0)={0x0, 0xf2, &(0x7f0000000200), 0x12d, &(0x7f0000000000)=""/251, 0xffffffffffffffc9}, 0x0) sendmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000100)="bf", 0x1}], 0x1, &(0x7f0000001180)}, 0x0) 2018/04/12 18:27:03 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000eb3ff8), &(0x7f0000940000)=0x8) r2 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000000c0)={r1}, &(0x7f0000000100)=0x8) [ 249.283013] IPVS: ftp: loaded support on port[0] = 21 2018/04/12 18:27:03 executing program 6: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7ff00ffe90009144a000ae9", 0x12, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001280)={&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001240)}, 0x0) recvmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000001580)=@can, 0x80, &(0x7f0000001780)}, 0x0) recvmsg(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)=""/208, 0xd0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@pptp={0x0, 0x0, {0x0, @loopback}}, 0x20, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=""/27, 0x1b}, 0x0) 2018/04/12 18:27:03 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000eb3ff8), &(0x7f0000940000)=0x8) r2 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000000c0)={r1}, &(0x7f0000000100)=0x8) 2018/04/12 18:27:03 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x9, 0x7d, 0x9}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000039afe0)={r0, &(0x7f000035b000), &(0x7f0000359f9e)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f000022cff0)={r0, &(0x7f00002a5000)}, 0x10) 2018/04/12 18:27:03 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x9, 0x7d, 0x9}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000039afe0)={r0, &(0x7f000035b000), &(0x7f0000359f9e)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f000022cff0)={r0, &(0x7f00002a5000)}, 0x10) 2018/04/12 18:27:03 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='sit0\x00', 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2}, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/04/12 18:27:03 executing program 5: r0 = memfd_create(&(0x7f0000000000)="17", 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000580), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/04/12 18:27:03 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x9, 0x7d, 0x9}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000039afe0)={r0, &(0x7f000035b000), &(0x7f0000359f9e)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f000022cff0)={r0, &(0x7f00002a5000)}, 0x10) 2018/04/12 18:27:03 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x9, 0x7d, 0x9}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000039afe0)={r0, &(0x7f000035b000), &(0x7f0000359f9e)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f000022cff0)={r0, &(0x7f00002a5000)}, 0x10) 2018/04/12 18:27:04 executing program 2: unshare(0x60000000) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={"73797a6b04436c6564391f8eacf1978d", @ifru_map}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) 2018/04/12 18:27:04 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000eb3ff8), &(0x7f0000940000)=0x8) r2 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000000c0)={r1}, &(0x7f0000000100)=0x8) 2018/04/12 18:27:04 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='sit0\x00', 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2}, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/04/12 18:27:04 executing program 5: r0 = memfd_create(&(0x7f0000000000)="17", 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000580), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/04/12 18:27:04 executing program 7: r0 = shmget(0x0, 0x3000, 0x640, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) shmctl$IPC_RMID(r0, 0x0) 2018/04/12 18:27:04 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)) 2018/04/12 18:27:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000a8bfff)=""/1, 0x805031ae) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 2018/04/12 18:27:04 executing program 6: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r0 = perf_event_open(&(0x7f000002ef88)={0x1, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) remap_file_pages(&(0x7f0000029000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) [ 250.315814] IPVS: ftp: loaded support on port[0] = 21 2018/04/12 18:27:04 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='sit0\x00', 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2}, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/04/12 18:27:04 executing program 7: r0 = shmget(0x0, 0x3000, 0x640, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) shmctl$IPC_RMID(r0, 0x0) 2018/04/12 18:27:04 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000eb3ff8), &(0x7f0000940000)=0x8) r2 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000000c0)={r1}, &(0x7f0000000100)=0x8) 2018/04/12 18:27:04 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)) 2018/04/12 18:27:04 executing program 5: r0 = memfd_create(&(0x7f0000000000)="17", 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000580), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/04/12 18:27:04 executing program 6: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r0 = perf_event_open(&(0x7f000002ef88)={0x1, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) remap_file_pages(&(0x7f0000029000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) 2018/04/12 18:27:05 executing program 2: r0 = memfd_create(&(0x7f0000000040)='userloppp1ptoc\'\x00', 0x6) fallocate(r0, 0x3, 0x0, 0x7) 2018/04/12 18:27:05 executing program 7: r0 = shmget(0x0, 0x3000, 0x640, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) shmctl$IPC_RMID(r0, 0x0) 2018/04/12 18:27:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext3~', &(0x7f0000000140)='/\x00', 0x0, 0x0, &(0x7f0000000000), 0x28020, &(0x7f00000000c0)={[{@resgid={'resgid', 0x3d, [0x34]}, 0x2c}]}) 2018/04/12 18:27:05 executing program 5: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000dc0)=@nat={'nat\x00', 0x19, 0x2, 0xd58, [0x20000040, 0x0, 0x0, 0x20000c30, 0x20000c60], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x1d, 0x0, 0x0, 'dummy0\x00', 'ifb0\x00', 'tunl0\x00', 'ip6gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xb58, 0xb90, 0xbc0, [@among={'among\x00', 0x888, {{0x49c, 0x0, 0x0, {[], 0x5, [{[], @loopback=0x7f000001}, {[], @local={0xac, 0x14, 0x14, 0xaa}}, {[], @local={0xac, 0x14, 0x14, 0xaa}}, {[], @dev={0xac, 0x14, 0x14}}, {[], @rand_addr}]}, {[], 0x4, [{[], @multicast2=0xe0000002}, {[], @broadcast=0xffffffff}, {[], @rand_addr}, {[], @multicast2=0xe0000002}]}}}}, @bpf0={'bpf\x00', 0x210}]}, [@arpreply={'arpreply\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}}}]}, @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'ip6tnl0\x00', 'gretap0\x00', 'team_slave\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0xa0, 0xd8}, [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0xdd0) 2018/04/12 18:27:05 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)) 2018/04/12 18:27:05 executing program 6: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r0 = perf_event_open(&(0x7f000002ef88)={0x1, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) remap_file_pages(&(0x7f0000029000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) 2018/04/12 18:27:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000a8bfff)=""/1, 0x805031ae) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 2018/04/12 18:27:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000a8bfff)=""/1, 0x805031ae) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 2018/04/12 18:27:05 executing program 7: r0 = shmget(0x0, 0x3000, 0x640, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) shmctl$IPC_RMID(r0, 0x0) 2018/04/12 18:27:05 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)) 2018/04/12 18:27:05 executing program 5: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000dc0)=@nat={'nat\x00', 0x19, 0x2, 0xd58, [0x20000040, 0x0, 0x0, 0x20000c30, 0x20000c60], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x1d, 0x0, 0x0, 'dummy0\x00', 'ifb0\x00', 'tunl0\x00', 'ip6gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xb58, 0xb90, 0xbc0, [@among={'among\x00', 0x888, {{0x49c, 0x0, 0x0, {[], 0x5, [{[], @loopback=0x7f000001}, {[], @local={0xac, 0x14, 0x14, 0xaa}}, {[], @local={0xac, 0x14, 0x14, 0xaa}}, {[], @dev={0xac, 0x14, 0x14}}, {[], @rand_addr}]}, {[], 0x4, [{[], @multicast2=0xe0000002}, {[], @broadcast=0xffffffff}, {[], @rand_addr}, {[], @multicast2=0xe0000002}]}}}}, @bpf0={'bpf\x00', 0x210}]}, [@arpreply={'arpreply\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}}}]}, @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'ip6tnl0\x00', 'gretap0\x00', 'team_slave\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0xa0, 0xd8}, [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0xdd0) 2018/04/12 18:27:05 executing program 2: r0 = memfd_create(&(0x7f0000000040)='userloppp1ptoc\'\x00', 0x6) fallocate(r0, 0x3, 0x0, 0x7) 2018/04/12 18:27:05 executing program 6: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r0 = perf_event_open(&(0x7f000002ef88)={0x1, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) remap_file_pages(&(0x7f0000029000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) [ 251.547317] EXT4-fs (sda1): re-mounted. Opts: resgid=4, [ 251.579245] EXT4-fs (sda1): re-mounted. Opts: resgid=4, 2018/04/12 18:27:06 executing program 5: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000dc0)=@nat={'nat\x00', 0x19, 0x2, 0xd58, [0x20000040, 0x0, 0x0, 0x20000c30, 0x20000c60], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x1d, 0x0, 0x0, 'dummy0\x00', 'ifb0\x00', 'tunl0\x00', 'ip6gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xb58, 0xb90, 0xbc0, [@among={'among\x00', 0x888, {{0x49c, 0x0, 0x0, {[], 0x5, [{[], @loopback=0x7f000001}, {[], @local={0xac, 0x14, 0x14, 0xaa}}, {[], @local={0xac, 0x14, 0x14, 0xaa}}, {[], @dev={0xac, 0x14, 0x14}}, {[], @rand_addr}]}, {[], 0x4, [{[], @multicast2=0xe0000002}, {[], @broadcast=0xffffffff}, {[], @rand_addr}, {[], @multicast2=0xe0000002}]}}}}, @bpf0={'bpf\x00', 0x210}]}, [@arpreply={'arpreply\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}}}]}, @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'ip6tnl0\x00', 'gretap0\x00', 'team_slave\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0xa0, 0xd8}, [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0xdd0) 2018/04/12 18:27:06 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f75702e6e65742f73797a310456be4b42c5c4dbe0403bf1ecc4506928f2944fae41f0caeb5a21ca5d546faa7422ea518725e92828382ead353029f494266db4b9451f19bccc9b20f6c3cba32425abd3a9b19e7bbaea1d791bba161d4a0609450ae1ca562b22f3d0372000000081f08f13b193084f5dedfbed46c8829d53ef1577ca03b1dea73a714ee3ebf04a81352334fd633a94fe6affcb2cbec1d2f91c6b91b5cd35a1", 0x1ff) 2018/04/12 18:27:06 executing program 2: r0 = memfd_create(&(0x7f0000000040)='userloppp1ptoc\'\x00', 0x6) fallocate(r0, 0x3, 0x0, 0x7) 2018/04/12 18:27:06 executing program 0: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x4000, 0x0) 2018/04/12 18:27:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext3~', &(0x7f0000000140)='/\x00', 0x0, 0x0, &(0x7f0000000000), 0x28020, &(0x7f00000000c0)={[{@resgid={'resgid', 0x3d, [0x34]}, 0x2c}]}) 2018/04/12 18:27:06 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000340)=""/170, 0xaa}], 0x1) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000bc0)=ANY=[@ANYBLOB="8de345bdf1894bd6ac01b4d755b5502ab44eb7ed43871ac975b7ad812a682ee539830ffad7db9ac464fd7fab8aefe42003a3296c4b91fdb731ac25e4c839be2a7b2457ae816965053783aa6a3b7d05652b30be9bcffc7b1f16f4b1910449003edc55b81f0471b0b2c5ab9c3645f8edc3525618cc142738ed37844ed73a1504f05f565c335e763023d4"], 0x1) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x211080}, 0xc, &(0x7f0000000b00)={&(0x7f00000007c0)={0x108, 0x9, 0x2, 0x210, 0x70bd26, 0x25dfdbfd, {0x1, 0x0, 0x8}, [@generic="2fbb97f0d2dd021961f223d8070ce37ff70a31e3704ea1d2dce96b0bcee5b7c854583e280fe5e39a66fe4601931204e005088e6109d92a6733384366d0bee12a53c980a029e90f59660189f6f62ecd0fa6c726e85b341064e71e58638ab04bd5c7366d1c5d732c02f959880017341119dab4787e19875074384a57abef23e953565ed0109e11ac3084a36ce025fcd9f4879f671093553193e6c47da757b096db053143d3362bd407d1eedb1af1f5ff53f6596f5d991a1a563622023007e106f7f6ad9b4dd3baec8459e7956d330f566ccabd0c780a66f6672f65645f1da8027c7f780cb41661d18169a954d4905b051b2d698c40"]}, 0x108}, 0x1}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={@loopback, @local, 0x0}, &(0x7f0000000080)=0xc) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000780)={0x0, 0x0, 0xfffffffffffffff8, 0x3, 0x8, 0x8}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={@loopback={0x0, 0x1}, @local={0xfe, 0x80, [], 0xaa}, @mcast1={0xff, 0x1, [], 0x1}, 0x9, 0x5, 0x4, 0x0, 0x2, 0x40c30188, r1}) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b", 0x14}], 0x1) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000d40)={'ip6tnl0\x00', @ifru_hwaddr=@link_local={0x1, 0x80, 0xc2}}) request_key(&(0x7f0000000500)='id_legacy\x00', &(0x7f0000000540)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000580)='IPVS\x00', 0x0) r2 = request_key(&(0x7f0000000600)='cifs.idmap\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000680)='keyring]ppp1>\x00', 0xfffffffffffffffa) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000b80)={0x16}) keyctl$instantiate(0xc, 0x0, &(0x7f00000005c0)="72a2ac839828e8a55745245d7c6fc8875594a2957de1bbeefab99652f51bde831db85203c1", 0x25, r2) 2018/04/12 18:27:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000a8bfff)=""/1, 0x805031ae) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 2018/04/12 18:27:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000a8bfff)=""/1, 0x805031ae) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) [ 252.236630] ip6tnl0: Invalid MTU 12746753 requested, hw max 65392 [ 252.244961] EXT4-fs (sda1): re-mounted. Opts: resgid=4, 2018/04/12 18:27:06 executing program 2: r0 = memfd_create(&(0x7f0000000040)='userloppp1ptoc\'\x00', 0x6) fallocate(r0, 0x3, 0x0, 0x7) 2018/04/12 18:27:06 executing program 5: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000dc0)=@nat={'nat\x00', 0x19, 0x2, 0xd58, [0x20000040, 0x0, 0x0, 0x20000c30, 0x20000c60], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x1d, 0x0, 0x0, 'dummy0\x00', 'ifb0\x00', 'tunl0\x00', 'ip6gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xb58, 0xb90, 0xbc0, [@among={'among\x00', 0x888, {{0x49c, 0x0, 0x0, {[], 0x5, [{[], @loopback=0x7f000001}, {[], @local={0xac, 0x14, 0x14, 0xaa}}, {[], @local={0xac, 0x14, 0x14, 0xaa}}, {[], @dev={0xac, 0x14, 0x14}}, {[], @rand_addr}]}, {[], 0x4, [{[], @multicast2=0xe0000002}, {[], @broadcast=0xffffffff}, {[], @rand_addr}, {[], @multicast2=0xe0000002}]}}}}, @bpf0={'bpf\x00', 0x210}]}, [@arpreply={'arpreply\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}}}]}, @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'ip6tnl0\x00', 'gretap0\x00', 'team_slave\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0xa0, 0xd8}, [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0xdd0) 2018/04/12 18:27:06 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f75702e6e65742f73797a310456be4b42c5c4dbe0403bf1ecc4506928f2944fae41f0caeb5a21ca5d546faa7422ea518725e92828382ead353029f494266db4b9451f19bccc9b20f6c3cba32425abd3a9b19e7bbaea1d791bba161d4a0609450ae1ca562b22f3d0372000000081f08f13b193084f5dedfbed46c8829d53ef1577ca03b1dea73a714ee3ebf04a81352334fd633a94fe6affcb2cbec1d2f91c6b91b5cd35a1", 0x1ff) 2018/04/12 18:27:06 executing program 0: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000240)='./file0\x00', 0xe800, 0x1, &(0x7f0000000340)=[{&(0x7f0000000280)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000080)) statfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/173) 2018/04/12 18:27:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext3~', &(0x7f0000000140)='/\x00', 0x0, 0x0, &(0x7f0000000000), 0x28020, &(0x7f00000000c0)={[{@resgid={'resgid', 0x3d, [0x34]}, 0x2c}]}) [ 252.293093] ip6tnl0: Invalid MTU 12746753 requested, hw max 65392 2018/04/12 18:27:06 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000340)=""/170, 0xaa}], 0x1) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000bc0)=ANY=[@ANYBLOB="8de345bdf1894bd6ac01b4d755b5502ab44eb7ed43871ac975b7ad812a682ee539830ffad7db9ac464fd7fab8aefe42003a3296c4b91fdb731ac25e4c839be2a7b2457ae816965053783aa6a3b7d05652b30be9bcffc7b1f16f4b1910449003edc55b81f0471b0b2c5ab9c3645f8edc3525618cc142738ed37844ed73a1504f05f565c335e763023d4"], 0x1) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x211080}, 0xc, &(0x7f0000000b00)={&(0x7f00000007c0)={0x108, 0x9, 0x2, 0x210, 0x70bd26, 0x25dfdbfd, {0x1, 0x0, 0x8}, [@generic="2fbb97f0d2dd021961f223d8070ce37ff70a31e3704ea1d2dce96b0bcee5b7c854583e280fe5e39a66fe4601931204e005088e6109d92a6733384366d0bee12a53c980a029e90f59660189f6f62ecd0fa6c726e85b341064e71e58638ab04bd5c7366d1c5d732c02f959880017341119dab4787e19875074384a57abef23e953565ed0109e11ac3084a36ce025fcd9f4879f671093553193e6c47da757b096db053143d3362bd407d1eedb1af1f5ff53f6596f5d991a1a563622023007e106f7f6ad9b4dd3baec8459e7956d330f566ccabd0c780a66f6672f65645f1da8027c7f780cb41661d18169a954d4905b051b2d698c40"]}, 0x108}, 0x1}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={@loopback, @local, 0x0}, &(0x7f0000000080)=0xc) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000780)={0x0, 0x0, 0xfffffffffffffff8, 0x3, 0x8, 0x8}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={@loopback={0x0, 0x1}, @local={0xfe, 0x80, [], 0xaa}, @mcast1={0xff, 0x1, [], 0x1}, 0x9, 0x5, 0x4, 0x0, 0x2, 0x40c30188, r1}) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b", 0x14}], 0x1) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000d40)={'ip6tnl0\x00', @ifru_hwaddr=@link_local={0x1, 0x80, 0xc2}}) request_key(&(0x7f0000000500)='id_legacy\x00', &(0x7f0000000540)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000580)='IPVS\x00', 0x0) r2 = request_key(&(0x7f0000000600)='cifs.idmap\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000680)='keyring]ppp1>\x00', 0xfffffffffffffffa) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000b80)={0x16}) keyctl$instantiate(0xc, 0x0, &(0x7f00000005c0)="72a2ac839828e8a55745245d7c6fc8875594a2957de1bbeefab99652f51bde831db85203c1", 0x25, r2) 2018/04/12 18:27:06 executing program 2: syz_emit_ethernet(0xc0, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="5b51fc71599a", @empty, @random="05db9db24e2a", @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}}, 0x0) 2018/04/12 18:27:06 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f75702e6e65742f73797a310456be4b42c5c4dbe0403bf1ecc4506928f2944fae41f0caeb5a21ca5d546faa7422ea518725e92828382ead353029f494266db4b9451f19bccc9b20f6c3cba32425abd3a9b19e7bbaea1d791bba161d4a0609450ae1ca562b22f3d0372000000081f08f13b193084f5dedfbed46c8829d53ef1577ca03b1dea73a714ee3ebf04a81352334fd633a94fe6affcb2cbec1d2f91c6b91b5cd35a1", 0x1ff) 2018/04/12 18:27:06 executing program 5: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0xd0}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x7fffffffefff, 0x2, 0x1, &(0x7f0000000480)) [ 252.428372] EXT4-fs (sda1): re-mounted. Opts: resgid=4, 2018/04/12 18:27:06 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f72ffc)=0xb6c, 0x4) sendto$inet6(r0, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e21}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x40040010000004a, &(0x7f00000001c0)=0xb3, 0x24) recvfrom$inet6(r0, &(0x7f0000219000)=""/246, 0xf6, 0x23fff9, 0x0, 0x0) [ 252.474817] ip6tnl0: Invalid MTU 12746753 requested, hw max 65392 2018/04/12 18:27:06 executing program 2: syz_emit_ethernet(0xc0, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="5b51fc71599a", @empty, @random="05db9db24e2a", @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}}, 0x0) 2018/04/12 18:27:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext3~', &(0x7f0000000140)='/\x00', 0x0, 0x0, &(0x7f0000000000), 0x28020, &(0x7f00000000c0)={[{@resgid={'resgid', 0x3d, [0x34]}, 0x2c}]}) [ 252.611243] EXT4-fs (sda1): re-mounted. Opts: resgid=4, 2018/04/12 18:27:07 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000340)=""/170, 0xaa}], 0x1) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000bc0)=ANY=[@ANYBLOB="8de345bdf1894bd6ac01b4d755b5502ab44eb7ed43871ac975b7ad812a682ee539830ffad7db9ac464fd7fab8aefe42003a3296c4b91fdb731ac25e4c839be2a7b2457ae816965053783aa6a3b7d05652b30be9bcffc7b1f16f4b1910449003edc55b81f0471b0b2c5ab9c3645f8edc3525618cc142738ed37844ed73a1504f05f565c335e763023d4"], 0x1) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x211080}, 0xc, &(0x7f0000000b00)={&(0x7f00000007c0)={0x108, 0x9, 0x2, 0x210, 0x70bd26, 0x25dfdbfd, {0x1, 0x0, 0x8}, [@generic="2fbb97f0d2dd021961f223d8070ce37ff70a31e3704ea1d2dce96b0bcee5b7c854583e280fe5e39a66fe4601931204e005088e6109d92a6733384366d0bee12a53c980a029e90f59660189f6f62ecd0fa6c726e85b341064e71e58638ab04bd5c7366d1c5d732c02f959880017341119dab4787e19875074384a57abef23e953565ed0109e11ac3084a36ce025fcd9f4879f671093553193e6c47da757b096db053143d3362bd407d1eedb1af1f5ff53f6596f5d991a1a563622023007e106f7f6ad9b4dd3baec8459e7956d330f566ccabd0c780a66f6672f65645f1da8027c7f780cb41661d18169a954d4905b051b2d698c40"]}, 0x108}, 0x1}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={@loopback, @local, 0x0}, &(0x7f0000000080)=0xc) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000780)={0x0, 0x0, 0xfffffffffffffff8, 0x3, 0x8, 0x8}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={@loopback={0x0, 0x1}, @local={0xfe, 0x80, [], 0xaa}, @mcast1={0xff, 0x1, [], 0x1}, 0x9, 0x5, 0x4, 0x0, 0x2, 0x40c30188, r1}) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b", 0x14}], 0x1) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000d40)={'ip6tnl0\x00', @ifru_hwaddr=@link_local={0x1, 0x80, 0xc2}}) request_key(&(0x7f0000000500)='id_legacy\x00', &(0x7f0000000540)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000580)='IPVS\x00', 0x0) r2 = request_key(&(0x7f0000000600)='cifs.idmap\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000680)='keyring]ppp1>\x00', 0xfffffffffffffffa) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000b80)={0x16}) keyctl$instantiate(0xc, 0x0, &(0x7f00000005c0)="72a2ac839828e8a55745245d7c6fc8875594a2957de1bbeefab99652f51bde831db85203c1", 0x25, r2) 2018/04/12 18:27:07 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f75702e6e65742f73797a310456be4b42c5c4dbe0403bf1ecc4506928f2944fae41f0caeb5a21ca5d546faa7422ea518725e92828382ead353029f494266db4b9451f19bccc9b20f6c3cba32425abd3a9b19e7bbaea1d791bba161d4a0609450ae1ca562b22f3d0372000000081f08f13b193084f5dedfbed46c8829d53ef1577ca03b1dea73a714ee3ebf04a81352334fd633a94fe6affcb2cbec1d2f91c6b91b5cd35a1", 0x1ff) 2018/04/12 18:27:07 executing program 5: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0xd0}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x7fffffffefff, 0x2, 0x1, &(0x7f0000000480)) 2018/04/12 18:27:07 executing program 2: syz_emit_ethernet(0xc0, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="5b51fc71599a", @empty, @random="05db9db24e2a", @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}}, 0x0) 2018/04/12 18:27:07 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f72ffc)=0xb6c, 0x4) sendto$inet6(r0, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e21}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x40040010000004a, &(0x7f00000001c0)=0xb3, 0x24) recvfrom$inet6(r0, &(0x7f0000219000)=""/246, 0xf6, 0x23fff9, 0x0, 0x0) 2018/04/12 18:27:07 executing program 4: r0 = shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) shmdt(r0) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x71, 0x1) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000040)=0x2, 0x4) acct(&(0x7f0000000380)='./file0\x00') clock_adjtime(0x0, &(0x7f0000000140)={0xd9, 0x80, 0x7fff, 0x20, 0x5, 0x1, 0xfff, 0x0, 0x10000, 0x7, 0x1, 0x20, 0x80, 0x4, 0x53f4044e, 0x2, 0xfffffffffffffffc, 0x0, 0x5, 0x80000000, 0x1f, 0x1, 0x9f, 0x7, 0x8, 0xfffffffffffffff7}) 2018/04/12 18:27:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000a8bfff)=""/1, 0x805031ae) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 2018/04/12 18:27:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000a8bfff)=""/1, 0x805031ae) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 2018/04/12 18:27:07 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f72ffc)=0xb6c, 0x4) sendto$inet6(r0, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e21}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x40040010000004a, &(0x7f00000001c0)=0xb3, 0x24) recvfrom$inet6(r0, &(0x7f0000219000)=""/246, 0xf6, 0x23fff9, 0x0, 0x0) 2018/04/12 18:27:07 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000340)=""/170, 0xaa}], 0x1) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000bc0)=ANY=[@ANYBLOB="8de345bdf1894bd6ac01b4d755b5502ab44eb7ed43871ac975b7ad812a682ee539830ffad7db9ac464fd7fab8aefe42003a3296c4b91fdb731ac25e4c839be2a7b2457ae816965053783aa6a3b7d05652b30be9bcffc7b1f16f4b1910449003edc55b81f0471b0b2c5ab9c3645f8edc3525618cc142738ed37844ed73a1504f05f565c335e763023d4"], 0x1) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x211080}, 0xc, &(0x7f0000000b00)={&(0x7f00000007c0)={0x108, 0x9, 0x2, 0x210, 0x70bd26, 0x25dfdbfd, {0x1, 0x0, 0x8}, [@generic="2fbb97f0d2dd021961f223d8070ce37ff70a31e3704ea1d2dce96b0bcee5b7c854583e280fe5e39a66fe4601931204e005088e6109d92a6733384366d0bee12a53c980a029e90f59660189f6f62ecd0fa6c726e85b341064e71e58638ab04bd5c7366d1c5d732c02f959880017341119dab4787e19875074384a57abef23e953565ed0109e11ac3084a36ce025fcd9f4879f671093553193e6c47da757b096db053143d3362bd407d1eedb1af1f5ff53f6596f5d991a1a563622023007e106f7f6ad9b4dd3baec8459e7956d330f566ccabd0c780a66f6672f65645f1da8027c7f780cb41661d18169a954d4905b051b2d698c40"]}, 0x108}, 0x1}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={@loopback, @local, 0x0}, &(0x7f0000000080)=0xc) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000780)={0x0, 0x0, 0xfffffffffffffff8, 0x3, 0x8, 0x8}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={@loopback={0x0, 0x1}, @local={0xfe, 0x80, [], 0xaa}, @mcast1={0xff, 0x1, [], 0x1}, 0x9, 0x5, 0x4, 0x0, 0x2, 0x40c30188, r1}) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b", 0x14}], 0x1) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000d40)={'ip6tnl0\x00', @ifru_hwaddr=@link_local={0x1, 0x80, 0xc2}}) request_key(&(0x7f0000000500)='id_legacy\x00', &(0x7f0000000540)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000580)='IPVS\x00', 0x0) r2 = request_key(&(0x7f0000000600)='cifs.idmap\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000680)='keyring]ppp1>\x00', 0xfffffffffffffffa) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000b80)={0x16}) keyctl$instantiate(0xc, 0x0, &(0x7f00000005c0)="72a2ac839828e8a55745245d7c6fc8875594a2957de1bbeefab99652f51bde831db85203c1", 0x25, r2) 2018/04/12 18:27:07 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x123, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x7}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x40}, 0x1}, 0x0) [ 253.198965] ip6tnl0: Invalid MTU 12746753 requested, hw max 65392 [ 253.237745] Process accounting resumed 2018/04/12 18:27:07 executing program 2: syz_emit_ethernet(0xc0, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="5b51fc71599a", @empty, @random="05db9db24e2a", @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}}, 0x0) 2018/04/12 18:27:07 executing program 5: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0xd0}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x7fffffffefff, 0x2, 0x1, &(0x7f0000000480)) 2018/04/12 18:27:07 executing program 4: r0 = shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) shmdt(r0) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x71, 0x1) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000040)=0x2, 0x4) acct(&(0x7f0000000380)='./file0\x00') clock_adjtime(0x0, &(0x7f0000000140)={0xd9, 0x80, 0x7fff, 0x20, 0x5, 0x1, 0xfff, 0x0, 0x10000, 0x7, 0x1, 0x20, 0x80, 0x4, 0x53f4044e, 0x2, 0xfffffffffffffffc, 0x0, 0x5, 0x80000000, 0x1f, 0x1, 0x9f, 0x7, 0x8, 0xfffffffffffffff7}) [ 253.278147] ip6tnl0: Invalid MTU 12746753 requested, hw max 65392 [ 253.313904] Process accounting resumed [ 253.418136] Process accounting resumed 2018/04/12 18:27:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x22, 0x331, 0x0, 0x0, {0x20000000006}}, 0x14}, 0x1}, 0x0) 2018/04/12 18:27:08 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x123, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x7}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x40}, 0x1}, 0x0) 2018/04/12 18:27:08 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f72ffc)=0xb6c, 0x4) sendto$inet6(r0, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e21}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x40040010000004a, &(0x7f00000001c0)=0xb3, 0x24) recvfrom$inet6(r0, &(0x7f0000219000)=""/246, 0xf6, 0x23fff9, 0x0, 0x0) 2018/04/12 18:27:08 executing program 2: ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x991371}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0xea5c, 0x24a, &(0x7f000000a000)=""/195}, 0x48) 2018/04/12 18:27:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0xd1, 0x2, [0x0, 0x7ff]}, 0xc) 2018/04/12 18:27:08 executing program 5: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0xd0}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x7fffffffefff, 0x2, 0x1, &(0x7f0000000480)) 2018/04/12 18:27:08 executing program 4: r0 = shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) shmdt(r0) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x71, 0x1) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000040)=0x2, 0x4) acct(&(0x7f0000000380)='./file0\x00') clock_adjtime(0x0, &(0x7f0000000140)={0xd9, 0x80, 0x7fff, 0x20, 0x5, 0x1, 0xfff, 0x0, 0x10000, 0x7, 0x1, 0x20, 0x80, 0x4, 0x53f4044e, 0x2, 0xfffffffffffffffc, 0x0, 0x5, 0x80000000, 0x1f, 0x1, 0x9f, 0x7, 0x8, 0xfffffffffffffff7}) 2018/04/12 18:27:08 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f000043cf32), 0x0, 0x600007ff, &(0x7f0000000000)={0x2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000340)=""/157, &(0x7f0000000140)=0x9d) 2018/04/12 18:27:08 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x123, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x7}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x40}, 0x1}, 0x0) 2018/04/12 18:27:08 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f000043cf32), 0x0, 0x600007ff, &(0x7f0000000000)={0x2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000340)=""/157, &(0x7f0000000140)=0x9d) 2018/04/12 18:27:08 executing program 2: ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x991371}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0xea5c, 0x24a, &(0x7f000000a000)=""/195}, 0x48) 2018/04/12 18:27:08 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f000043cf32), 0x0, 0x600007ff, &(0x7f0000000000)={0x2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000340)=""/157, &(0x7f0000000140)=0x9d) [ 254.170512] Process accounting resumed 2018/04/12 18:27:08 executing program 5: r0 = socket$inet(0x2b, 0x801, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/04/12 18:27:08 executing program 4: r0 = shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) shmdt(r0) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x71, 0x1) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000040)=0x2, 0x4) acct(&(0x7f0000000380)='./file0\x00') clock_adjtime(0x0, &(0x7f0000000140)={0xd9, 0x80, 0x7fff, 0x20, 0x5, 0x1, 0xfff, 0x0, 0x10000, 0x7, 0x1, 0x20, 0x80, 0x4, 0x53f4044e, 0x2, 0xfffffffffffffffc, 0x0, 0x5, 0x80000000, 0x1f, 0x1, 0x9f, 0x7, 0x8, 0xfffffffffffffff7}) 2018/04/12 18:27:08 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000023000)={&(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0xc, 0x0, @u32}]}, 0x20}, 0x1}, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', @ifru_data=&(0x7f0000000000)="ac8be4abd0f79d6325ae476aab5970a3131f2fb4bbfb3c75500e33d0612f430d"}) 2018/04/12 18:27:08 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x123, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x7}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x40}, 0x1}, 0x0) 2018/04/12 18:27:08 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f000043cf32), 0x0, 0x600007ff, &(0x7f0000000000)={0x2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000340)=""/157, &(0x7f0000000140)=0x9d) 2018/04/12 18:27:08 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000023000)={&(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0xc, 0x0, @u32}]}, 0x20}, 0x1}, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', @ifru_data=&(0x7f0000000000)="ac8be4abd0f79d6325ae476aab5970a3131f2fb4bbfb3c75500e33d0612f430d"}) 2018/04/12 18:27:08 executing program 2: ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x991371}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0xea5c, 0x24a, &(0x7f000000a000)=""/195}, 0x48) [ 254.418911] Process accounting resumed 2018/04/12 18:27:09 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f000043cf32), 0x0, 0x600007ff, &(0x7f0000000000)={0x2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000340)=""/157, &(0x7f0000000140)=0x9d) 2018/04/12 18:27:09 executing program 5: r0 = socket$inet(0x2b, 0x801, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/04/12 18:27:09 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @rand_addr}, 0x10) getsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/04/12 18:27:09 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f000043cf32), 0x0, 0x600007ff, &(0x7f0000000000)={0x2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000340)=""/157, &(0x7f0000000140)=0x9d) 2018/04/12 18:27:09 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) dup2(r0, r2) dup3(r0, r1, 0x0) 2018/04/12 18:27:09 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000023000)={&(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0xc, 0x0, @u32}]}, 0x20}, 0x1}, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', @ifru_data=&(0x7f0000000000)="ac8be4abd0f79d6325ae476aab5970a3131f2fb4bbfb3c75500e33d0612f430d"}) 2018/04/12 18:27:09 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000001000)='/dev/midi#\x00', 0x200, 0x81) syz_open_dev$midi(&(0x7f0000009ff5)='/dev/midi#\x00', 0x2, 0x2103) close(r0) 2018/04/12 18:27:09 executing program 2: ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x991371}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0xea5c, 0x24a, &(0x7f000000a000)=""/195}, 0x48) 2018/04/12 18:27:09 executing program 6: sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}}, 0x1c) r0 = socket$inet(0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x4e20}, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10, &(0x7f0000000600), 0x0, &(0x7f0000000040)=[{0x10, 0x0, 0x7}], 0x7f}}], 0x3fe, 0x0) 2018/04/12 18:27:09 executing program 5: r0 = socket$inet(0x2b, 0x801, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/04/12 18:27:09 executing program 2: r0 = inotify_init() flock(r0, 0x2) r1 = epoll_create(0x102050204) flock(r1, 0x5) 2018/04/12 18:27:09 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000023000)={&(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0xc, 0x0, @u32}]}, 0x20}, 0x1}, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', @ifru_data=&(0x7f0000000000)="ac8be4abd0f79d6325ae476aab5970a3131f2fb4bbfb3c75500e33d0612f430d"}) 2018/04/12 18:27:09 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f000043cf32), 0x0, 0x600007ff, &(0x7f0000000000)={0x2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000340)=""/157, &(0x7f0000000140)=0x9d) 2018/04/12 18:27:09 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000001000)='/dev/midi#\x00', 0x200, 0x81) syz_open_dev$midi(&(0x7f0000009ff5)='/dev/midi#\x00', 0x2, 0x2103) close(r0) 2018/04/12 18:27:09 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @rand_addr}, 0x10) getsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/04/12 18:27:09 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) dup2(r0, r2) dup3(r0, r1, 0x0) 2018/04/12 18:27:09 executing program 5: r0 = socket$inet(0x2b, 0x801, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/04/12 18:27:09 executing program 2: r0 = inotify_init() flock(r0, 0x2) r1 = epoll_create(0x102050204) flock(r1, 0x5) 2018/04/12 18:27:09 executing program 6: sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}}, 0x1c) r0 = socket$inet(0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x4e20}, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10, &(0x7f0000000600), 0x0, &(0x7f0000000040)=[{0x10, 0x0, 0x7}], 0x7f}}], 0x3fe, 0x0) 2018/04/12 18:27:09 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000001000)='/dev/midi#\x00', 0x200, 0x81) syz_open_dev$midi(&(0x7f0000009ff5)='/dev/midi#\x00', 0x2, 0x2103) close(r0) 2018/04/12 18:27:09 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000001000)='/dev/midi#\x00', 0x200, 0x81) syz_open_dev$midi(&(0x7f0000009ff5)='/dev/midi#\x00', 0x2, 0x2103) close(r0) 2018/04/12 18:27:09 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x116}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/12 18:27:09 executing program 5: prctl$void(0x1d) 2018/04/12 18:27:09 executing program 2: r0 = inotify_init() flock(r0, 0x2) r1 = epoll_create(0x102050204) flock(r1, 0x5) 2018/04/12 18:27:09 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) dup2(r0, r2) dup3(r0, r1, 0x0) 2018/04/12 18:27:09 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @rand_addr}, 0x10) getsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/04/12 18:27:09 executing program 2: r0 = inotify_init() flock(r0, 0x2) r1 = epoll_create(0x102050204) flock(r1, 0x5) 2018/04/12 18:27:09 executing program 6: sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}}, 0x1c) r0 = socket$inet(0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x4e20}, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10, &(0x7f0000000600), 0x0, &(0x7f0000000040)=[{0x10, 0x0, 0x7}], 0x7f}}], 0x3fe, 0x0) 2018/04/12 18:27:09 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000001000)='/dev/midi#\x00', 0x200, 0x81) syz_open_dev$midi(&(0x7f0000009ff5)='/dev/midi#\x00', 0x2, 0x2103) close(r0) 2018/04/12 18:27:09 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(aes-asm)))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 2018/04/12 18:27:09 executing program 5: prctl$void(0x1d) 2018/04/12 18:27:09 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000001000)='/dev/midi#\x00', 0x200, 0x81) syz_open_dev$midi(&(0x7f0000009ff5)='/dev/midi#\x00', 0x2, 0x2103) close(r0) 2018/04/12 18:27:10 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) dup2(r0, r2) dup3(r0, r1, 0x0) 2018/04/12 18:27:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79}) 2018/04/12 18:27:10 executing program 6: sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}}, 0x1c) r0 = socket$inet(0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x4e20}, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10, &(0x7f0000000600), 0x0, &(0x7f0000000040)=[{0x10, 0x0, 0x7}], 0x7f}}], 0x3fe, 0x0) 2018/04/12 18:27:10 executing program 5: prctl$void(0x1d) 2018/04/12 18:27:10 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000001000)='/dev/midi#\x00', 0x200, 0x81) syz_open_dev$midi(&(0x7f0000009ff5)='/dev/midi#\x00', 0x2, 0x2103) close(r0) 2018/04/12 18:27:10 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @rand_addr}, 0x10) getsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/04/12 18:27:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(aes-asm)))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 2018/04/12 18:27:10 executing program 1: r0 = open(&(0x7f0000000600)='./file0\x00', 0x28046, 0x0) fallocate(r0, 0x8, 0x0, 0x3f) 2018/04/12 18:27:10 executing program 5: prctl$void(0x1d) 2018/04/12 18:27:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(aes-asm)))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 2018/04/12 18:27:10 executing program 1: r0 = open(&(0x7f0000000600)='./file0\x00', 0x28046, 0x0) fallocate(r0, 0x8, 0x0, 0x3f) 2018/04/12 18:27:10 executing program 6: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000020fc8)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000000)="4c0000001000ff20fffeda956fca83b724a6008008000000000000000400000010000400c8050f000098bc593ab6821149a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc8d2b0790ed", 0x4c}], 0x1}, 0x0) 2018/04/12 18:27:10 executing program 7: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) io_setup(0x1000, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="040000008cf46cfde19a4e3bcfbdbedee32e68b3a251fd2cfd09684d9c7afae320bbf22a2ce3cb58fa63c42a238cb85f1023fa813c9a0e46", 0x38}]) 2018/04/12 18:27:10 executing program 3: mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f000040a000/0x4000)=nil) 2018/04/12 18:27:10 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000580)=@rc, &(0x7f0000000280)=0x4c) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="4b135613"], 0x1}, 0x1, 0x0, 0x0, 0x20008004}, 0x40000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f00000004c0)=0x100000001, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() sendmsg$nl_generic(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x1c, 0x20, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0x11, @pid=r3}]}, 0x1c}, 0x1}, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) r4 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x1c, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e22, 0xfa5f, @ipv4={[], [0xff, 0xff]}, 0x6fa74d64}}, [0x40, 0xb27, 0x11a, 0x9, 0x5, 0x40c, 0x8001, 0xffff, 0x40009, 0x7, 0xfff, 0x9, 0x5b, 0x0, 0x4]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000500)={r5, 0x101}, &(0x7f0000000540)=0x8) tee(r4, 0xffffffffffffffff, 0x6bf081f2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xa, 0x3ff, 0x91f, 0xe134, 0x1a, 0xffffffffffffffff, 0x8}, 0x2c) r6 = socket$vsock_dgram(0x28, 0x2, 0x0) writev(r6, &(0x7f0000000140), 0x100002fb) r7 = socket$inet6(0xa, 0x0, 0x7fc) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r7, 0x43) r8 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r8, &(0x7f0000966fe4)={0xa, 0x4e23, 0xfffffffffffffffd, @mcast1={0xff, 0x1, [], 0x1}, 0x6}, 0xe) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000edc000)=0x3, 0x4) sendto$inet6(r8, &(0x7f0000000140)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmsg$netlink(r8, &(0x7f00009f3fc8)={0x0, 0x0, &(0x7f000070f000)=[{&(0x7f0000a77000)={0x2300}, 0x2300}], 0x1, &(0x7f0000414000)}, 0x0) accept4(r7, 0x0, &(0x7f0000da8ffc), 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') ioctl$sock_inet_SIOCDELRT(r9, 0x890c, &(0x7f0000000880)={0x2ce7, {0x2, 0x4e22, @multicast2=0xe0000002}, {0x2, 0x4e21, @loopback=0x7f000001}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}, 0x4, 0xffffffffffffffff, 0x7, 0xffffffffffbff001, 0x0, 0x0, 0x5, 0x400000, 0x1}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000800)=[@in6={0xa, 0x4e24, 0x18c4, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x8000000000}, @in6={0xa, 0x4e21, 0x20000000000000, @loopback={0x0, 0x1}, 0x80}, @in={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e23, 0x9, @empty, 0x8}], 0x74) 2018/04/12 18:27:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79}) 2018/04/12 18:27:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(aes-asm)))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) [ 255.989888] netlink: 'syz-executor6': attribute type 4 has an invalid length. [ 255.997309] netlink: 28 bytes leftover after parsing attributes in process `syz-executor6'. [ 256.005864] sit0: Invalid MTU 984520 requested, hw max 65508 2018/04/12 18:27:10 executing program 1: r0 = open(&(0x7f0000000600)='./file0\x00', 0x28046, 0x0) fallocate(r0, 0x8, 0x0, 0x3f) 2018/04/12 18:27:10 executing program 7: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) io_setup(0x1000, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="040000008cf46cfde19a4e3bcfbdbedee32e68b3a251fd2cfd09684d9c7afae320bbf22a2ce3cb58fa63c42a238cb85f1023fa813c9a0e46", 0x38}]) 2018/04/12 18:27:10 executing program 3: mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f000040a000/0x4000)=nil) 2018/04/12 18:27:10 executing program 6: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000020fc8)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000000)="4c0000001000ff20fffeda956fca83b724a6008008000000000000000400000010000400c8050f000098bc593ab6821149a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc8d2b0790ed", 0x4c}], 0x1}, 0x0) 2018/04/12 18:27:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79}) 2018/04/12 18:27:10 executing program 1: r0 = open(&(0x7f0000000600)='./file0\x00', 0x28046, 0x0) fallocate(r0, 0x8, 0x0, 0x3f) 2018/04/12 18:27:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79}) 2018/04/12 18:27:10 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000580)=@rc, &(0x7f0000000280)=0x4c) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="4b135613"], 0x1}, 0x1, 0x0, 0x0, 0x20008004}, 0x40000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f00000004c0)=0x100000001, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() sendmsg$nl_generic(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x1c, 0x20, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0x11, @pid=r3}]}, 0x1c}, 0x1}, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) r4 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x1c, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e22, 0xfa5f, @ipv4={[], [0xff, 0xff]}, 0x6fa74d64}}, [0x40, 0xb27, 0x11a, 0x9, 0x5, 0x40c, 0x8001, 0xffff, 0x40009, 0x7, 0xfff, 0x9, 0x5b, 0x0, 0x4]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000500)={r5, 0x101}, &(0x7f0000000540)=0x8) tee(r4, 0xffffffffffffffff, 0x6bf081f2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xa, 0x3ff, 0x91f, 0xe134, 0x1a, 0xffffffffffffffff, 0x8}, 0x2c) r6 = socket$vsock_dgram(0x28, 0x2, 0x0) writev(r6, &(0x7f0000000140), 0x100002fb) r7 = socket$inet6(0xa, 0x0, 0x7fc) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r7, 0x43) r8 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r8, &(0x7f0000966fe4)={0xa, 0x4e23, 0xfffffffffffffffd, @mcast1={0xff, 0x1, [], 0x1}, 0x6}, 0xe) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000edc000)=0x3, 0x4) sendto$inet6(r8, &(0x7f0000000140)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmsg$netlink(r8, &(0x7f00009f3fc8)={0x0, 0x0, &(0x7f000070f000)=[{&(0x7f0000a77000)={0x2300}, 0x2300}], 0x1, &(0x7f0000414000)}, 0x0) accept4(r7, 0x0, &(0x7f0000da8ffc), 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') ioctl$sock_inet_SIOCDELRT(r9, 0x890c, &(0x7f0000000880)={0x2ce7, {0x2, 0x4e22, @multicast2=0xe0000002}, {0x2, 0x4e21, @loopback=0x7f000001}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}, 0x4, 0xffffffffffffffff, 0x7, 0xffffffffffbff001, 0x0, 0x0, 0x5, 0x400000, 0x1}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000800)=[@in6={0xa, 0x4e24, 0x18c4, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x8000000000}, @in6={0xa, 0x4e21, 0x20000000000000, @loopback={0x0, 0x1}, 0x80}, @in={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e23, 0x9, @empty, 0x8}], 0x74) 2018/04/12 18:27:10 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000580)=@rc, &(0x7f0000000280)=0x4c) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="4b135613"], 0x1}, 0x1, 0x0, 0x0, 0x20008004}, 0x40000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f00000004c0)=0x100000001, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() sendmsg$nl_generic(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x1c, 0x20, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0x11, @pid=r3}]}, 0x1c}, 0x1}, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) r4 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x1c, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e22, 0xfa5f, @ipv4={[], [0xff, 0xff]}, 0x6fa74d64}}, [0x40, 0xb27, 0x11a, 0x9, 0x5, 0x40c, 0x8001, 0xffff, 0x40009, 0x7, 0xfff, 0x9, 0x5b, 0x0, 0x4]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000500)={r5, 0x101}, &(0x7f0000000540)=0x8) tee(r4, 0xffffffffffffffff, 0x6bf081f2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xa, 0x3ff, 0x91f, 0xe134, 0x1a, 0xffffffffffffffff, 0x8}, 0x2c) r6 = socket$vsock_dgram(0x28, 0x2, 0x0) writev(r6, &(0x7f0000000140), 0x100002fb) r7 = socket$inet6(0xa, 0x0, 0x7fc) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r7, 0x43) r8 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r8, &(0x7f0000966fe4)={0xa, 0x4e23, 0xfffffffffffffffd, @mcast1={0xff, 0x1, [], 0x1}, 0x6}, 0xe) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000edc000)=0x3, 0x4) sendto$inet6(r8, &(0x7f0000000140)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmsg$netlink(r8, &(0x7f00009f3fc8)={0x0, 0x0, &(0x7f000070f000)=[{&(0x7f0000a77000)={0x2300}, 0x2300}], 0x1, &(0x7f0000414000)}, 0x0) accept4(r7, 0x0, &(0x7f0000da8ffc), 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') ioctl$sock_inet_SIOCDELRT(r9, 0x890c, &(0x7f0000000880)={0x2ce7, {0x2, 0x4e22, @multicast2=0xe0000002}, {0x2, 0x4e21, @loopback=0x7f000001}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}, 0x4, 0xffffffffffffffff, 0x7, 0xffffffffffbff001, 0x0, 0x0, 0x5, 0x400000, 0x1}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000800)=[@in6={0xa, 0x4e24, 0x18c4, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x8000000000}, @in6={0xa, 0x4e21, 0x20000000000000, @loopback={0x0, 0x1}, 0x80}, @in={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e23, 0x9, @empty, 0x8}], 0x74) 2018/04/12 18:27:10 executing program 3: mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f000040a000/0x4000)=nil) 2018/04/12 18:27:10 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='/\x00', 0x0, 0x0, &(0x7f0000000080), 0xa40e0, &(0x7f00000000c0)={[{@journal_path={'journal_path', 0x3d, './file0'}, 0x2c}]}) [ 256.276508] netlink: 'syz-executor6': attribute type 4 has an invalid length. [ 256.283883] netlink: 28 bytes leftover after parsing attributes in process `syz-executor6'. [ 256.292452] sit0: Invalid MTU 984520 requested, hw max 65508 2018/04/12 18:27:10 executing program 7: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) io_setup(0x1000, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="040000008cf46cfde19a4e3bcfbdbedee32e68b3a251fd2cfd09684d9c7afae320bbf22a2ce3cb58fa63c42a238cb85f1023fa813c9a0e46", 0x38}]) 2018/04/12 18:27:10 executing program 6: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000020fc8)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000000)="4c0000001000ff20fffeda956fca83b724a6008008000000000000000400000010000400c8050f000098bc593ab6821149a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc8d2b0790ed", 0x4c}], 0x1}, 0x0) 2018/04/12 18:27:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79}) [ 256.409431] EXT4-fs (sda1): Cannot specify journal on remount [ 256.441807] netlink: 'syz-executor6': attribute type 4 has an invalid length. [ 256.449241] netlink: 28 bytes leftover after parsing attributes in process `syz-executor6'. [ 256.457852] sit0: Invalid MTU 984520 requested, hw max 65508 [ 256.485901] EXT4-fs (sda1): Cannot specify journal on remount 2018/04/12 18:27:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79}) 2018/04/12 18:27:11 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000580)=@rc, &(0x7f0000000280)=0x4c) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="4b135613"], 0x1}, 0x1, 0x0, 0x0, 0x20008004}, 0x40000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f00000004c0)=0x100000001, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() sendmsg$nl_generic(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x1c, 0x20, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0x11, @pid=r3}]}, 0x1c}, 0x1}, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) r4 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x1c, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e22, 0xfa5f, @ipv4={[], [0xff, 0xff]}, 0x6fa74d64}}, [0x40, 0xb27, 0x11a, 0x9, 0x5, 0x40c, 0x8001, 0xffff, 0x40009, 0x7, 0xfff, 0x9, 0x5b, 0x0, 0x4]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000500)={r5, 0x101}, &(0x7f0000000540)=0x8) tee(r4, 0xffffffffffffffff, 0x6bf081f2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xa, 0x3ff, 0x91f, 0xe134, 0x1a, 0xffffffffffffffff, 0x8}, 0x2c) r6 = socket$vsock_dgram(0x28, 0x2, 0x0) writev(r6, &(0x7f0000000140), 0x100002fb) r7 = socket$inet6(0xa, 0x0, 0x7fc) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r7, 0x43) r8 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r8, &(0x7f0000966fe4)={0xa, 0x4e23, 0xfffffffffffffffd, @mcast1={0xff, 0x1, [], 0x1}, 0x6}, 0xe) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000edc000)=0x3, 0x4) sendto$inet6(r8, &(0x7f0000000140)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmsg$netlink(r8, &(0x7f00009f3fc8)={0x0, 0x0, &(0x7f000070f000)=[{&(0x7f0000a77000)={0x2300}, 0x2300}], 0x1, &(0x7f0000414000)}, 0x0) accept4(r7, 0x0, &(0x7f0000da8ffc), 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') ioctl$sock_inet_SIOCDELRT(r9, 0x890c, &(0x7f0000000880)={0x2ce7, {0x2, 0x4e22, @multicast2=0xe0000002}, {0x2, 0x4e21, @loopback=0x7f000001}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}, 0x4, 0xffffffffffffffff, 0x7, 0xffffffffffbff001, 0x0, 0x0, 0x5, 0x400000, 0x1}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000800)=[@in6={0xa, 0x4e24, 0x18c4, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x8000000000}, @in6={0xa, 0x4e21, 0x20000000000000, @loopback={0x0, 0x1}, 0x80}, @in={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e23, 0x9, @empty, 0x8}], 0x74) 2018/04/12 18:27:11 executing program 3: mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f000040a000/0x4000)=nil) 2018/04/12 18:27:11 executing program 7: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) io_setup(0x1000, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="040000008cf46cfde19a4e3bcfbdbedee32e68b3a251fd2cfd09684d9c7afae320bbf22a2ce3cb58fa63c42a238cb85f1023fa813c9a0e46", 0x38}]) 2018/04/12 18:27:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='/\x00', 0x0, 0x0, &(0x7f0000000080), 0xa40e0, &(0x7f00000000c0)={[{@journal_path={'journal_path', 0x3d, './file0'}, 0x2c}]}) 2018/04/12 18:27:11 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000580)=@rc, &(0x7f0000000280)=0x4c) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="4b135613"], 0x1}, 0x1, 0x0, 0x0, 0x20008004}, 0x40000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f00000004c0)=0x100000001, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() sendmsg$nl_generic(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x1c, 0x20, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0x11, @pid=r3}]}, 0x1c}, 0x1}, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) r4 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x1c, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e22, 0xfa5f, @ipv4={[], [0xff, 0xff]}, 0x6fa74d64}}, [0x40, 0xb27, 0x11a, 0x9, 0x5, 0x40c, 0x8001, 0xffff, 0x40009, 0x7, 0xfff, 0x9, 0x5b, 0x0, 0x4]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000500)={r5, 0x101}, &(0x7f0000000540)=0x8) tee(r4, 0xffffffffffffffff, 0x6bf081f2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xa, 0x3ff, 0x91f, 0xe134, 0x1a, 0xffffffffffffffff, 0x8}, 0x2c) r6 = socket$vsock_dgram(0x28, 0x2, 0x0) writev(r6, &(0x7f0000000140), 0x100002fb) r7 = socket$inet6(0xa, 0x0, 0x7fc) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r7, 0x43) r8 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r8, &(0x7f0000966fe4)={0xa, 0x4e23, 0xfffffffffffffffd, @mcast1={0xff, 0x1, [], 0x1}, 0x6}, 0xe) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000edc000)=0x3, 0x4) sendto$inet6(r8, &(0x7f0000000140)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmsg$netlink(r8, &(0x7f00009f3fc8)={0x0, 0x0, &(0x7f000070f000)=[{&(0x7f0000a77000)={0x2300}, 0x2300}], 0x1, &(0x7f0000414000)}, 0x0) accept4(r7, 0x0, &(0x7f0000da8ffc), 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') ioctl$sock_inet_SIOCDELRT(r9, 0x890c, &(0x7f0000000880)={0x2ce7, {0x2, 0x4e22, @multicast2=0xe0000002}, {0x2, 0x4e21, @loopback=0x7f000001}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}, 0x4, 0xffffffffffffffff, 0x7, 0xffffffffffbff001, 0x0, 0x0, 0x5, 0x400000, 0x1}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000800)=[@in6={0xa, 0x4e24, 0x18c4, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x8000000000}, @in6={0xa, 0x4e21, 0x20000000000000, @loopback={0x0, 0x1}, 0x80}, @in={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e23, 0x9, @empty, 0x8}], 0x74) 2018/04/12 18:27:11 executing program 6: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000020fc8)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000000)="4c0000001000ff20fffeda956fca83b724a6008008000000000000000400000010000400c8050f000098bc593ab6821149a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc8d2b0790ed", 0x4c}], 0x1}, 0x0) 2018/04/12 18:27:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79}) [ 257.061512] netlink: 'syz-executor6': attribute type 4 has an invalid length. [ 257.068960] netlink: 28 bytes leftover after parsing attributes in process `syz-executor6'. [ 257.077508] sit0: Invalid MTU 984520 requested, hw max 65508 [ 257.099430] EXT4-fs (sda1): Cannot specify journal on remount 2018/04/12 18:27:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000d1d000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000640)=@ipv6_delroute={0x24, 0x19, 0x11, 0x0, 0x0, {0xa, 0xb4}, [@RTA_IIF={0x8, 0x1}]}, 0x24}, 0x1}, 0x0) 2018/04/12 18:27:11 executing program 0: socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000001ff8)={0x0}) bind$inet(r0, &(0x7f0000f19ff0)={0x1e, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/12 18:27:11 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6, 0x0, 0x33}, @in=@broadcast=0xffffffff, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x86}, [@replay_esn_val={0x1c, 0x17, {0x7b, 0x0, 0x0, 0x0, 0x0, 0x8}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}, 0x1}, 0x0) 2018/04/12 18:27:11 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000fcb000), 0x4) r0 = syz_open_dev$tun(&(0x7f0000a9dff3)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x100000002, &(0x7f000044bff8)=0x0) io_submit(r1, 0x1, &(0x7f0000000840)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)}]) 2018/04/12 18:27:11 executing program 6: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000c96000)='/dev/hwrng\x00', 0x0, 0x0) preadv(r0, &(0x7f0000734fd0)=[{&(0x7f0000360000)}, {&(0x7f0000fef000)=""/241, 0xf1}], 0x2, 0x0) 2018/04/12 18:27:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='/\x00', 0x0, 0x0, &(0x7f0000000080), 0xa40e0, &(0x7f00000000c0)={[{@journal_path={'journal_path', 0x3d, './file0'}, 0x2c}]}) 2018/04/12 18:27:11 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000580)=@rc, &(0x7f0000000280)=0x4c) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="4b135613"], 0x1}, 0x1, 0x0, 0x0, 0x20008004}, 0x40000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f00000004c0)=0x100000001, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() sendmsg$nl_generic(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x1c, 0x20, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0x11, @pid=r3}]}, 0x1c}, 0x1}, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) r4 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x1c, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e22, 0xfa5f, @ipv4={[], [0xff, 0xff]}, 0x6fa74d64}}, [0x40, 0xb27, 0x11a, 0x9, 0x5, 0x40c, 0x8001, 0xffff, 0x40009, 0x7, 0xfff, 0x9, 0x5b, 0x0, 0x4]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000500)={r5, 0x101}, &(0x7f0000000540)=0x8) tee(r4, 0xffffffffffffffff, 0x6bf081f2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xa, 0x3ff, 0x91f, 0xe134, 0x1a, 0xffffffffffffffff, 0x8}, 0x2c) r6 = socket$vsock_dgram(0x28, 0x2, 0x0) writev(r6, &(0x7f0000000140), 0x100002fb) r7 = socket$inet6(0xa, 0x0, 0x7fc) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r7, 0x43) r8 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r8, &(0x7f0000966fe4)={0xa, 0x4e23, 0xfffffffffffffffd, @mcast1={0xff, 0x1, [], 0x1}, 0x6}, 0xe) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000edc000)=0x3, 0x4) sendto$inet6(r8, &(0x7f0000000140)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmsg$netlink(r8, &(0x7f00009f3fc8)={0x0, 0x0, &(0x7f000070f000)=[{&(0x7f0000a77000)={0x2300}, 0x2300}], 0x1, &(0x7f0000414000)}, 0x0) accept4(r7, 0x0, &(0x7f0000da8ffc), 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') ioctl$sock_inet_SIOCDELRT(r9, 0x890c, &(0x7f0000000880)={0x2ce7, {0x2, 0x4e22, @multicast2=0xe0000002}, {0x2, 0x4e21, @loopback=0x7f000001}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}, 0x4, 0xffffffffffffffff, 0x7, 0xffffffffffbff001, 0x0, 0x0, 0x5, 0x400000, 0x1}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000800)=[@in6={0xa, 0x4e24, 0x18c4, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x8000000000}, @in6={0xa, 0x4e21, 0x20000000000000, @loopback={0x0, 0x1}, 0x80}, @in={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e23, 0x9, @empty, 0x8}], 0x74) 2018/04/12 18:27:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000d1d000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000640)=@ipv6_delroute={0x24, 0x19, 0x11, 0x0, 0x0, {0xa, 0xb4}, [@RTA_IIF={0x8, 0x1}]}, 0x24}, 0x1}, 0x0) 2018/04/12 18:27:11 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6, 0x0, 0x33}, @in=@broadcast=0xffffffff, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x86}, [@replay_esn_val={0x1c, 0x17, {0x7b, 0x0, 0x0, 0x0, 0x0, 0x8}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}, 0x1}, 0x0) 2018/04/12 18:27:11 executing program 6: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000c96000)='/dev/hwrng\x00', 0x0, 0x0) preadv(r0, &(0x7f0000734fd0)=[{&(0x7f0000360000)}, {&(0x7f0000fef000)=""/241, 0xf1}], 0x2, 0x0) [ 257.315576] EXT4-fs (sda1): Cannot specify journal on remount 2018/04/12 18:27:12 executing program 0: socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000001ff8)={0x0}) bind$inet(r0, &(0x7f0000f19ff0)={0x1e, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/12 18:27:12 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='/\x00', 0x0, 0x0, &(0x7f0000000080), 0xa40e0, &(0x7f00000000c0)={[{@journal_path={'journal_path', 0x3d, './file0'}, 0x2c}]}) 2018/04/12 18:27:12 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000fcb000), 0x4) r0 = syz_open_dev$tun(&(0x7f0000a9dff3)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x100000002, &(0x7f000044bff8)=0x0) io_submit(r1, 0x1, &(0x7f0000000840)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)}]) 2018/04/12 18:27:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000d1d000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000640)=@ipv6_delroute={0x24, 0x19, 0x11, 0x0, 0x0, {0xa, 0xb4}, [@RTA_IIF={0x8, 0x1}]}, 0x24}, 0x1}, 0x0) 2018/04/12 18:27:12 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6, 0x0, 0x33}, @in=@broadcast=0xffffffff, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x86}, [@replay_esn_val={0x1c, 0x17, {0x7b, 0x0, 0x0, 0x0, 0x0, 0x8}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}, 0x1}, 0x0) 2018/04/12 18:27:12 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, "a399e9c558720d8d1f6728f1c5f07531dc6150defaca6ebcaf1b8b8c36184c8f147be96ea31efbf49ca9b9d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "655397eb4a90dc0d4bbdd330f3aa50c6a17a4cbe46f9a27f671d171c4a2c50f288493929c1e0fe9468a5eb556554a2803b25502ef5bc450d5f58f28b16e1198d", &(0x7f0000b0bfb2)="446465762f736e642f636f6e74726f6c4323009cb55a60fb8d54423e20546bd33125000000000000fd03e22965bb699aabcb8311b779fbf5497252581e19688501001a7898bd7751951d53b93ab1", 0x4e}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000001000)={&(0x7f0000005000), 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, "b1abe2da02000000e1000000fc00000000000000dc98784b49e0007e00002fd9"}}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)=""/250) 2018/04/12 18:27:12 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000580)=@rc, &(0x7f0000000280)=0x4c) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="4b135613"], 0x1}, 0x1, 0x0, 0x0, 0x20008004}, 0x40000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f00000004c0)=0x100000001, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() sendmsg$nl_generic(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x1c, 0x20, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0x11, @pid=r3}]}, 0x1c}, 0x1}, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) r4 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x1c, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e22, 0xfa5f, @ipv4={[], [0xff, 0xff]}, 0x6fa74d64}}, [0x40, 0xb27, 0x11a, 0x9, 0x5, 0x40c, 0x8001, 0xffff, 0x40009, 0x7, 0xfff, 0x9, 0x5b, 0x0, 0x4]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000500)={r5, 0x101}, &(0x7f0000000540)=0x8) tee(r4, 0xffffffffffffffff, 0x6bf081f2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xa, 0x3ff, 0x91f, 0xe134, 0x1a, 0xffffffffffffffff, 0x8}, 0x2c) r6 = socket$vsock_dgram(0x28, 0x2, 0x0) writev(r6, &(0x7f0000000140), 0x100002fb) r7 = socket$inet6(0xa, 0x0, 0x7fc) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r7, 0x43) r8 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r8, &(0x7f0000966fe4)={0xa, 0x4e23, 0xfffffffffffffffd, @mcast1={0xff, 0x1, [], 0x1}, 0x6}, 0xe) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000edc000)=0x3, 0x4) sendto$inet6(r8, &(0x7f0000000140)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmsg$netlink(r8, &(0x7f00009f3fc8)={0x0, 0x0, &(0x7f000070f000)=[{&(0x7f0000a77000)={0x2300}, 0x2300}], 0x1, &(0x7f0000414000)}, 0x0) accept4(r7, 0x0, &(0x7f0000da8ffc), 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') ioctl$sock_inet_SIOCDELRT(r9, 0x890c, &(0x7f0000000880)={0x2ce7, {0x2, 0x4e22, @multicast2=0xe0000002}, {0x2, 0x4e21, @loopback=0x7f000001}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}, 0x4, 0xffffffffffffffff, 0x7, 0xffffffffffbff001, 0x0, 0x0, 0x5, 0x400000, 0x1}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000800)=[@in6={0xa, 0x4e24, 0x18c4, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x8000000000}, @in6={0xa, 0x4e21, 0x20000000000000, @loopback={0x0, 0x1}, 0x80}, @in={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e23, 0x9, @empty, 0x8}], 0x74) 2018/04/12 18:27:12 executing program 6: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000c96000)='/dev/hwrng\x00', 0x0, 0x0) preadv(r0, &(0x7f0000734fd0)=[{&(0x7f0000360000)}, {&(0x7f0000fef000)=""/241, 0xf1}], 0x2, 0x0) 2018/04/12 18:27:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000d1d000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000640)=@ipv6_delroute={0x24, 0x19, 0x11, 0x0, 0x0, {0xa, 0xb4}, [@RTA_IIF={0x8, 0x1}]}, 0x24}, 0x1}, 0x0) [ 257.955394] EXT4-fs (sda1): Cannot specify journal on remount 2018/04/12 18:27:12 executing program 0: socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000001ff8)={0x0}) bind$inet(r0, &(0x7f0000f19ff0)={0x1e, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/12 18:27:13 executing program 6: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000c96000)='/dev/hwrng\x00', 0x0, 0x0) preadv(r0, &(0x7f0000734fd0)=[{&(0x7f0000360000)}, {&(0x7f0000fef000)=""/241, 0xf1}], 0x2, 0x0) 2018/04/12 18:27:13 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000017c0)=[{&(0x7f0000000040)=@in6={0xa, 0x4e21}, 0x1c, &(0x7f0000000080)}], 0x180, 0x0) 2018/04/12 18:27:13 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, "a399e9c558720d8d1f6728f1c5f07531dc6150defaca6ebcaf1b8b8c36184c8f147be96ea31efbf49ca9b9d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "655397eb4a90dc0d4bbdd330f3aa50c6a17a4cbe46f9a27f671d171c4a2c50f288493929c1e0fe9468a5eb556554a2803b25502ef5bc450d5f58f28b16e1198d", &(0x7f0000b0bfb2)="446465762f736e642f636f6e74726f6c4323009cb55a60fb8d54423e20546bd33125000000000000fd03e22965bb699aabcb8311b779fbf5497252581e19688501001a7898bd7751951d53b93ab1", 0x4e}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000001000)={&(0x7f0000005000), 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, "b1abe2da02000000e1000000fc00000000000000dc98784b49e0007e00002fd9"}}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)=""/250) 2018/04/12 18:27:13 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6, 0x0, 0x33}, @in=@broadcast=0xffffffff, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x86}, [@replay_esn_val={0x1c, 0x17, {0x7b, 0x0, 0x0, 0x0, 0x0, 0x8}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}, 0x1}, 0x0) 2018/04/12 18:27:13 executing program 3: r0 = socket$inet6(0xa, 0x80805, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000bbeff4)) shutdown(r0, 0x2) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 2018/04/12 18:27:13 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000fcb000), 0x4) r0 = syz_open_dev$tun(&(0x7f0000a9dff3)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x100000002, &(0x7f000044bff8)=0x0) io_submit(r1, 0x1, &(0x7f0000000840)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)}]) 2018/04/12 18:27:13 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000000003, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "6cb782e4ad88b89d1fd309169f44812107130ee55db70510420aaa96759ecbc36eb9bb12b6124793608dd0e7316d1d4f4dbac39806e4ac714b7ecefa8a934a"}, 0x60) bind$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d72411e5409452d170eb06c1ef4f9d0841cdb13e5578134e2d2d25ff6b1b6f4e62049d62985b8d668fbf2ef62686ef752fe2ebfaa4056983e7aa45826839b"}, 0x60) 2018/04/12 18:27:13 executing program 0: socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000001ff8)={0x0}) bind$inet(r0, &(0x7f0000f19ff0)={0x1e, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/12 18:27:13 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, "a399e9c558720d8d1f6728f1c5f07531dc6150defaca6ebcaf1b8b8c36184c8f147be96ea31efbf49ca9b9d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "655397eb4a90dc0d4bbdd330f3aa50c6a17a4cbe46f9a27f671d171c4a2c50f288493929c1e0fe9468a5eb556554a2803b25502ef5bc450d5f58f28b16e1198d", &(0x7f0000b0bfb2)="446465762f736e642f636f6e74726f6c4323009cb55a60fb8d54423e20546bd33125000000000000fd03e22965bb699aabcb8311b779fbf5497252581e19688501001a7898bd7751951d53b93ab1", 0x4e}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000001000)={&(0x7f0000005000), 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, "b1abe2da02000000e1000000fc00000000000000dc98784b49e0007e00002fd9"}}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)=""/250) 2018/04/12 18:27:13 executing program 7: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f00005e4000)={&(0x7f00002ccff0)={0x1d}, 0x10, &(0x7f0000728000)={&(0x7f00000aef80)={0x5, 0x900, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "260503dd3e3c0a6afe3f7b377378f2e013e66ff1bf538a0f1abc5b8beb605be3d9448c99787c873249ed9c34e040a29606427925d8dd9065c240a288783179ce"}}, 0x80}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x6, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d300692ddfae1e24"}}, 0x48}, 0x1}, 0x0) 2018/04/12 18:27:13 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f000017e000)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}, 0xffffffffffffff63}}]}, 0x13c}, 0x1}, 0x0) 2018/04/12 18:27:13 executing program 1: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000767fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000080)={r1}, 0x0) r2 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r0) 2018/04/12 18:27:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000300)="f30f6fbe01a9653e0f0766b9690a00000f3226f326260f0f3e5084ae66b9800000c00f326635000800000f30f30f218eb800068ed00f01df640f38f16cffb810058ed0", 0x43}], 0x1, 0x0, &(0x7f00000003c0), 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfffffffffffffcc2, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr}, 0xa) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000400), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000500)="0f005c0666b8ef0000000f23d00f21f86635300000010f23f866b9770b000066b80000008066ba000000000f30f20f35f30f1bcff4650f01cabaf80c66b8c261a58266efbafc0cb874daef0f236d0f32", 0x50}], 0x0, 0x0, &(0x7f0000000040), 0xffffe1e) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x101}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/12 18:27:13 executing program 3: r0 = socket$inet6(0xa, 0x80805, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000bbeff4)) shutdown(r0, 0x2) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 2018/04/12 18:27:13 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000000003, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "6cb782e4ad88b89d1fd309169f44812107130ee55db70510420aaa96759ecbc36eb9bb12b6124793608dd0e7316d1d4f4dbac39806e4ac714b7ecefa8a934a"}, 0x60) bind$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d72411e5409452d170eb06c1ef4f9d0841cdb13e5578134e2d2d25ff6b1b6f4e62049d62985b8d668fbf2ef62686ef752fe2ebfaa4056983e7aa45826839b"}, 0x60) 2018/04/12 18:27:13 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, "a399e9c558720d8d1f6728f1c5f07531dc6150defaca6ebcaf1b8b8c36184c8f147be96ea31efbf49ca9b9d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "655397eb4a90dc0d4bbdd330f3aa50c6a17a4cbe46f9a27f671d171c4a2c50f288493929c1e0fe9468a5eb556554a2803b25502ef5bc450d5f58f28b16e1198d", &(0x7f0000b0bfb2)="446465762f736e642f636f6e74726f6c4323009cb55a60fb8d54423e20546bd33125000000000000fd03e22965bb699aabcb8311b779fbf5497252581e19688501001a7898bd7751951d53b93ab1", 0x4e}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000001000)={&(0x7f0000005000), 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, "b1abe2da02000000e1000000fc00000000000000dc98784b49e0007e00002fd9"}}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)=""/250) 2018/04/12 18:27:13 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000fcb000), 0x4) r0 = syz_open_dev$tun(&(0x7f0000a9dff3)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x100000002, &(0x7f000044bff8)=0x0) io_submit(r1, 0x1, &(0x7f0000000840)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)}]) 2018/04/12 18:27:13 executing program 7: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f00005e4000)={&(0x7f00002ccff0)={0x1d}, 0x10, &(0x7f0000728000)={&(0x7f00000aef80)={0x5, 0x900, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "260503dd3e3c0a6afe3f7b377378f2e013e66ff1bf538a0f1abc5b8beb605be3d9448c99787c873249ed9c34e040a29606427925d8dd9065c240a288783179ce"}}, 0x80}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x6, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d300692ddfae1e24"}}, 0x48}, 0x1}, 0x0) 2018/04/12 18:27:13 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f000017e000)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}, 0xffffffffffffff63}}]}, 0x13c}, 0x1}, 0x0) 2018/04/12 18:27:13 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000000003, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "6cb782e4ad88b89d1fd309169f44812107130ee55db70510420aaa96759ecbc36eb9bb12b6124793608dd0e7316d1d4f4dbac39806e4ac714b7ecefa8a934a"}, 0x60) bind$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d72411e5409452d170eb06c1ef4f9d0841cdb13e5578134e2d2d25ff6b1b6f4e62049d62985b8d668fbf2ef62686ef752fe2ebfaa4056983e7aa45826839b"}, 0x60) 2018/04/12 18:27:14 executing program 3: r0 = socket$inet6(0xa, 0x80805, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000bbeff4)) shutdown(r0, 0x2) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 2018/04/12 18:27:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x8b}]}) 2018/04/12 18:27:14 executing program 7: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f00005e4000)={&(0x7f00002ccff0)={0x1d}, 0x10, &(0x7f0000728000)={&(0x7f00000aef80)={0x5, 0x900, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "260503dd3e3c0a6afe3f7b377378f2e013e66ff1bf538a0f1abc5b8beb605be3d9448c99787c873249ed9c34e040a29606427925d8dd9065c240a288783179ce"}}, 0x80}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x6, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d300692ddfae1e24"}}, 0x48}, 0x1}, 0x0) 2018/04/12 18:27:14 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000000003, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "6cb782e4ad88b89d1fd309169f44812107130ee55db70510420aaa96759ecbc36eb9bb12b6124793608dd0e7316d1d4f4dbac39806e4ac714b7ecefa8a934a"}, 0x60) bind$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4d72411e5409452d170eb06c1ef4f9d0841cdb13e5578134e2d2d25ff6b1b6f4e62049d62985b8d668fbf2ef62686ef752fe2ebfaa4056983e7aa45826839b"}, 0x60) 2018/04/12 18:27:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000300)="f30f6fbe01a9653e0f0766b9690a00000f3226f326260f0f3e5084ae66b9800000c00f326635000800000f30f30f218eb800068ed00f01df640f38f16cffb810058ed0", 0x43}], 0x1, 0x0, &(0x7f00000003c0), 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfffffffffffffcc2, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr}, 0xa) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000400), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000500)="0f005c0666b8ef0000000f23d00f21f86635300000010f23f866b9770b000066b80000008066ba000000000f30f20f35f30f1bcff4650f01cabaf80c66b8c261a58266efbafc0cb874daef0f236d0f32", 0x50}], 0x0, 0x0, &(0x7f0000000040), 0xffffe1e) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x101}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/12 18:27:14 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f000017e000)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}, 0xffffffffffffff63}}]}, 0x13c}, 0x1}, 0x0) 2018/04/12 18:27:14 executing program 1: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000767fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000080)={r1}, 0x0) r2 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r0) 2018/04/12 18:27:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000300)="f30f6fbe01a9653e0f0766b9690a00000f3226f326260f0f3e5084ae66b9800000c00f326635000800000f30f30f218eb800068ed00f01df640f38f16cffb810058ed0", 0x43}], 0x1, 0x0, &(0x7f00000003c0), 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfffffffffffffcc2, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr}, 0xa) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000400), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000500)="0f005c0666b8ef0000000f23d00f21f86635300000010f23f866b9770b000066b80000008066ba000000000f30f20f35f30f1bcff4650f01cabaf80c66b8c261a58266efbafc0cb874daef0f236d0f32", 0x50}], 0x0, 0x0, &(0x7f0000000040), 0xffffe1e) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x101}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/12 18:27:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000300)="f30f6fbe01a9653e0f0766b9690a00000f3226f326260f0f3e5084ae66b9800000c00f326635000800000f30f30f218eb800068ed00f01df640f38f16cffb810058ed0", 0x43}], 0x1, 0x0, &(0x7f00000003c0), 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfffffffffffffcc2, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr}, 0xa) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000400), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000500)="0f005c0666b8ef0000000f23d00f21f86635300000010f23f866b9770b000066b80000008066ba000000000f30f20f35f30f1bcff4650f01cabaf80c66b8c261a58266efbafc0cb874daef0f236d0f32", 0x50}], 0x0, 0x0, &(0x7f0000000040), 0xffffe1e) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x101}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/12 18:27:14 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f000017e000)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}, 0xffffffffffffff63}}]}, 0x13c}, 0x1}, 0x0) 2018/04/12 18:27:14 executing program 7: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f00005e4000)={&(0x7f00002ccff0)={0x1d}, 0x10, &(0x7f0000728000)={&(0x7f00000aef80)={0x5, 0x900, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "260503dd3e3c0a6afe3f7b377378f2e013e66ff1bf538a0f1abc5b8beb605be3d9448c99787c873249ed9c34e040a29606427925d8dd9065c240a288783179ce"}}, 0x80}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x6, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d300692ddfae1e24"}}, 0x48}, 0x1}, 0x0) 2018/04/12 18:27:14 executing program 3: r0 = socket$inet6(0xa, 0x80805, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000bbeff4)) shutdown(r0, 0x2) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 2018/04/12 18:27:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x8b}]}) 2018/04/12 18:27:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000300)="f30f6fbe01a9653e0f0766b9690a00000f3226f326260f0f3e5084ae66b9800000c00f326635000800000f30f30f218eb800068ed00f01df640f38f16cffb810058ed0", 0x43}], 0x1, 0x0, &(0x7f00000003c0), 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfffffffffffffcc2, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr}, 0xa) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000400), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000500)="0f005c0666b8ef0000000f23d00f21f86635300000010f23f866b9770b000066b80000008066ba000000000f30f20f35f30f1bcff4650f01cabaf80c66b8c261a58266efbafc0cb874daef0f236d0f32", 0x50}], 0x0, 0x0, &(0x7f0000000040), 0xffffe1e) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x101}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/12 18:27:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000300)="f30f6fbe01a9653e0f0766b9690a00000f3226f326260f0f3e5084ae66b9800000c00f326635000800000f30f30f218eb800068ed00f01df640f38f16cffb810058ed0", 0x43}], 0x1, 0x0, &(0x7f00000003c0), 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfffffffffffffcc2, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr}, 0xa) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000400), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000500)="0f005c0666b8ef0000000f23d00f21f86635300000010f23f866b9770b000066b80000008066ba000000000f30f20f35f30f1bcff4650f01cabaf80c66b8c261a58266efbafc0cb874daef0f236d0f32", 0x50}], 0x0, 0x0, &(0x7f0000000040), 0xffffe1e) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x101}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/12 18:27:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000300)="f30f6fbe01a9653e0f0766b9690a00000f3226f326260f0f3e5084ae66b9800000c00f326635000800000f30f30f218eb800068ed00f01df640f38f16cffb810058ed0", 0x43}], 0x1, 0x0, &(0x7f00000003c0), 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfffffffffffffcc2, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr}, 0xa) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000400), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000500)="0f005c0666b8ef0000000f23d00f21f86635300000010f23f866b9770b000066b80000008066ba000000000f30f20f35f30f1bcff4650f01cabaf80c66b8c261a58266efbafc0cb874daef0f236d0f32", 0x50}], 0x0, 0x0, &(0x7f0000000040), 0xffffe1e) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x101}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/12 18:27:15 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000a8bfff)=""/1, 0x805031ae) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)) syz_open_pts(r0, 0x0) ioctl$TIOCEXCL(r1, 0x540c) dup3(r1, r0, 0x0) 2018/04/12 18:27:15 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r0, 0x9) 2018/04/12 18:27:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000300)="f30f6fbe01a9653e0f0766b9690a00000f3226f326260f0f3e5084ae66b9800000c00f326635000800000f30f30f218eb800068ed00f01df640f38f16cffb810058ed0", 0x43}], 0x1, 0x0, &(0x7f00000003c0), 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfffffffffffffcc2, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr}, 0xa) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000400), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000500)="0f005c0666b8ef0000000f23d00f21f86635300000010f23f866b9770b000066b80000008066ba000000000f30f20f35f30f1bcff4650f01cabaf80c66b8c261a58266efbafc0cb874daef0f236d0f32", 0x50}], 0x0, 0x0, &(0x7f0000000040), 0xffffe1e) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x101}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/12 18:27:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x8b}]}) 2018/04/12 18:27:15 executing program 1: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000767fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000080)={r1}, 0x0) r2 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r0) 2018/04/12 18:27:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000300)="f30f6fbe01a9653e0f0766b9690a00000f3226f326260f0f3e5084ae66b9800000c00f326635000800000f30f30f218eb800068ed00f01df640f38f16cffb810058ed0", 0x43}], 0x1, 0x0, &(0x7f00000003c0), 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfffffffffffffcc2, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr}, 0xa) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000400), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000500)="0f005c0666b8ef0000000f23d00f21f86635300000010f23f866b9770b000066b80000008066ba000000000f30f20f35f30f1bcff4650f01cabaf80c66b8c261a58266efbafc0cb874daef0f236d0f32", 0x50}], 0x0, 0x0, &(0x7f0000000040), 0xffffe1e) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x101}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/12 18:27:15 executing program 6: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3ff}, &(0x7f0000000640)=0x10) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x9, {0x2, 0x4e22}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x0, 0x0, 0x8, 0x33b9, 0x200, 0x0, 0x2, 0xffffffff00000000, 0x100000000}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="6b001d08bcc117394e4726b653544e8e98d35e42a0c506e43a3c7be62e8ff9f4ae3ece15cb146423c9f6b858c5512920f94f1b06d9dfa0efd4d7b1ee8eff6b04f22ecb728e99d2af3e297ba4c4b836379916959f3df9301f00100000c4f2806743ed3fc0b31480b29d7c6beeb4bdf53bd3af4ad7c0defeab05f59557599a8fd0b81ab7e6ff393e66d6f61f84aa1d19bbc9bf440c107cd987fbcb262e3628377392d14190"], &(0x7f0000000280)=0x2) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @broadcast=0xffffffff}, {0x2, 0x4e23}, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x1, 0x7, 0x8, 0xfff, 0x7, &(0x7f00000000c0)='sit0\x00', 0x3ff, 0x2}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}, 0x1000}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000acf000)={0x1, {{0x2, 0x0, @multicast1=0xe0000014}}}, 0x90) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000700)={0x38, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {0x9}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0xc0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x3ff, 0x0, 0x0, 0x8001}, &(0x7f0000000080)=0x14) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000998f70)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) accept4$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000380)=0x1c, 0x80800) getpeername(0xffffffffffffffff, &(0x7f0000000540)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, &(0x7f00000005c0)=0x80) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000d80)=ANY=[@ANYBLOB="ff0300000000000002004e214d8ca47700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be63d41ca35b49c88efa79835eed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000002000000ac14141900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1414ba00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e0000001000000000000000000000000000000ff9e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e207f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000001fa84901ca6c8c48000000000000000000000000000002004e24ac14141600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000924a800bf29bce8ae2506c7468021cdd2c729e0e267bad44ec56159c5862be038cea0fb27099b29392d8896c926d79e9ac240db573a6b6cfe4866773e3fadf16f83337a15541188b3e4f9d77e60a17b3fb5af29b2dc8bafe557699db5bbd02460019fe120642b9bc2a2552ebaf1db55ac827e1e17ed4d9a76f9cafcde8a4f5ee4802d979b4ae6229a0a5eb637738e11aab2df0f90bf668917a41dc8b2202523da208aa76dfe7cd19e1fbc8179444a3f885200ff020439b7dc365b650c608e0b897d71e8a55e8ecc13cdf94e1936da6edf9605efd0e14402a604ffe6797934ee40"], 0x1) prctl$setmm(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) getsockopt$inet_int(r2, 0x0, 0x18, &(0x7f00000006c0), &(0x7f00000003c0)=0x4) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000400)={0xffffffffffffffad, {{0x2, 0x4e24}}}, 0x88) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000740)={r5, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}, [0x81, 0x1, 0x327, 0x7, 0x1, 0x20, 0x2, 0x445cd569, 0x0, 0xfffffffffffffbff, 0x3f, 0x0, 0x3, 0x0, 0x3d15]}, &(0x7f0000000840)=0x100) recvfrom$ipx(r0, &(0x7f0000000880)=""/171, 0xab, 0x2, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}) 2018/04/12 18:27:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x8b}]}) 2018/04/12 18:27:15 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r0, 0x9) 2018/04/12 18:27:15 executing program 6: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3ff}, &(0x7f0000000640)=0x10) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x9, {0x2, 0x4e22}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x0, 0x0, 0x8, 0x33b9, 0x200, 0x0, 0x2, 0xffffffff00000000, 0x100000000}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="6b001d08bcc117394e4726b653544e8e98d35e42a0c506e43a3c7be62e8ff9f4ae3ece15cb146423c9f6b858c5512920f94f1b06d9dfa0efd4d7b1ee8eff6b04f22ecb728e99d2af3e297ba4c4b836379916959f3df9301f00100000c4f2806743ed3fc0b31480b29d7c6beeb4bdf53bd3af4ad7c0defeab05f59557599a8fd0b81ab7e6ff393e66d6f61f84aa1d19bbc9bf440c107cd987fbcb262e3628377392d14190"], &(0x7f0000000280)=0x2) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @broadcast=0xffffffff}, {0x2, 0x4e23}, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x1, 0x7, 0x8, 0xfff, 0x7, &(0x7f00000000c0)='sit0\x00', 0x3ff, 0x2}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}, 0x1000}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000acf000)={0x1, {{0x2, 0x0, @multicast1=0xe0000014}}}, 0x90) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000700)={0x38, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {0x9}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0xc0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x3ff, 0x0, 0x0, 0x8001}, &(0x7f0000000080)=0x14) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000998f70)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) accept4$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000380)=0x1c, 0x80800) getpeername(0xffffffffffffffff, &(0x7f0000000540)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, &(0x7f00000005c0)=0x80) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000d80)=ANY=[@ANYBLOB="ff0300000000000002004e214d8ca47700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be63d41ca35b49c88efa79835eed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000002000000ac14141900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1414ba00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e0000001000000000000000000000000000000ff9e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e207f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000001fa84901ca6c8c48000000000000000000000000000002004e24ac14141600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000924a800bf29bce8ae2506c7468021cdd2c729e0e267bad44ec56159c5862be038cea0fb27099b29392d8896c926d79e9ac240db573a6b6cfe4866773e3fadf16f83337a15541188b3e4f9d77e60a17b3fb5af29b2dc8bafe557699db5bbd02460019fe120642b9bc2a2552ebaf1db55ac827e1e17ed4d9a76f9cafcde8a4f5ee4802d979b4ae6229a0a5eb637738e11aab2df0f90bf668917a41dc8b2202523da208aa76dfe7cd19e1fbc8179444a3f885200ff020439b7dc365b650c608e0b897d71e8a55e8ecc13cdf94e1936da6edf9605efd0e14402a604ffe6797934ee40"], 0x1) prctl$setmm(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) getsockopt$inet_int(r2, 0x0, 0x18, &(0x7f00000006c0), &(0x7f00000003c0)=0x4) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000400)={0xffffffffffffffad, {{0x2, 0x4e24}}}, 0x88) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000740)={r5, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}, [0x81, 0x1, 0x327, 0x7, 0x1, 0x20, 0x2, 0x445cd569, 0x0, 0xfffffffffffffbff, 0x3f, 0x0, 0x3, 0x0, 0x3d15]}, &(0x7f0000000840)=0x100) recvfrom$ipx(r0, &(0x7f0000000880)=""/171, 0xab, 0x2, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}) 2018/04/12 18:27:15 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3ff}, &(0x7f0000000640)=0x10) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x9, {0x2, 0x4e22}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x0, 0x0, 0x8, 0x33b9, 0x200, 0x0, 0x2, 0xffffffff00000000, 0x100000000}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="6b001d08bcc117394e4726b653544e8e98d35e42a0c506e43a3c7be62e8ff9f4ae3ece15cb146423c9f6b858c5512920f94f1b06d9dfa0efd4d7b1ee8eff6b04f22ecb728e99d2af3e297ba4c4b836379916959f3df9301f00100000c4f2806743ed3fc0b31480b29d7c6beeb4bdf53bd3af4ad7c0defeab05f59557599a8fd0b81ab7e6ff393e66d6f61f84aa1d19bbc9bf440c107cd987fbcb262e3628377392d14190"], &(0x7f0000000280)=0x2) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @broadcast=0xffffffff}, {0x2, 0x4e23}, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x1, 0x7, 0x8, 0xfff, 0x7, &(0x7f00000000c0)='sit0\x00', 0x3ff, 0x2}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}, 0x1000}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000acf000)={0x1, {{0x2, 0x0, @multicast1=0xe0000014}}}, 0x90) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000700)={0x38, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {0x9}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0xc0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x3ff, 0x0, 0x0, 0x8001}, &(0x7f0000000080)=0x14) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000998f70)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) accept4$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000380)=0x1c, 0x80800) getpeername(0xffffffffffffffff, &(0x7f0000000540)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, &(0x7f00000005c0)=0x80) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000d80)=ANY=[@ANYBLOB="ff0300000000000002004e214d8ca47700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be63d41ca35b49c88efa79835eed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000002000000ac14141900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1414ba00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e0000001000000000000000000000000000000ff9e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e207f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000001fa84901ca6c8c48000000000000000000000000000002004e24ac14141600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000924a800bf29bce8ae2506c7468021cdd2c729e0e267bad44ec56159c5862be038cea0fb27099b29392d8896c926d79e9ac240db573a6b6cfe4866773e3fadf16f83337a15541188b3e4f9d77e60a17b3fb5af29b2dc8bafe557699db5bbd02460019fe120642b9bc2a2552ebaf1db55ac827e1e17ed4d9a76f9cafcde8a4f5ee4802d979b4ae6229a0a5eb637738e11aab2df0f90bf668917a41dc8b2202523da208aa76dfe7cd19e1fbc8179444a3f885200ff020439b7dc365b650c608e0b897d71e8a55e8ecc13cdf94e1936da6edf9605efd0e14402a604ffe6797934ee40"], 0x1) prctl$setmm(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) getsockopt$inet_int(r2, 0x0, 0x18, &(0x7f00000006c0), &(0x7f00000003c0)=0x4) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000400)={0xffffffffffffffad, {{0x2, 0x4e24}}}, 0x88) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000740)={r5, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}, [0x81, 0x1, 0x327, 0x7, 0x1, 0x20, 0x2, 0x445cd569, 0x0, 0xfffffffffffffbff, 0x3f, 0x0, 0x3, 0x0, 0x3d15]}, &(0x7f0000000840)=0x100) recvfrom$ipx(r0, &(0x7f0000000880)=""/171, 0xab, 0x2, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}) 2018/04/12 18:27:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0xff8b) 2018/04/12 18:27:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000300)="f30f6fbe01a9653e0f0766b9690a00000f3226f326260f0f3e5084ae66b9800000c00f326635000800000f30f30f218eb800068ed00f01df640f38f16cffb810058ed0", 0x43}], 0x1, 0x0, &(0x7f00000003c0), 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfffffffffffffcc2, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr}, 0xa) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000400), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000500)="0f005c0666b8ef0000000f23d00f21f86635300000010f23f866b9770b000066b80000008066ba000000000f30f20f35f30f1bcff4650f01cabaf80c66b8c261a58266efbafc0cb874daef0f236d0f32", 0x50}], 0x0, 0x0, &(0x7f0000000040), 0xffffe1e) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x101}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/12 18:27:15 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r0, 0x9) 2018/04/12 18:27:15 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x200000003, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x203, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x2c}, 0x1}, 0x0) 2018/04/12 18:27:16 executing program 6: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3ff}, &(0x7f0000000640)=0x10) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x9, {0x2, 0x4e22}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x0, 0x0, 0x8, 0x33b9, 0x200, 0x0, 0x2, 0xffffffff00000000, 0x100000000}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="6b001d08bcc117394e4726b653544e8e98d35e42a0c506e43a3c7be62e8ff9f4ae3ece15cb146423c9f6b858c5512920f94f1b06d9dfa0efd4d7b1ee8eff6b04f22ecb728e99d2af3e297ba4c4b836379916959f3df9301f00100000c4f2806743ed3fc0b31480b29d7c6beeb4bdf53bd3af4ad7c0defeab05f59557599a8fd0b81ab7e6ff393e66d6f61f84aa1d19bbc9bf440c107cd987fbcb262e3628377392d14190"], &(0x7f0000000280)=0x2) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @broadcast=0xffffffff}, {0x2, 0x4e23}, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x1, 0x7, 0x8, 0xfff, 0x7, &(0x7f00000000c0)='sit0\x00', 0x3ff, 0x2}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}, 0x1000}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000acf000)={0x1, {{0x2, 0x0, @multicast1=0xe0000014}}}, 0x90) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000700)={0x38, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {0x9}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0xc0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x3ff, 0x0, 0x0, 0x8001}, &(0x7f0000000080)=0x14) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000998f70)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) accept4$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000380)=0x1c, 0x80800) getpeername(0xffffffffffffffff, &(0x7f0000000540)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, &(0x7f00000005c0)=0x80) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000d80)=ANY=[@ANYBLOB="ff0300000000000002004e214d8ca47700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be63d41ca35b49c88efa79835eed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000002000000ac14141900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1414ba00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e0000001000000000000000000000000000000ff9e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e207f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000001fa84901ca6c8c48000000000000000000000000000002004e24ac14141600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000924a800bf29bce8ae2506c7468021cdd2c729e0e267bad44ec56159c5862be038cea0fb27099b29392d8896c926d79e9ac240db573a6b6cfe4866773e3fadf16f83337a15541188b3e4f9d77e60a17b3fb5af29b2dc8bafe557699db5bbd02460019fe120642b9bc2a2552ebaf1db55ac827e1e17ed4d9a76f9cafcde8a4f5ee4802d979b4ae6229a0a5eb637738e11aab2df0f90bf668917a41dc8b2202523da208aa76dfe7cd19e1fbc8179444a3f885200ff020439b7dc365b650c608e0b897d71e8a55e8ecc13cdf94e1936da6edf9605efd0e14402a604ffe6797934ee40"], 0x1) prctl$setmm(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) getsockopt$inet_int(r2, 0x0, 0x18, &(0x7f00000006c0), &(0x7f00000003c0)=0x4) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000400)={0xffffffffffffffad, {{0x2, 0x4e24}}}, 0x88) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000740)={r5, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}, [0x81, 0x1, 0x327, 0x7, 0x1, 0x20, 0x2, 0x445cd569, 0x0, 0xfffffffffffffbff, 0x3f, 0x0, 0x3, 0x0, 0x3d15]}, &(0x7f0000000840)=0x100) recvfrom$ipx(r0, &(0x7f0000000880)=""/171, 0xab, 0x2, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}) 2018/04/12 18:27:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0xff8b) 2018/04/12 18:27:16 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3ff}, &(0x7f0000000640)=0x10) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x9, {0x2, 0x4e22}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x0, 0x0, 0x8, 0x33b9, 0x200, 0x0, 0x2, 0xffffffff00000000, 0x100000000}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="6b001d08bcc117394e4726b653544e8e98d35e42a0c506e43a3c7be62e8ff9f4ae3ece15cb146423c9f6b858c5512920f94f1b06d9dfa0efd4d7b1ee8eff6b04f22ecb728e99d2af3e297ba4c4b836379916959f3df9301f00100000c4f2806743ed3fc0b31480b29d7c6beeb4bdf53bd3af4ad7c0defeab05f59557599a8fd0b81ab7e6ff393e66d6f61f84aa1d19bbc9bf440c107cd987fbcb262e3628377392d14190"], &(0x7f0000000280)=0x2) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @broadcast=0xffffffff}, {0x2, 0x4e23}, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x1, 0x7, 0x8, 0xfff, 0x7, &(0x7f00000000c0)='sit0\x00', 0x3ff, 0x2}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}, 0x1000}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000acf000)={0x1, {{0x2, 0x0, @multicast1=0xe0000014}}}, 0x90) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000700)={0x38, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {0x9}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0xc0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x3ff, 0x0, 0x0, 0x8001}, &(0x7f0000000080)=0x14) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000998f70)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) accept4$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000380)=0x1c, 0x80800) getpeername(0xffffffffffffffff, &(0x7f0000000540)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, &(0x7f00000005c0)=0x80) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000d80)=ANY=[@ANYBLOB="ff0300000000000002004e214d8ca47700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be63d41ca35b49c88efa79835eed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000002000000ac14141900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1414ba00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e0000001000000000000000000000000000000ff9e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e207f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000001fa84901ca6c8c48000000000000000000000000000002004e24ac14141600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000924a800bf29bce8ae2506c7468021cdd2c729e0e267bad44ec56159c5862be038cea0fb27099b29392d8896c926d79e9ac240db573a6b6cfe4866773e3fadf16f83337a15541188b3e4f9d77e60a17b3fb5af29b2dc8bafe557699db5bbd02460019fe120642b9bc2a2552ebaf1db55ac827e1e17ed4d9a76f9cafcde8a4f5ee4802d979b4ae6229a0a5eb637738e11aab2df0f90bf668917a41dc8b2202523da208aa76dfe7cd19e1fbc8179444a3f885200ff020439b7dc365b650c608e0b897d71e8a55e8ecc13cdf94e1936da6edf9605efd0e14402a604ffe6797934ee40"], 0x1) prctl$setmm(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) getsockopt$inet_int(r2, 0x0, 0x18, &(0x7f00000006c0), &(0x7f00000003c0)=0x4) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000400)={0xffffffffffffffad, {{0x2, 0x4e24}}}, 0x88) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000740)={r5, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}, [0x81, 0x1, 0x327, 0x7, 0x1, 0x20, 0x2, 0x445cd569, 0x0, 0xfffffffffffffbff, 0x3f, 0x0, 0x3, 0x0, 0x3d15]}, &(0x7f0000000840)=0x100) recvfrom$ipx(r0, &(0x7f0000000880)=""/171, 0xab, 0x2, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}) 2018/04/12 18:27:16 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r0, 0x9) 2018/04/12 18:27:16 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) fstat(r0, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r1) 2018/04/12 18:27:16 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x200000003, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x203, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x2c}, 0x1}, 0x0) 2018/04/12 18:27:16 executing program 1: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000767fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000080)={r1}, 0x0) r2 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r0) 2018/04/12 18:27:16 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000a8bfff)=""/1, 0x805031ae) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)) syz_open_pts(r0, 0x0) ioctl$TIOCEXCL(r1, 0x540c) dup3(r1, r0, 0x0) 2018/04/12 18:27:16 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) fstat(r0, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r1) 2018/04/12 18:27:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0xff8b) 2018/04/12 18:27:16 executing program 6: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3ff}, &(0x7f0000000640)=0x10) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x9, {0x2, 0x4e22}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x0, 0x0, 0x8, 0x33b9, 0x200, 0x0, 0x2, 0xffffffff00000000, 0x100000000}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="6b001d08bcc117394e4726b653544e8e98d35e42a0c506e43a3c7be62e8ff9f4ae3ece15cb146423c9f6b858c5512920f94f1b06d9dfa0efd4d7b1ee8eff6b04f22ecb728e99d2af3e297ba4c4b836379916959f3df9301f00100000c4f2806743ed3fc0b31480b29d7c6beeb4bdf53bd3af4ad7c0defeab05f59557599a8fd0b81ab7e6ff393e66d6f61f84aa1d19bbc9bf440c107cd987fbcb262e3628377392d14190"], &(0x7f0000000280)=0x2) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @broadcast=0xffffffff}, {0x2, 0x4e23}, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x1, 0x7, 0x8, 0xfff, 0x7, &(0x7f00000000c0)='sit0\x00', 0x3ff, 0x2}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}, 0x1000}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000acf000)={0x1, {{0x2, 0x0, @multicast1=0xe0000014}}}, 0x90) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000700)={0x38, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {0x9}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0xc0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x3ff, 0x0, 0x0, 0x8001}, &(0x7f0000000080)=0x14) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000998f70)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) accept4$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000380)=0x1c, 0x80800) getpeername(0xffffffffffffffff, &(0x7f0000000540)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, &(0x7f00000005c0)=0x80) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000d80)=ANY=[@ANYBLOB="ff0300000000000002004e214d8ca47700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be63d41ca35b49c88efa79835eed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000002000000ac14141900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1414ba00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e0000001000000000000000000000000000000ff9e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e207f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000001fa84901ca6c8c48000000000000000000000000000002004e24ac14141600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000924a800bf29bce8ae2506c7468021cdd2c729e0e267bad44ec56159c5862be038cea0fb27099b29392d8896c926d79e9ac240db573a6b6cfe4866773e3fadf16f83337a15541188b3e4f9d77e60a17b3fb5af29b2dc8bafe557699db5bbd02460019fe120642b9bc2a2552ebaf1db55ac827e1e17ed4d9a76f9cafcde8a4f5ee4802d979b4ae6229a0a5eb637738e11aab2df0f90bf668917a41dc8b2202523da208aa76dfe7cd19e1fbc8179444a3f885200ff020439b7dc365b650c608e0b897d71e8a55e8ecc13cdf94e1936da6edf9605efd0e14402a604ffe6797934ee40"], 0x1) prctl$setmm(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) getsockopt$inet_int(r2, 0x0, 0x18, &(0x7f00000006c0), &(0x7f00000003c0)=0x4) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000400)={0xffffffffffffffad, {{0x2, 0x4e24}}}, 0x88) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000740)={r5, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}, [0x81, 0x1, 0x327, 0x7, 0x1, 0x20, 0x2, 0x445cd569, 0x0, 0xfffffffffffffbff, 0x3f, 0x0, 0x3, 0x0, 0x3d15]}, &(0x7f0000000840)=0x100) recvfrom$ipx(r0, &(0x7f0000000880)=""/171, 0xab, 0x2, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}) 2018/04/12 18:27:16 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3ff}, &(0x7f0000000640)=0x10) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x9, {0x2, 0x4e22}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x0, 0x0, 0x8, 0x33b9, 0x200, 0x0, 0x2, 0xffffffff00000000, 0x100000000}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="6b001d08bcc117394e4726b653544e8e98d35e42a0c506e43a3c7be62e8ff9f4ae3ece15cb146423c9f6b858c5512920f94f1b06d9dfa0efd4d7b1ee8eff6b04f22ecb728e99d2af3e297ba4c4b836379916959f3df9301f00100000c4f2806743ed3fc0b31480b29d7c6beeb4bdf53bd3af4ad7c0defeab05f59557599a8fd0b81ab7e6ff393e66d6f61f84aa1d19bbc9bf440c107cd987fbcb262e3628377392d14190"], &(0x7f0000000280)=0x2) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @broadcast=0xffffffff}, {0x2, 0x4e23}, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x1, 0x7, 0x8, 0xfff, 0x7, &(0x7f00000000c0)='sit0\x00', 0x3ff, 0x2}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}, 0x1000}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000acf000)={0x1, {{0x2, 0x0, @multicast1=0xe0000014}}}, 0x90) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000700)={0x38, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {0x9}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0xc0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x3ff, 0x0, 0x0, 0x8001}, &(0x7f0000000080)=0x14) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000998f70)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) accept4$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000380)=0x1c, 0x80800) getpeername(0xffffffffffffffff, &(0x7f0000000540)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, &(0x7f00000005c0)=0x80) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000d80)=ANY=[@ANYBLOB="ff0300000000000002004e214d8ca47700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be63d41ca35b49c88efa79835eed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000002000000ac14141900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1414ba00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e0000001000000000000000000000000000000ff9e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e207f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000001fa84901ca6c8c48000000000000000000000000000002004e24ac14141600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000924a800bf29bce8ae2506c7468021cdd2c729e0e267bad44ec56159c5862be038cea0fb27099b29392d8896c926d79e9ac240db573a6b6cfe4866773e3fadf16f83337a15541188b3e4f9d77e60a17b3fb5af29b2dc8bafe557699db5bbd02460019fe120642b9bc2a2552ebaf1db55ac827e1e17ed4d9a76f9cafcde8a4f5ee4802d979b4ae6229a0a5eb637738e11aab2df0f90bf668917a41dc8b2202523da208aa76dfe7cd19e1fbc8179444a3f885200ff020439b7dc365b650c608e0b897d71e8a55e8ecc13cdf94e1936da6edf9605efd0e14402a604ffe6797934ee40"], 0x1) prctl$setmm(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) getsockopt$inet_int(r2, 0x0, 0x18, &(0x7f00000006c0), &(0x7f00000003c0)=0x4) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000400)={0xffffffffffffffad, {{0x2, 0x4e24}}}, 0x88) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000740)={r5, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}, [0x81, 0x1, 0x327, 0x7, 0x1, 0x20, 0x2, 0x445cd569, 0x0, 0xfffffffffffffbff, 0x3f, 0x0, 0x3, 0x0, 0x3d15]}, &(0x7f0000000840)=0x100) recvfrom$ipx(r0, &(0x7f0000000880)=""/171, 0xab, 0x2, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}) 2018/04/12 18:27:16 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x200000003, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x203, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x2c}, 0x1}, 0x0) 2018/04/12 18:27:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000a8bfff)=""/1, 0x805031ae) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)) syz_open_pts(r0, 0x0) ioctl$TIOCEXCL(r1, 0x540c) dup3(r1, r0, 0x0) 2018/04/12 18:27:16 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) fstat(r0, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r1) 2018/04/12 18:27:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0xff8b) 2018/04/12 18:27:17 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x200000003, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x203, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x2c}, 0x1}, 0x0) 2018/04/12 18:27:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000a8bfff)=""/1, 0x805031ae) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)) syz_open_pts(r0, 0x0) ioctl$TIOCEXCL(r1, 0x540c) dup3(r1, r0, 0x0) 2018/04/12 18:27:17 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) fstat(r0, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r1) 2018/04/12 18:27:17 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000a8bfff)=""/1, 0x805031ae) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)) syz_open_pts(r0, 0x0) ioctl$TIOCEXCL(r1, 0x540c) dup3(r1, r0, 0x0) 2018/04/12 18:27:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) 2018/04/12 18:27:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000a8bfff)=""/1, 0x805031ae) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)) syz_open_pts(r0, 0x0) ioctl$TIOCEXCL(r1, 0x540c) dup3(r1, r0, 0x0) 2018/04/12 18:27:17 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000c23fca)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x3fffffffffffff8a, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @icmp=@timestamp={0xd}}}}}, 0x0) 2018/04/12 18:27:17 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.memory_migrate\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000080), 0x3) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000180)) 2018/04/12 18:27:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) 2018/04/12 18:27:17 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000c23fca)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x3fffffffffffff8a, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @icmp=@timestamp={0xd}}}}}, 0x0) 2018/04/12 18:27:17 executing program 5: r0 = socket$inet(0x2, 0x3, 0x800000800000001) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x6}, 0xfffffebf) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 2018/04/12 18:27:17 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.memory_migrate\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000080), 0x3) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000180)) 2018/04/12 18:27:17 executing program 4: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f000002cff6)='./control\x00', 0x0) r1 = open(&(0x7f00000007c0)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000008c0)='./control\x00', r1, &(0x7f0000000900)='./file0\x00', 0x4) 2018/04/12 18:27:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) 2018/04/12 18:27:18 executing program 5: r0 = socket$inet(0x2, 0x3, 0x800000800000001) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x6}, 0xfffffebf) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 2018/04/12 18:27:18 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000c23fca)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x3fffffffffffff8a, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @icmp=@timestamp={0xd}}}}}, 0x0) 2018/04/12 18:27:18 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0x240000000018, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000340)="0f01ca0f21913664660f382990e1e883e0672ef3650f070f350fc719b8ac00c0fe0f23c80f21f8350c0060000f23f8c4c17a2dd50fc7580fb9800000c00f3235001000000f30", 0x46}], 0x1, 0x0, &(0x7f0000000340), 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001180)) getpgid(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000005cc0)='io.stat\x00', 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000005dc0)) 2018/04/12 18:27:18 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.memory_migrate\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000080), 0x3) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000180)) 2018/04/12 18:27:18 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) 2018/04/12 18:27:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000a8bfff)=""/1, 0x805031ae) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)) syz_open_pts(r0, 0x0) ioctl$TIOCEXCL(r1, 0x540c) dup3(r1, r0, 0x0) 2018/04/12 18:27:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000a8bfff)=""/1, 0x805031ae) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)) syz_open_pts(r0, 0x0) ioctl$TIOCEXCL(r1, 0x540c) dup3(r1, r0, 0x0) 2018/04/12 18:27:18 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000a8bfff)=""/1, 0x805031ae) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)) syz_open_pts(r0, 0x0) ioctl$TIOCEXCL(r1, 0x540c) dup3(r1, r0, 0x0) 2018/04/12 18:27:18 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.memory_migrate\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000080), 0x3) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000180)) 2018/04/12 18:27:18 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000cac000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x0) 2018/04/12 18:27:18 executing program 5: r0 = socket$inet(0x2, 0x3, 0x800000800000001) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x6}, 0xfffffebf) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 2018/04/12 18:27:18 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000c23fca)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x3fffffffffffff8a, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @icmp=@timestamp={0xd}}}}}, 0x0) 2018/04/12 18:27:18 executing program 6: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xfffffffffffffff9, 0x40020011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) r1 = syz_open_dev$tun(&(0x7f0000000000)="2f6465762f6e6574c874756e00", 0x0, 0x5c7ad48375958275) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000140), &(0x7f0000000180)=0x4) write$tun(r1, &(0x7f0000006f80)={@pi, @hdr={0x2}, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast=0xffffffff, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}, 0x66) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in=@rand_addr, @in=@multicast1}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, 0x0, 0x0, 0x0, 0x0, {0xc}}, 0x14}, 0x1}, 0x0) syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) 2018/04/12 18:27:18 executing program 4: socket$kcm(0x29, 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000280)={{0x2, 0x4e23, @loopback=0x7f000001}, {0x306, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x6, {0x2, 0x4e24, @multicast1=0xe0000001}, 'eql\x00'}) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000), 0x4) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000340)=0x6, 0xfffffffffffffdc5) listen(r0, 0x4000000006) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f0000000080)="03", 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x8000}) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) sendto$ipx(r1, &(0x7f0000000180)='w', 0x1, 0x0, &(0x7f00000000c0)={0x4, 0x0, 0x0, "502200000006"}, 0x10) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300)='tls\x00', 0x4) sendto$inet(r1, &(0x7f0000000140)="e9", 0x1, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000040)) sendmsg$unix(r1, &(0x7f0000001140)={&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000980)="7eaf9977f0ead629c327105b31e19f649656919fd31803ce636ed7bca5e96d74ecc6333b7ea84a5fe76f4be0f2940b8367d4c64dd1ab8e801e73829a4c811f5d8c63d0d78ce1b7873159ec86105010bb12fc8d032415ec752c086999be9e20d5009f4b2674d8d2fe7a06256c1bc6e95f025f24645afd88353c28dbc7a9987ec135603570432cb162df73b1e52aba114005473f92c0c9998d38e8ea6bb817a9b8fa08b5e7f2cc1439", 0xa8}], 0x1, &(0x7f0000001080)=[@cred={0x20, 0x1, 0x2}], 0x20, 0x10}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000001c0)={0xb6, {{0xa, 0x4e20, 0x2, @local={0xfe, 0x80, [], 0xaa}, 0x3}}}, 0x88) 2018/04/12 18:27:18 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000cac000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x0) 2018/04/12 18:27:18 executing program 5: r0 = socket$inet(0x2, 0x3, 0x800000800000001) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x6}, 0xfffffebf) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 2018/04/12 18:27:18 executing program 1: capset(&(0x7f0000fb2000)={0x40020071026}, &(0x7f000006f000)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f000062cffc)=0x6, 0x4) [ 264.322069] binder_alloc: binder_alloc_mmap_handler: 17739 20000000-20002000 already mapped failed -16 [ 264.346326] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/12 18:27:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x10002) read(r0, &(0x7f0000000580)=""/142, 0x8e) dup2(r1, r0) ioctl$TIOCGLCKTRMIOS(r1, 0x5412, &(0x7f0000000000)) 2018/04/12 18:27:18 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000cac000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x0) 2018/04/12 18:27:18 executing program 1: capset(&(0x7f0000fb2000)={0x40020071026}, &(0x7f000006f000)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f000062cffc)=0x6, 0x4) [ 264.369866] binder_alloc: 17739: binder_alloc_buf, no vma [ 264.375585] binder: 17739:17754 transaction failed 29189/-3, size 40-0 line 2963 [ 264.385100] binder: 17739:17740 ioctl 40046207 0 returned -16 2018/04/12 18:27:18 executing program 4: socket$kcm(0x29, 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000280)={{0x2, 0x4e23, @loopback=0x7f000001}, {0x306, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x6, {0x2, 0x4e24, @multicast1=0xe0000001}, 'eql\x00'}) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000), 0x4) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000340)=0x6, 0xfffffffffffffdc5) listen(r0, 0x4000000006) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f0000000080)="03", 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x8000}) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) sendto$ipx(r1, &(0x7f0000000180)='w', 0x1, 0x0, &(0x7f00000000c0)={0x4, 0x0, 0x0, "502200000006"}, 0x10) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300)='tls\x00', 0x4) sendto$inet(r1, &(0x7f0000000140)="e9", 0x1, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000040)) sendmsg$unix(r1, &(0x7f0000001140)={&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000980)="7eaf9977f0ead629c327105b31e19f649656919fd31803ce636ed7bca5e96d74ecc6333b7ea84a5fe76f4be0f2940b8367d4c64dd1ab8e801e73829a4c811f5d8c63d0d78ce1b7873159ec86105010bb12fc8d032415ec752c086999be9e20d5009f4b2674d8d2fe7a06256c1bc6e95f025f24645afd88353c28dbc7a9987ec135603570432cb162df73b1e52aba114005473f92c0c9998d38e8ea6bb817a9b8fa08b5e7f2cc1439", 0xa8}], 0x1, &(0x7f0000001080)=[@cred={0x20, 0x1, 0x2}], 0x20, 0x10}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000001c0)={0xb6, {{0xa, 0x4e20, 0x2, @local={0xfe, 0x80, [], 0xaa}, 0x3}}}, 0x88) [ 264.526392] binder: release 17739:17740 transaction 35 out, still active [ 264.533433] binder: undelivered TRANSACTION_COMPLETE [ 264.538603] binder: undelivered TRANSACTION_ERROR: 29189 [ 264.544115] binder: send failed reply for transaction 35, target dead 2018/04/12 18:27:19 executing program 6: r0 = socket$inet6(0xa, 0x80005, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00004af000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0xffffffa4], 0x1}}}, {{0xa}}}, 0x108) close(r0) 2018/04/12 18:27:19 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000309000)='/dev/snd/controlC#\x00', 0x6ba, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f00005e1000)) 2018/04/12 18:27:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f00000001c0)) 2018/04/12 18:27:19 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) 2018/04/12 18:27:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000a8bfff)=""/1, 0x805031ae) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)) syz_open_pts(r0, 0x0) ioctl$TIOCEXCL(r1, 0x540c) dup3(r1, r0, 0x0) 2018/04/12 18:27:19 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000cac000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x0) 2018/04/12 18:27:19 executing program 1: capset(&(0x7f0000fb2000)={0x40020071026}, &(0x7f000006f000)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f000062cffc)=0x6, 0x4) 2018/04/12 18:27:19 executing program 4: socket$kcm(0x29, 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000280)={{0x2, 0x4e23, @loopback=0x7f000001}, {0x306, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x6, {0x2, 0x4e24, @multicast1=0xe0000001}, 'eql\x00'}) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000), 0x4) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000340)=0x6, 0xfffffffffffffdc5) listen(r0, 0x4000000006) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f0000000080)="03", 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x8000}) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) sendto$ipx(r1, &(0x7f0000000180)='w', 0x1, 0x0, &(0x7f00000000c0)={0x4, 0x0, 0x0, "502200000006"}, 0x10) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300)='tls\x00', 0x4) sendto$inet(r1, &(0x7f0000000140)="e9", 0x1, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000040)) sendmsg$unix(r1, &(0x7f0000001140)={&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000980)="7eaf9977f0ead629c327105b31e19f649656919fd31803ce636ed7bca5e96d74ecc6333b7ea84a5fe76f4be0f2940b8367d4c64dd1ab8e801e73829a4c811f5d8c63d0d78ce1b7873159ec86105010bb12fc8d032415ec752c086999be9e20d5009f4b2674d8d2fe7a06256c1bc6e95f025f24645afd88353c28dbc7a9987ec135603570432cb162df73b1e52aba114005473f92c0c9998d38e8ea6bb817a9b8fa08b5e7f2cc1439", 0xa8}], 0x1, &(0x7f0000001080)=[@cred={0x20, 0x1, 0x2}], 0x20, 0x10}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000001c0)={0xb6, {{0xa, 0x4e20, 0x2, @local={0xfe, 0x80, [], 0xaa}, 0x3}}}, 0x88) 2018/04/12 18:27:19 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000309000)='/dev/snd/controlC#\x00', 0x6ba, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f00005e1000)) 2018/04/12 18:27:19 executing program 1: capset(&(0x7f0000fb2000)={0x40020071026}, &(0x7f000006f000)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f000062cffc)=0x6, 0x4) 2018/04/12 18:27:19 executing program 6: r0 = socket$inet6(0xa, 0x80005, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00004af000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0xffffffa4], 0x1}}}, {{0xa}}}, 0x108) close(r0) 2018/04/12 18:27:19 executing program 2: r0 = socket$inet6(0xa, 0x80005, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00004af000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0xffffffa4], 0x1}}}, {{0xa}}}, 0x108) close(r0) 2018/04/12 18:27:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f00000001c0)) 2018/04/12 18:27:20 executing program 4: socket$kcm(0x29, 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000280)={{0x2, 0x4e23, @loopback=0x7f000001}, {0x306, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x6, {0x2, 0x4e24, @multicast1=0xe0000001}, 'eql\x00'}) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000), 0x4) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000340)=0x6, 0xfffffffffffffdc5) listen(r0, 0x4000000006) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f0000000080)="03", 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x8000}) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) sendto$ipx(r1, &(0x7f0000000180)='w', 0x1, 0x0, &(0x7f00000000c0)={0x4, 0x0, 0x0, "502200000006"}, 0x10) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300)='tls\x00', 0x4) sendto$inet(r1, &(0x7f0000000140)="e9", 0x1, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000040)) sendmsg$unix(r1, &(0x7f0000001140)={&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000980)="7eaf9977f0ead629c327105b31e19f649656919fd31803ce636ed7bca5e96d74ecc6333b7ea84a5fe76f4be0f2940b8367d4c64dd1ab8e801e73829a4c811f5d8c63d0d78ce1b7873159ec86105010bb12fc8d032415ec752c086999be9e20d5009f4b2674d8d2fe7a06256c1bc6e95f025f24645afd88353c28dbc7a9987ec135603570432cb162df73b1e52aba114005473f92c0c9998d38e8ea6bb817a9b8fa08b5e7f2cc1439", 0xa8}], 0x1, &(0x7f0000001080)=[@cred={0x20, 0x1, 0x2}], 0x20, 0x10}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000001c0)={0xb6, {{0xa, 0x4e20, 0x2, @local={0xfe, 0x80, [], 0xaa}, 0x3}}}, 0x88) 2018/04/12 18:27:20 executing program 6: r0 = socket$inet6(0xa, 0x80005, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00004af000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0xffffffa4], 0x1}}}, {{0xa}}}, 0x108) close(r0) 2018/04/12 18:27:20 executing program 2: r0 = socket$inet6(0xa, 0x80005, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00004af000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0xffffffa4], 0x1}}}, {{0xa}}}, 0x108) close(r0) 2018/04/12 18:27:20 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000309000)='/dev/snd/controlC#\x00', 0x6ba, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f00005e1000)) 2018/04/12 18:27:20 executing program 1: r0 = epoll_create(0x6) r1 = epoll_create(0x4) r2 = socket$rds(0x15, 0x5, 0x0) r3 = epoll_create(0x100000001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f000000e000)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f000000d000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000000dff4)) r4 = epoll_create(0x46c) r5 = epoll_create(0x400000000000804) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000c7f000)) r6 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000d5dff4)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f000050aff4)) 2018/04/12 18:27:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f00000001c0)) 2018/04/12 18:27:20 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) 2018/04/12 18:27:20 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000a21000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="02", 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x16}, 0x5}, 0x1c) recvmmsg(r0, &(0x7f00000063c0)=[{{&(0x7f0000002940)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000003b40), 0x0, &(0x7f0000003b80)=""/195, 0xc3}}], 0x1, 0x0, &(0x7f00000064c0)={0x0, 0x1c9c380}) 2018/04/12 18:27:20 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000309000)='/dev/snd/controlC#\x00', 0x6ba, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f00005e1000)) 2018/04/12 18:27:20 executing program 6: r0 = socket$inet6(0xa, 0x80005, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00004af000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0xffffffa4], 0x1}}}, {{0xa}}}, 0x108) close(r0) 2018/04/12 18:27:20 executing program 2: r0 = socket$inet6(0xa, 0x80005, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00004af000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0xffffffa4], 0x1}}}, {{0xa}}}, 0x108) close(r0) 2018/04/12 18:27:20 executing program 1: r0 = epoll_create(0x6) r1 = epoll_create(0x4) r2 = socket$rds(0x15, 0x5, 0x0) r3 = epoll_create(0x100000001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f000000e000)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f000000d000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000000dff4)) r4 = epoll_create(0x46c) r5 = epoll_create(0x400000000000804) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000c7f000)) r6 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000d5dff4)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f000050aff4)) 2018/04/12 18:27:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f00000001c0)) 2018/04/12 18:27:20 executing program 4: r0 = epoll_create(0x6) r1 = epoll_create(0x4) r2 = socket$rds(0x15, 0x5, 0x0) r3 = epoll_create(0x100000001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f000000e000)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f000000d000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000000dff4)) r4 = epoll_create(0x46c) r5 = epoll_create(0x400000000000804) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000c7f000)) r6 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000d5dff4)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f000050aff4)) 2018/04/12 18:27:20 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000a21000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f00005a0fff)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/12 18:27:20 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendto$inet(r0, &(0x7f0000000140), 0x396, 0x200007ff, &(0x7f0000003e00)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) writev(r0, &(0x7f0000df9000)=[{&(0x7f0000354ff8)='\'', 0x1}], 0x1) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [], 0xa}, 0xb) 2018/04/12 18:27:21 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000bf5ff3)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000215fc0)=[{&(0x7f000087ef6a)=""/1, 0x1}], 0x1, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00002ac000)=""/106, 0x6a}], 0x1, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) r1 = getpgid(0x0) tkill(r1, 0x15) 2018/04/12 18:27:21 executing program 1: r0 = epoll_create(0x6) r1 = epoll_create(0x4) r2 = socket$rds(0x15, 0x5, 0x0) r3 = epoll_create(0x100000001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f000000e000)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f000000d000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000000dff4)) r4 = epoll_create(0x46c) r5 = epoll_create(0x400000000000804) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000c7f000)) r6 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000d5dff4)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f000050aff4)) 2018/04/12 18:27:21 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000a21000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="02", 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x16}, 0x5}, 0x1c) recvmmsg(r0, &(0x7f00000063c0)=[{{&(0x7f0000002940)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000003b40), 0x0, &(0x7f0000003b80)=""/195, 0xc3}}], 0x1, 0x0, &(0x7f00000064c0)={0x0, 0x1c9c380}) 2018/04/12 18:27:21 executing program 4: r0 = epoll_create(0x6) r1 = epoll_create(0x4) r2 = socket$rds(0x15, 0x5, 0x0) r3 = epoll_create(0x100000001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f000000e000)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f000000d000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000000dff4)) r4 = epoll_create(0x46c) r5 = epoll_create(0x400000000000804) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000c7f000)) r6 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000d5dff4)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f000050aff4)) 2018/04/12 18:27:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, &(0x7f0000000180)="bad104ed66b91000004066b80d00000066ba000000000f3066b9800000c00f326635000400000f30ba4100b063eef20f1a320f667603260fc72a2e0f01cf0f09ea00001d01", 0x45}], 0x1, 0x0, &(0x7f0000000140), 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000500)="0f005c0666b8ef0000000f23d00f21f86635300000010f23f866b9770b000066b80000008066ba000000000f30f20f35f30f1bcff4650f01cabaf80c66b8c261a58266efbafc0cb874daef0f236d0f32", 0x50}], 0x0, 0x0, &(0x7f0000000040), 0xffffe1e) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/12 18:27:21 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendto$inet(r0, &(0x7f0000000140), 0x396, 0x200007ff, &(0x7f0000003e00)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) writev(r0, &(0x7f0000df9000)=[{&(0x7f0000354ff8)='\'', 0x1}], 0x1) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [], 0xa}, 0xb) 2018/04/12 18:27:21 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) 2018/04/12 18:27:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xe62000)=nil, 0xe62000, 0x1000004, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000100)}) 2018/04/12 18:27:21 executing program 4: r0 = epoll_create(0x6) r1 = epoll_create(0x4) r2 = socket$rds(0x15, 0x5, 0x0) r3 = epoll_create(0x100000001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f000000e000)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f000000d000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000000dff4)) r4 = epoll_create(0x46c) r5 = epoll_create(0x400000000000804) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000c7f000)) r6 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000d5dff4)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f000050aff4)) 2018/04/12 18:27:21 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendto$inet(r0, &(0x7f0000000140), 0x396, 0x200007ff, &(0x7f0000003e00)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) writev(r0, &(0x7f0000df9000)=[{&(0x7f0000354ff8)='\'', 0x1}], 0x1) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [], 0xa}, 0xb) 2018/04/12 18:27:21 executing program 1: r0 = epoll_create(0x6) r1 = epoll_create(0x4) r2 = socket$rds(0x15, 0x5, 0x0) r3 = epoll_create(0x100000001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f000000e000)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f000000d000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000000dff4)) r4 = epoll_create(0x46c) r5 = epoll_create(0x400000000000804) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000c7f000)) r6 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000d5dff4)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f000050aff4)) 2018/04/12 18:27:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xe62000)=nil, 0xe62000, 0x1000004, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000100)}) 2018/04/12 18:27:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, &(0x7f0000000180)="bad104ed66b91000004066b80d00000066ba000000000f3066b9800000c00f326635000400000f30ba4100b063eef20f1a320f667603260fc72a2e0f01cf0f09ea00001d01", 0x45}], 0x1, 0x0, &(0x7f0000000140), 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000500)="0f005c0666b8ef0000000f23d00f21f86635300000010f23f866b9770b000066b80000008066ba000000000f30f20f35f30f1bcff4650f01cabaf80c66b8c261a58266efbafc0cb874daef0f236d0f32", 0x50}], 0x0, 0x0, &(0x7f0000000040), 0xffffe1e) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/12 18:27:21 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$nfc_llcp(r0, &(0x7f0000000540)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d5e03eb5f683b6f216a898c4d34ab03dba348c57e5859f5f5955aa5047d220d5047a38bd289ccbcc61a14a91a679711c1fea3d6a1a1741acd590e49c665a72", 0x3c}, 0x60) 2018/04/12 18:27:21 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000a21000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="02", 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x16}, 0x5}, 0x1c) recvmmsg(r0, &(0x7f00000063c0)=[{{&(0x7f0000002940)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000003b40), 0x0, &(0x7f0000003b80)=""/195, 0xc3}}], 0x1, 0x0, &(0x7f00000064c0)={0x0, 0x1c9c380}) 2018/04/12 18:27:21 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendto$inet(r0, &(0x7f0000000140), 0x396, 0x200007ff, &(0x7f0000003e00)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) writev(r0, &(0x7f0000df9000)=[{&(0x7f0000354ff8)='\'', 0x1}], 0x1) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [], 0xa}, 0xb) 2018/04/12 18:27:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, &(0x7f0000000180)="bad104ed66b91000004066b80d00000066ba000000000f3066b9800000c00f326635000400000f30ba4100b063eef20f1a320f667603260fc72a2e0f01cf0f09ea00001d01", 0x45}], 0x1, 0x0, &(0x7f0000000140), 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000500)="0f005c0666b8ef0000000f23d00f21f86635300000010f23f866b9770b000066b80000008066ba000000000f30f20f35f30f1bcff4650f01cabaf80c66b8c261a58266efbafc0cb874daef0f236d0f32", 0x50}], 0x0, 0x0, &(0x7f0000000040), 0xffffe1e) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/12 18:27:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xe62000)=nil, 0xe62000, 0x1000004, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000100)}) 2018/04/12 18:27:22 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000680)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'pids', 0x20}]}, 0x6) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2d, 'pids', 0x20}]}, 0x6) 2018/04/12 18:27:22 executing program 7: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$setsig(r0, 0xa, 0x41) 2018/04/12 18:27:22 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000a21000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="02", 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x16}, 0x5}, 0x1c) recvmmsg(r0, &(0x7f00000063c0)=[{{&(0x7f0000002940)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000003b40), 0x0, &(0x7f0000003b80)=""/195, 0xc3}}], 0x1, 0x0, &(0x7f00000064c0)={0x0, 0x1c9c380}) 2018/04/12 18:27:22 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000bf5ff3)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000215fc0)=[{&(0x7f000087ef6a)=""/1, 0x1}], 0x1, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00002ac000)=""/106, 0x6a}], 0x1, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) r1 = getpgid(0x0) tkill(r1, 0x15) 2018/04/12 18:27:22 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000bf5ff3)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000215fc0)=[{&(0x7f000087ef6a)=""/1, 0x1}], 0x1, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00002ac000)=""/106, 0x6a}], 0x1, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) r1 = getpgid(0x0) tkill(r1, 0x15) 2018/04/12 18:27:22 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) 2018/04/12 18:27:22 executing program 7: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$setsig(r0, 0xa, 0x41) 2018/04/12 18:27:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xe62000)=nil, 0xe62000, 0x1000004, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000100)}) 2018/04/12 18:27:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x2) ioctl$TIOCGLCKTRMIOS(r1, 0x40087101, &(0x7f0000000000)) 2018/04/12 18:27:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, &(0x7f0000000180)="bad104ed66b91000004066b80d00000066ba000000000f3066b9800000c00f326635000400000f30ba4100b063eef20f1a320f667603260fc72a2e0f01cf0f09ea00001d01", 0x45}], 0x1, 0x0, &(0x7f0000000140), 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000500)="0f005c0666b8ef0000000f23d00f21f86635300000010f23f866b9770b000066b80000008066ba000000000f30f20f35f30f1bcff4650f01cabaf80c66b8c261a58266efbafc0cb874daef0f236d0f32", 0x50}], 0x0, 0x0, &(0x7f0000000040), 0xffffe1e) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/12 18:27:22 executing program 7: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$setsig(r0, 0xa, 0x41) 2018/04/12 18:27:22 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x3, &(0x7f0000dbc000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x3, 0xffffffb5}, [], {0x95}}, &(0x7f0000e6bffc)="47ff3300", 0x5, 0x99, &(0x7f000000d000)=""/153}, 0x48) 2018/04/12 18:27:22 executing program 7: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$setsig(r0, 0xa, 0x41) 2018/04/12 18:27:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) 2018/04/12 18:27:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x2) ioctl$TIOCGLCKTRMIOS(r1, 0x40087101, &(0x7f0000000000)) 2018/04/12 18:27:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0xffffffffffffffff, 0x120c03}, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0xffffffffffffffff}, 0xc) 2018/04/12 18:27:23 executing program 7: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, &(0x7f0000001100)="a1", 0x1, 0xfffffffffffffffb) socket$alg(0x26, 0x5, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000080)=0x14) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f00000001c0)) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={@dev={0xfe, 0x80}, 0x0, r1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'tunl0\x00'}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() keyctl$unlink(0x9, r0, 0xfffffffffffffffb) 2018/04/12 18:27:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) 2018/04/12 18:27:23 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x3, &(0x7f0000dbc000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x3, 0xffffffb5}, [], {0x95}}, &(0x7f0000e6bffc)="47ff3300", 0x5, 0x99, &(0x7f000000d000)=""/153}, 0x48) 2018/04/12 18:27:23 executing program 5: r0 = socket$inet(0x2b, 0x801, 0x0) listen(r0, 0x0) listen(r0, 0x0) 2018/04/12 18:27:23 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000bf5ff3)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000215fc0)=[{&(0x7f000087ef6a)=""/1, 0x1}], 0x1, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00002ac000)=""/106, 0x6a}], 0x1, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) r1 = getpgid(0x0) tkill(r1, 0x15) 2018/04/12 18:27:23 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000bf5ff3)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000215fc0)=[{&(0x7f000087ef6a)=""/1, 0x1}], 0x1, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00002ac000)=""/106, 0x6a}], 0x1, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) r1 = getpgid(0x0) tkill(r1, 0x15) 2018/04/12 18:27:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0xffffffffffffffff, 0x120c03}, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0xffffffffffffffff}, 0xc) 2018/04/12 18:27:23 executing program 5: r0 = socket$inet(0x2b, 0x801, 0x0) listen(r0, 0x0) listen(r0, 0x0) 2018/04/12 18:27:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) 2018/04/12 18:27:23 executing program 7: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000b9c000)) getgroups(0x2, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff]) setresgid(0x0, 0x0, r0) 2018/04/12 18:27:23 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x3, &(0x7f0000dbc000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x3, 0xffffffb5}, [], {0x95}}, &(0x7f0000e6bffc)="47ff3300", 0x5, 0x99, &(0x7f000000d000)=""/153}, 0x48) 2018/04/12 18:27:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x2) ioctl$TIOCGLCKTRMIOS(r1, 0x40087101, &(0x7f0000000000)) 2018/04/12 18:27:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0xffffffffffffffff, 0x120c03}, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0xffffffffffffffff}, 0xc) 2018/04/12 18:27:23 executing program 5: r0 = socket$inet(0x2b, 0x801, 0x0) listen(r0, 0x0) listen(r0, 0x0) 2018/04/12 18:27:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) 2018/04/12 18:27:24 executing program 7: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000b9c000)) getgroups(0x2, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff]) setresgid(0x0, 0x0, r0) 2018/04/12 18:27:24 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x3, &(0x7f0000dbc000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x3, 0xffffffb5}, [], {0x95}}, &(0x7f0000e6bffc)="47ff3300", 0x5, 0x99, &(0x7f000000d000)=""/153}, 0x48) 2018/04/12 18:27:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0xffffffffffffffff, 0x120c03}, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0xffffffffffffffff}, 0xc) 2018/04/12 18:27:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x2) ioctl$TIOCGLCKTRMIOS(r1, 0x40087101, &(0x7f0000000000)) 2018/04/12 18:27:24 executing program 5: r0 = socket$inet(0x2b, 0x801, 0x0) listen(r0, 0x0) listen(r0, 0x0) 2018/04/12 18:27:24 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000bf5ff3)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000215fc0)=[{&(0x7f000087ef6a)=""/1, 0x1}], 0x1, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00002ac000)=""/106, 0x6a}], 0x1, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) r1 = getpgid(0x0) tkill(r1, 0x15) 2018/04/12 18:27:24 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000bf5ff3)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000215fc0)=[{&(0x7f000087ef6a)=""/1, 0x1}], 0x1, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00002ac000)=""/106, 0x6a}], 0x1, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) r1 = getpgid(0x0) tkill(r1, 0x15) 2018/04/12 18:27:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x3bf, 0x0, [{0x0, 0x0, 0x0, 0x0, @adapter}]}) 2018/04/12 18:27:24 executing program 7: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000b9c000)) getgroups(0x2, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff]) setresgid(0x0, 0x0, r0) 2018/04/12 18:27:24 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f0000001fc8)={&(0x7f0000006000)={0x1d}, 0x10, &(0x7f0000000000)={&(0x7f0000006fb8)={0x5, 0x0, 0x0, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0b73a01c2522aa66"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000040)={&(0x7f0000004000)={0x1d}, 0x10, &(0x7f0000002ff0)={&(0x7f0000004fb8)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x38}, 0x1}, 0x0) 2018/04/12 18:27:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x20}, 0x13) bpf$PROG_LOAD(0x5, &(0x7f0000a12fb8)={0x2, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000000000)="e1ff181fc87b79a7ed281207bb78bc80ee1cdf1fb03ed15a3482721ca1a2a4ee5f924cfd484123f76797aa8ea830de7af91192d465bb4e08b2d9dacc368e1fb0412f", 0xfffffffffffffff8, 0xfb, &(0x7f00001a7f05)=""/251, 0x41000}, 0x48) 2018/04/12 18:27:24 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb855) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000000080)=@can, &(0x7f0000752ffc)=0x80, 0x0) sendto$inet(r1, &(0x7f0000531fff), 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000f8aff1), 0xff8f) close(r2) 2018/04/12 18:27:24 executing program 4: mkdir(&(0x7f00005b2000)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='[\nfile:\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0x0, &(0x7f0000000140)) 2018/04/12 18:27:24 executing program 7: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000b9c000)) getgroups(0x2, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff]) setresgid(0x0, 0x0, r0) [ 270.197803] dccp_xmit_packet: Payload too large (65423) for featneg. [ 270.220132] libceph: parse_ips bad ip '[ [ 270.220132] file' [ 270.228171] dccp_close: ABORT with 65423 bytes unread [ 270.285784] dccp_xmit_packet: Payload too large (65423) for featneg. 2018/04/12 18:27:25 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f0000001fc8)={&(0x7f0000006000)={0x1d}, 0x10, &(0x7f0000000000)={&(0x7f0000006fb8)={0x5, 0x0, 0x0, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0b73a01c2522aa66"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000040)={&(0x7f0000004000)={0x1d}, 0x10, &(0x7f0000002ff0)={&(0x7f0000004fb8)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x38}, 0x1}, 0x0) 2018/04/12 18:27:25 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x20}, 0x13) bpf$PROG_LOAD(0x5, &(0x7f0000a12fb8)={0x2, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000000000)="e1ff181fc87b79a7ed281207bb78bc80ee1cdf1fb03ed15a3482721ca1a2a4ee5f924cfd484123f76797aa8ea830de7af91192d465bb4e08b2d9dacc368e1fb0412f", 0xfffffffffffffff8, 0xfb, &(0x7f00001a7f05)=""/251, 0x41000}, 0x48) 2018/04/12 18:27:25 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000690ffc)=0x6, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000f53fff), 0xfffffffffffffcf1, 0x20000000, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) 2018/04/12 18:27:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x3bf, 0x0, [{0x0, 0x0, 0x0, 0x0, @adapter}]}) 2018/04/12 18:27:25 executing program 4: mkdir(&(0x7f00005b2000)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='[\nfile:\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0x0, &(0x7f0000000140)) 2018/04/12 18:27:25 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb855) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000000080)=@can, &(0x7f0000752ffc)=0x80, 0x0) sendto$inet(r1, &(0x7f0000531fff), 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000f8aff1), 0xff8f) close(r2) 2018/04/12 18:27:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000c4fff0)=[{&(0x7f0000000000)="390000001300094700bb61e1c3050000070010000200000045000000007f000019001a000d003f000000000300000000000000060400000000", 0x39}], 0x1) 2018/04/12 18:27:25 executing program 6: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x1040000000032, 0xffffffffffffffff, 0x0) setsockopt(r0, 0x114, 0x1, &(0x7f0000000000)="2a8a33f9ffff8109002186b32cff6dac", 0x10) 2018/04/12 18:27:25 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f0000001fc8)={&(0x7f0000006000)={0x1d}, 0x10, &(0x7f0000000000)={&(0x7f0000006fb8)={0x5, 0x0, 0x0, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0b73a01c2522aa66"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000040)={&(0x7f0000004000)={0x1d}, 0x10, &(0x7f0000002ff0)={&(0x7f0000004fb8)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x38}, 0x1}, 0x0) [ 271.038535] libceph: parse_ips bad ip '[ [ 271.038535] file' [ 271.043782] dccp_xmit_packet: Payload too large (65423) for featneg. [ 271.073791] dccp_close: ABORT with 65423 bytes unread 2018/04/12 18:27:25 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x20}, 0x13) bpf$PROG_LOAD(0x5, &(0x7f0000a12fb8)={0x2, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000000000)="e1ff181fc87b79a7ed281207bb78bc80ee1cdf1fb03ed15a3482721ca1a2a4ee5f924cfd484123f76797aa8ea830de7af91192d465bb4e08b2d9dacc368e1fb0412f", 0xfffffffffffffff8, 0xfb, &(0x7f00001a7f05)=""/251, 0x41000}, 0x48) 2018/04/12 18:27:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000c4fff0)=[{&(0x7f0000000000)="390000001300094700bb61e1c3050000070010000200000045000000007f000019001a000d003f000000000300000000000000060400000000", 0x39}], 0x1) 2018/04/12 18:27:25 executing program 4: mkdir(&(0x7f00005b2000)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='[\nfile:\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0x0, &(0x7f0000000140)) 2018/04/12 18:27:25 executing program 6: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x1040000000032, 0xffffffffffffffff, 0x0) setsockopt(r0, 0x114, 0x1, &(0x7f0000000000)="2a8a33f9ffff8109002186b32cff6dac", 0x10) 2018/04/12 18:27:25 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f0000001fc8)={&(0x7f0000006000)={0x1d}, 0x10, &(0x7f0000000000)={&(0x7f0000006fb8)={0x5, 0x0, 0x0, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0b73a01c2522aa66"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000040)={&(0x7f0000004000)={0x1d}, 0x10, &(0x7f0000002ff0)={&(0x7f0000004fb8)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x38}, 0x1}, 0x0) 2018/04/12 18:27:25 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb855) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000000080)=@can, &(0x7f0000752ffc)=0x80, 0x0) sendto$inet(r1, &(0x7f0000531fff), 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000f8aff1), 0xff8f) close(r2) 2018/04/12 18:27:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x3bf, 0x0, [{0x0, 0x0, 0x0, 0x0, @adapter}]}) [ 271.223825] libceph: parse_ips bad ip '[ [ 271.223825] file' 2018/04/12 18:27:25 executing program 6: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x1040000000032, 0xffffffffffffffff, 0x0) setsockopt(r0, 0x114, 0x1, &(0x7f0000000000)="2a8a33f9ffff8109002186b32cff6dac", 0x10) 2018/04/12 18:27:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000c4fff0)=[{&(0x7f0000000000)="390000001300094700bb61e1c3050000070010000200000045000000007f000019001a000d003f000000000300000000000000060400000000", 0x39}], 0x1) [ 271.293000] dccp_xmit_packet: Payload too large (65423) for featneg. [ 271.351078] dccp_close: ABORT with 65423 bytes unread 2018/04/12 18:27:25 executing program 4: mkdir(&(0x7f00005b2000)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='[\nfile:\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0x0, &(0x7f0000000140)) 2018/04/12 18:27:25 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "cb0d7801368fc548b884b5290ef4d87ad04b5ccbc6d8a96a6f66d3eeb67ada8d", "91832f32492a9f3ea46eeb02d4ef25fc58d809d118adc2782048c3011d828db2", "8b95136832abec1ee3a470f41a039b2b0ada51692189b54fcb720cf38e74121d", "834591ba83d55b4615ec64e644879c7a30100bf39796e2ae1d4c2feb1d8075d1", "ffc0605d22bd1f84d3365181b901a7939db279a79ecc433cf22fd3a38abcb09a", "977c56df11a3a9eaf3d08717"}}) 2018/04/12 18:27:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000c4fff0)=[{&(0x7f0000000000)="390000001300094700bb61e1c3050000070010000200000045000000007f000019001a000d003f000000000300000000000000060400000000", 0x39}], 0x1) 2018/04/12 18:27:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x3bf, 0x0, [{0x0, 0x0, 0x0, 0x0, @adapter}]}) 2018/04/12 18:27:25 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb855) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000000080)=@can, &(0x7f0000752ffc)=0x80, 0x0) sendto$inet(r1, &(0x7f0000531fff), 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000f8aff1), 0xff8f) close(r2) 2018/04/12 18:27:25 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000690ffc)=0x6, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000f53fff), 0xfffffffffffffcf1, 0x20000000, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) 2018/04/12 18:27:25 executing program 6: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x1040000000032, 0xffffffffffffffff, 0x0) setsockopt(r0, 0x114, 0x1, &(0x7f0000000000)="2a8a33f9ffff8109002186b32cff6dac", 0x10) 2018/04/12 18:27:25 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x20}, 0x13) bpf$PROG_LOAD(0x5, &(0x7f0000a12fb8)={0x2, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000000000)="e1ff181fc87b79a7ed281207bb78bc80ee1cdf1fb03ed15a3482721ca1a2a4ee5f924cfd484123f76797aa8ea830de7af91192d465bb4e08b2d9dacc368e1fb0412f", 0xfffffffffffffff8, 0xfb, &(0x7f00001a7f05)=""/251, 0x41000}, 0x48) 2018/04/12 18:27:25 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "cb0d7801368fc548b884b5290ef4d87ad04b5ccbc6d8a96a6f66d3eeb67ada8d", "91832f32492a9f3ea46eeb02d4ef25fc58d809d118adc2782048c3011d828db2", "8b95136832abec1ee3a470f41a039b2b0ada51692189b54fcb720cf38e74121d", "834591ba83d55b4615ec64e644879c7a30100bf39796e2ae1d4c2feb1d8075d1", "ffc0605d22bd1f84d3365181b901a7939db279a79ecc433cf22fd3a38abcb09a", "977c56df11a3a9eaf3d08717"}}) 2018/04/12 18:27:25 executing program 1: syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)}}, {{&(0x7f00000044c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x10, &(0x7f0000001240), 0x0, &(0x7f0000000080), 0x78}}], 0x4000000000005ac, 0x0) 2018/04/12 18:27:25 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) [ 271.555854] libceph: parse_ips bad ip '[ [ 271.555854] file' [ 271.574706] dccp_xmit_packet: Payload too large (65423) for featneg. 2018/04/12 18:27:26 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f00009f1000)='G', 0x1, 0x0, &(0x7f0000108fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000600)=[@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}], 0x10) [ 271.627304] dccp_close: ABORT with 65423 bytes unread 2018/04/12 18:27:26 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000000)='./control\x00', &(0x7f0000000080)='./control/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) rename(&(0x7f0000000240)='./control/file0\x00', &(0x7f00000001c0)='./file0\x00') ftruncate(r0, 0x6) close(r0) 2018/04/12 18:27:26 executing program 5: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x14, &(0x7f00008a8ff0)={0x0, 0x0, &(0x7f0000d22000)}, &(0x7f0000f6affc)=0x10) [ 271.664042] binder_alloc: binder_alloc_mmap_handler: 18167 20000000-20002000 already mapped failed -16 [ 271.723875] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/12 18:27:26 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "cb0d7801368fc548b884b5290ef4d87ad04b5ccbc6d8a96a6f66d3eeb67ada8d", "91832f32492a9f3ea46eeb02d4ef25fc58d809d118adc2782048c3011d828db2", "8b95136832abec1ee3a470f41a039b2b0ada51692189b54fcb720cf38e74121d", "834591ba83d55b4615ec64e644879c7a30100bf39796e2ae1d4c2feb1d8075d1", "ffc0605d22bd1f84d3365181b901a7939db279a79ecc433cf22fd3a38abcb09a", "977c56df11a3a9eaf3d08717"}}) [ 271.749108] binder: 18167:18169 ioctl 40046207 0 returned -16 2018/04/12 18:27:26 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) [ 271.814123] binder: send failed reply for transaction 38 to 18167:18169 [ 271.827386] binder: undelivered TRANSACTION_COMPLETE [ 271.832604] binder: undelivered TRANSACTION_ERROR: 29189 [ 271.901761] binder: send failed reply for transaction 40 to 18195:18196 [ 271.925385] binder: undelivered TRANSACTION_COMPLETE [ 271.930579] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/12 18:27:26 executing program 1: syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)}}, {{&(0x7f00000044c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x10, &(0x7f0000001240), 0x0, &(0x7f0000000080), 0x78}}], 0x4000000000005ac, 0x0) 2018/04/12 18:27:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/12 18:27:26 executing program 5: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x14, &(0x7f00008a8ff0)={0x0, 0x0, &(0x7f0000d22000)}, &(0x7f0000f6affc)=0x10) 2018/04/12 18:27:26 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000000)='./control\x00', &(0x7f0000000080)='./control/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) rename(&(0x7f0000000240)='./control/file0\x00', &(0x7f00000001c0)='./file0\x00') ftruncate(r0, 0x6) close(r0) 2018/04/12 18:27:26 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "cb0d7801368fc548b884b5290ef4d87ad04b5ccbc6d8a96a6f66d3eeb67ada8d", "91832f32492a9f3ea46eeb02d4ef25fc58d809d118adc2782048c3011d828db2", "8b95136832abec1ee3a470f41a039b2b0ada51692189b54fcb720cf38e74121d", "834591ba83d55b4615ec64e644879c7a30100bf39796e2ae1d4c2feb1d8075d1", "ffc0605d22bd1f84d3365181b901a7939db279a79ecc433cf22fd3a38abcb09a", "977c56df11a3a9eaf3d08717"}}) 2018/04/12 18:27:26 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f00009f1000)='G', 0x1, 0x0, &(0x7f0000108fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000600)=[@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}], 0x10) 2018/04/12 18:27:26 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000690ffc)=0x6, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000f53fff), 0xfffffffffffffcf1, 0x20000000, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) 2018/04/12 18:27:26 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) [ 272.068122] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/12 18:27:26 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f00008cffe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffff0001) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_buf(r1, 0x0, 0x2000000000004, &(0x7f0000000000), 0x0) 2018/04/12 18:27:26 executing program 5: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x14, &(0x7f00008a8ff0)={0x0, 0x0, &(0x7f0000d22000)}, &(0x7f0000f6affc)=0x10) [ 272.108502] binder: 18205:18207 ioctl 40046207 0 returned -16 [ 272.146846] binder: send failed reply for transaction 42 to 18202:18203 2018/04/12 18:27:26 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000000)='./control\x00', &(0x7f0000000080)='./control/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) rename(&(0x7f0000000240)='./control/file0\x00', &(0x7f00000001c0)='./file0\x00') ftruncate(r0, 0x6) close(r0) 2018/04/12 18:27:26 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/12 18:27:26 executing program 1: syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)}}, {{&(0x7f00000044c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x10, &(0x7f0000001240), 0x0, &(0x7f0000000080), 0x78}}], 0x4000000000005ac, 0x0) [ 272.153739] binder: send failed reply for transaction 43 to 18205:18207 2018/04/12 18:27:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) [ 272.231355] binder: undelivered TRANSACTION_COMPLETE [ 272.236619] binder: undelivered TRANSACTION_ERROR: 29189 [ 272.269056] binder: BINDER_SET_CONTEXT_MGR already set [ 272.282709] binder: undelivered TRANSACTION_COMPLETE [ 272.287910] binder: undelivered TRANSACTION_ERROR: 29189 [ 272.302095] binder: 18235:18236 ioctl 40046207 0 returned -16 [ 272.331319] binder: release 18226:18228 transaction 45 out, still active [ 272.338254] binder: undelivered TRANSACTION_COMPLETE [ 272.358697] binder_alloc: 18226: binder_alloc_buf, no vma [ 272.364337] binder: 18235:18236 transaction failed 29189/-3, size 0-0 line 2963 [ 272.379068] binder: send failed reply for transaction 45, target dead [ 272.404841] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/12 18:27:26 executing program 5: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x14, &(0x7f00008a8ff0)={0x0, 0x0, &(0x7f0000d22000)}, &(0x7f0000f6affc)=0x10) 2018/04/12 18:27:26 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f00008cffe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffff0001) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_buf(r1, 0x0, 0x2000000000004, &(0x7f0000000000), 0x0) 2018/04/12 18:27:26 executing program 6: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x1fffffd) syz_open_procfs(0x0, &(0x7f0000000100)='ns/cgroup\x00') lchown(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f000053bff8)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000db0ff8)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, &(0x7f0000cde000)) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000880)=""/1679, 0x3bb) setns(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x8000}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f00000002c0)=0x98) 2018/04/12 18:27:26 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f00009f1000)='G', 0x1, 0x0, &(0x7f0000108fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000600)=[@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}], 0x10) 2018/04/12 18:27:26 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000000)='./control\x00', &(0x7f0000000080)='./control/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) rename(&(0x7f0000000240)='./control/file0\x00', &(0x7f00000001c0)='./file0\x00') ftruncate(r0, 0x6) close(r0) 2018/04/12 18:27:26 executing program 1: syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)}}, {{&(0x7f00000044c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x10, &(0x7f0000001240), 0x0, &(0x7f0000000080), 0x78}}], 0x4000000000005ac, 0x0) 2018/04/12 18:27:26 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000690ffc)=0x6, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000f53fff), 0xfffffffffffffcf1, 0x20000000, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) 2018/04/12 18:27:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/12 18:27:26 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x8}, [@typed={0x8, 0x1, @pid}]}, 0x1c}, 0x1}, 0x0) 2018/04/12 18:27:26 executing program 6: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x1fffffd) syz_open_procfs(0x0, &(0x7f0000000100)='ns/cgroup\x00') lchown(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f000053bff8)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000db0ff8)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, &(0x7f0000cde000)) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000880)=""/1679, 0x3bb) setns(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x8000}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f00000002c0)=0x98) 2018/04/12 18:27:26 executing program 5: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x1fffffd) syz_open_procfs(0x0, &(0x7f0000000100)='ns/cgroup\x00') lchown(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f000053bff8)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000db0ff8)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, &(0x7f0000cde000)) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000880)=""/1679, 0x3bb) setns(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x8000}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f00000002c0)=0x98) 2018/04/12 18:27:26 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f00008cffe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffff0001) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_buf(r1, 0x0, 0x2000000000004, &(0x7f0000000000), 0x0) 2018/04/12 18:27:26 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)={[{@nls={'nls', 0x3d, 'cp865'}, 0x2c}]}) 2018/04/12 18:27:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}}, @in=@rand_addr, {@in, @in=@multicast1=0xe0000001}, {{@in, @in=@multicast1=0xe0000001}, {}, {}, 0x0, 0x0, 0x0, 0xf}}}, 0x128}, 0x1}, 0x0) 2018/04/12 18:27:27 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x8}, [@typed={0x8, 0x1, @pid}]}, 0x1c}, 0x1}, 0x0) [ 272.634464] binder: send failed reply for transaction 48 to 18249:18250 [ 272.647753] binder: undelivered TRANSACTION_COMPLETE [ 272.652979] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/12 18:27:27 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f00009f1000)='G', 0x1, 0x0, &(0x7f0000108fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000600)=[@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}], 0x10) 2018/04/12 18:27:27 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f00008cffe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffff0001) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_buf(r1, 0x0, 0x2000000000004, &(0x7f0000000000), 0x0) 2018/04/12 18:27:27 executing program 6: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x1fffffd) syz_open_procfs(0x0, &(0x7f0000000100)='ns/cgroup\x00') lchown(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f000053bff8)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000db0ff8)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, &(0x7f0000cde000)) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000880)=""/1679, 0x3bb) setns(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x8000}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f00000002c0)=0x98) 2018/04/12 18:27:27 executing program 0: r0 = socket$inet(0x2, 0x80000000003, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f000024d000)=0x7fe, 0x4) sendto$inet(r0, &(0x7f00002df000), 0x0, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10) sendto$inet(r0, &(0x7f00001e1000), 0x0, 0x0, &(0x7f0000777ff0)={0x2}, 0x10) close(r0) 2018/04/12 18:27:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}}, @in=@rand_addr, {@in, @in=@multicast1=0xe0000001}, {{@in, @in=@multicast1=0xe0000001}, {}, {}, 0x0, 0x0, 0x0, 0xf}}}, 0x128}, 0x1}, 0x0) 2018/04/12 18:27:27 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x8}, [@typed={0x8, 0x1, @pid}]}, 0x1c}, 0x1}, 0x0) 2018/04/12 18:27:27 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r1, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) 2018/04/12 18:27:27 executing program 5: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x1fffffd) syz_open_procfs(0x0, &(0x7f0000000100)='ns/cgroup\x00') lchown(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f000053bff8)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000db0ff8)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, &(0x7f0000cde000)) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000880)=""/1679, 0x3bb) setns(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x8000}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f00000002c0)=0x98) 2018/04/12 18:27:27 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006f3ff0)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$KDGKBLED(r0, 0x40045109, &(0x7f0000000000)) 2018/04/12 18:27:27 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x8}, [@typed={0x8, 0x1, @pid}]}, 0x1c}, 0x1}, 0x0) 2018/04/12 18:27:27 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r1, 0x8}, 0xc) 2018/04/12 18:27:27 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r1, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) 2018/04/12 18:27:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}}, @in=@rand_addr, {@in, @in=@multicast1=0xe0000001}, {{@in, @in=@multicast1=0xe0000001}, {}, {}, 0x0, 0x0, 0x0, 0xf}}}, 0x128}, 0x1}, 0x0) 2018/04/12 18:27:27 executing program 0: r0 = socket$inet(0x2, 0x80000000003, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f000024d000)=0x7fe, 0x4) sendto$inet(r0, &(0x7f00002df000), 0x0, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10) sendto$inet(r0, &(0x7f00001e1000), 0x0, 0x0, &(0x7f0000777ff0)={0x2}, 0x10) close(r0) 2018/04/12 18:27:27 executing program 6: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x1fffffd) syz_open_procfs(0x0, &(0x7f0000000100)='ns/cgroup\x00') lchown(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f000053bff8)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000db0ff8)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, &(0x7f0000cde000)) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000880)=""/1679, 0x3bb) setns(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x8000}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f00000002c0)=0x98) 2018/04/12 18:27:27 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006f3ff0)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$KDGKBLED(r0, 0x40045109, &(0x7f0000000000)) 2018/04/12 18:27:27 executing program 5: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x1fffffd) syz_open_procfs(0x0, &(0x7f0000000100)='ns/cgroup\x00') lchown(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f000053bff8)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000db0ff8)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, &(0x7f0000cde000)) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000880)=""/1679, 0x3bb) setns(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x8000}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f00000002c0)=0x98) 2018/04/12 18:27:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}}, @in=@rand_addr, {@in, @in=@multicast1=0xe0000001}, {{@in, @in=@multicast1=0xe0000001}, {}, {}, 0x0, 0x0, 0x0, 0xf}}}, 0x128}, 0x1}, 0x0) 2018/04/12 18:27:27 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r1, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) 2018/04/12 18:27:27 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r1, 0x8}, 0xc) 2018/04/12 18:27:27 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006f3ff0)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$KDGKBLED(r0, 0x40045109, &(0x7f0000000000)) 2018/04/12 18:27:27 executing program 0: r0 = socket$inet(0x2, 0x80000000003, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f000024d000)=0x7fe, 0x4) sendto$inet(r0, &(0x7f00002df000), 0x0, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10) sendto$inet(r0, &(0x7f00001e1000), 0x0, 0x0, &(0x7f0000777ff0)={0x2}, 0x10) close(r0) 2018/04/12 18:27:27 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r1, 0x8}, 0xc) 2018/04/12 18:27:27 executing program 6: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r1, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) 2018/04/12 18:27:27 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000003ffc), &(0x7f0000000000)=0x4) 2018/04/12 18:27:27 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006f3ff0)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$KDGKBLED(r0, 0x40045109, &(0x7f0000000000)) 2018/04/12 18:27:27 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r1, 0x8}, 0xc) 2018/04/12 18:27:27 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.cpus\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x7fffffff) 2018/04/12 18:27:27 executing program 0: r0 = socket$inet(0x2, 0x80000000003, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f000024d000)=0x7fe, 0x4) sendto$inet(r0, &(0x7f00002df000), 0x0, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10) sendto$inet(r0, &(0x7f00001e1000), 0x0, 0x0, &(0x7f0000777ff0)={0x2}, 0x10) close(r0) 2018/04/12 18:27:27 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r1, 0x8}, 0xc) 2018/04/12 18:27:27 executing program 6: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r1, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) 2018/04/12 18:27:27 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000003ffc), &(0x7f0000000000)=0x4) 2018/04/12 18:27:27 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r1, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) 2018/04/12 18:27:27 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00009d8000)='/dev/sequencer2\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x2) 2018/04/12 18:27:27 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000003ffc), &(0x7f0000000000)=0x4) 2018/04/12 18:27:27 executing program 6: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r1, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) 2018/04/12 18:27:28 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r1, 0x8}, 0xc) 2018/04/12 18:27:28 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.cpus\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x7fffffff) 2018/04/12 18:27:28 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r1, 0x8}, 0xc) 2018/04/12 18:27:28 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00009d8000)='/dev/sequencer2\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x2) 2018/04/12 18:27:28 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000003ffc), &(0x7f0000000000)=0x4) 2018/04/12 18:27:28 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000000180)={0x14, 0x1, 0x8, 0x800000005}, 0x14}, 0x1}, 0x0) 2018/04/12 18:27:28 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d}, 0x10, &(0x7f0000002ff0)={&(0x7f0000004fb8)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f00005e4000)={&(0x7f0000b4bff0)={0x1d}, 0x10, &(0x7f0000728000)={&(0x7f00000aef80)={0x5, 0x20, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "e2ba079c66681a29"}}, 0x48}, 0x1}, 0x0) 2018/04/12 18:27:28 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/12 18:27:28 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00009d8000)='/dev/sequencer2\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x2) 2018/04/12 18:27:28 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.cpus\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x7fffffff) 2018/04/12 18:27:28 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(r0, r0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x0}, {}, {}]}) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0xfffffffffffffffa, 0x7fffffff, 0x4, 0x7, 0x0, 0xffffffffffffff28, 0x40004, 0x4, 0xfffffffffffffc01, 0x3, 0xff, 0x3, 0x9, 0x2, 0x1, 0x400, 0x7, 0x3, 0x20, 0x6, 0x8, 0x5d2, 0xfffffffffffffbff, 0x101, 0x8000, 0x80, 0x7b56, 0x200, 0x6dd, 0x4, 0x100000001, 0x7, 0x7, 0x8, 0xf3bc, 0x8, 0x0, 0x4ea68f26, 0x2, @perf_config_ext={0x1, 0x1}, 0x818, 0x3, 0xbb, 0x7, 0x0, 0x800, 0x1}, r3, 0xd, r1, 0x3) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000100)={r2, 0x1}) ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000)) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r4}) r5 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r5, 0x7) unshare(0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)={0x0, r4}) 2018/04/12 18:27:28 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fanotify_init(0x0, 0x0) r1 = dup(r0) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) ioctl$sock_bt(r1, 0x541b, &(0x7f0000000140)) 2018/04/12 18:27:28 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d}, 0x10, &(0x7f0000002ff0)={&(0x7f0000004fb8)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f00005e4000)={&(0x7f0000b4bff0)={0x1d}, 0x10, &(0x7f0000728000)={&(0x7f00000aef80)={0x5, 0x20, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "e2ba079c66681a29"}}, 0x48}, 0x1}, 0x0) 2018/04/12 18:27:28 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000000180)={0x14, 0x1, 0x8, 0x800000005}, 0x14}, 0x1}, 0x0) 2018/04/12 18:27:28 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001000)={0x0, @in6={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x98) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000d6cf78)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001000)={{{@in=@rand_addr=0x1000000, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, {{@in=@multicast2=0xe0000002}, 0x0, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, 0xe8) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000001000)=""/144, &(0x7f0000001ffc)=0x90) 2018/04/12 18:27:28 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.cpus\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x7fffffff) 2018/04/12 18:27:28 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d}, 0x10, &(0x7f0000002ff0)={&(0x7f0000004fb8)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f00005e4000)={&(0x7f0000b4bff0)={0x1d}, 0x10, &(0x7f0000728000)={&(0x7f00000aef80)={0x5, 0x20, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "e2ba079c66681a29"}}, 0x48}, 0x1}, 0x0) 2018/04/12 18:27:28 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040), 0x1) 2018/04/12 18:27:28 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/12 18:27:28 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00009d8000)='/dev/sequencer2\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x2) 2018/04/12 18:27:28 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000000180)={0x14, 0x1, 0x8, 0x800000005}, 0x14}, 0x1}, 0x0) 2018/04/12 18:27:28 executing program 3: mlockall(0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) remap_file_pages(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3, 0x2, 0x10) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000032e000)) chdir(&(0x7f0000f95000)='./file0\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ioctl$void(r0, 0xc0045878) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000040)) pwritev(r0, &(0x7f0000001580)=[{&(0x7f0000000140)="57f497c07989c619e48c28775f63e222da551e9b6789bb5d6fde46b2dc89543af1a8f144729ae36f", 0x28}], 0x1, 0x0) ftruncate(r0, 0x7fff) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r1, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0xffffffffffffffc0, 0x200, 0x0, 0x1000000000000002}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x10001}, 0x8) r3 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x4000000000012, r3) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000200)) 2018/04/12 18:27:28 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001000)={0x0, @in6={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x98) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000d6cf78)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001000)={{{@in=@rand_addr=0x1000000, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, {{@in=@multicast2=0xe0000002}, 0x0, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, 0xe8) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000001000)=""/144, &(0x7f0000001ffc)=0x90) 2018/04/12 18:27:28 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlockall(0x3) sendfile(r0, r0, &(0x7f0000000000)=0x200005, 0x200) 2018/04/12 18:27:28 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040), 0x1) 2018/04/12 18:27:28 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/12 18:27:28 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d}, 0x10, &(0x7f0000002ff0)={&(0x7f0000004fb8)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f00005e4000)={&(0x7f0000b4bff0)={0x1d}, 0x10, &(0x7f0000728000)={&(0x7f00000aef80)={0x5, 0x20, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "e2ba079c66681a29"}}, 0x48}, 0x1}, 0x0) 2018/04/12 18:27:28 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x36d) read(r0, &(0x7f0000000000)=""/126, 0x2000007e) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000300)) dup2(r0, r2) 2018/04/12 18:27:29 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040), 0x1) 2018/04/12 18:27:29 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001000)={0x0, @in6={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x98) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000d6cf78)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001000)={{{@in=@rand_addr=0x1000000, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, {{@in=@multicast2=0xe0000002}, 0x0, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, 0xe8) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000001000)=""/144, &(0x7f0000001ffc)=0x90) 2018/04/12 18:27:29 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$VT_RESIZE(r0, 0x800442d4, &(0x7f0000000000)) 2018/04/12 18:27:29 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000000180)={0x14, 0x1, 0x8, 0x800000005}, 0x14}, 0x1}, 0x0) 2018/04/12 18:27:29 executing program 3: mlockall(0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) remap_file_pages(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3, 0x2, 0x10) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000032e000)) chdir(&(0x7f0000f95000)='./file0\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ioctl$void(r0, 0xc0045878) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000040)) pwritev(r0, &(0x7f0000001580)=[{&(0x7f0000000140)="57f497c07989c619e48c28775f63e222da551e9b6789bb5d6fde46b2dc89543af1a8f144729ae36f", 0x28}], 0x1, 0x0) ftruncate(r0, 0x7fff) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r1, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0xffffffffffffffc0, 0x200, 0x0, 0x1000000000000002}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x10001}, 0x8) r3 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x4000000000012, r3) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000200)) 2018/04/12 18:27:29 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/12 18:27:29 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x36d) read(r0, &(0x7f0000000000)=""/126, 0x2000007e) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000300)) dup2(r0, r2) 2018/04/12 18:27:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlockall(0x3) sendfile(r0, r0, &(0x7f0000000000)=0x200005, 0x200) 2018/04/12 18:27:29 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040), 0x1) 2018/04/12 18:27:29 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$VT_RESIZE(r0, 0x800442d4, &(0x7f0000000000)) 2018/04/12 18:27:29 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001000)={0x0, @in6={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x98) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000d6cf78)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001000)={{{@in=@rand_addr=0x1000000, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, {{@in=@multicast2=0xe0000002}, 0x0, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, 0xe8) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000001000)=""/144, &(0x7f0000001ffc)=0x90) 2018/04/12 18:27:29 executing program 2: pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x36d) read(r0, &(0x7f0000000000)=""/126, 0x2000007e) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000300)) dup2(r0, r2) 2018/04/12 18:27:29 executing program 3: mlockall(0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) remap_file_pages(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3, 0x2, 0x10) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000032e000)) chdir(&(0x7f0000f95000)='./file0\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ioctl$void(r0, 0xc0045878) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000040)) pwritev(r0, &(0x7f0000001580)=[{&(0x7f0000000140)="57f497c07989c619e48c28775f63e222da551e9b6789bb5d6fde46b2dc89543af1a8f144729ae36f", 0x28}], 0x1, 0x0) ftruncate(r0, 0x7fff) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r1, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0xffffffffffffffc0, 0x200, 0x0, 0x1000000000000002}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x10001}, 0x8) r3 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x4000000000012, r3) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000200)) 2018/04/12 18:27:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xe, 0x4, 0x0, 0x8}, 0x2c) 2018/04/12 18:27:29 executing program 6: prctl$setname(0xf, &(0x7f0000ffbfe2)='/selinux/commit_pending_bools\x00') openat$dsp(0xffffffffffffff9c, &(0x7f000020effb)='/dev/dsp\x00', 0x0, 0x0) 2018/04/12 18:27:29 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$VT_RESIZE(r0, 0x800442d4, &(0x7f0000000000)) 2018/04/12 18:27:29 executing program 1: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2018/04/12 18:27:29 executing program 1: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2018/04/12 18:27:30 executing program 3: mlockall(0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) remap_file_pages(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3, 0x2, 0x10) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000032e000)) chdir(&(0x7f0000f95000)='./file0\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ioctl$void(r0, 0xc0045878) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000040)) pwritev(r0, &(0x7f0000001580)=[{&(0x7f0000000140)="57f497c07989c619e48c28775f63e222da551e9b6789bb5d6fde46b2dc89543af1a8f144729ae36f", 0x28}], 0x1, 0x0) ftruncate(r0, 0x7fff) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r1, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0xffffffffffffffc0, 0x200, 0x0, 0x1000000000000002}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x10001}, 0x8) r3 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x4000000000012, r3) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000200)) 2018/04/12 18:27:30 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xe, 0x4, 0x0, 0x8}, 0x2c) 2018/04/12 18:27:30 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$VT_RESIZE(r0, 0x800442d4, &(0x7f0000000000)) 2018/04/12 18:27:30 executing program 6: prctl$setname(0xf, &(0x7f0000ffbfe2)='/selinux/commit_pending_bools\x00') openat$dsp(0xffffffffffffff9c, &(0x7f000020effb)='/dev/dsp\x00', 0x0, 0x0) 2018/04/12 18:27:30 executing program 1: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2018/04/12 18:27:30 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlockall(0x3) sendfile(r0, r0, &(0x7f0000000000)=0x200005, 0x200) 2018/04/12 18:27:30 executing program 2: pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x36d) read(r0, &(0x7f0000000000)=""/126, 0x2000007e) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000300)) dup2(r0, r2) 2018/04/12 18:27:30 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x36d) read(r0, &(0x7f0000000000)=""/126, 0x2000007e) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000300)) dup2(r0, r2) 2018/04/12 18:27:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000180)={0x20, 0x2e, 0x6fd, 0x0, 0x0, {0x2003}, [@nested={0x2000004c, 0x0, [@typed={0x8, 0x9, @ipv4}]}]}, 0x20}, 0x1}, 0x0) 2018/04/12 18:27:30 executing program 1: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2018/04/12 18:27:30 executing program 6: prctl$setname(0xf, &(0x7f0000ffbfe2)='/selinux/commit_pending_bools\x00') openat$dsp(0xffffffffffffff9c, &(0x7f000020effb)='/dev/dsp\x00', 0x0, 0x0) 2018/04/12 18:27:30 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xe, 0x4, 0x0, 0x8}, 0x2c) 2018/04/12 18:27:30 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@broute={'broute\x00', 0x20, 0x1, 0x240, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x86dd, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x128, 0x160, 0x1b0, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, [], [], 0x0, 0x0, 0x30}}}, @mark_m={'mark_m\x00', 0x18}]}, [@common=@dnat={'dnat\x00', 0x10, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x2b8) 2018/04/12 18:27:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000180)={0x20, 0x2e, 0x6fd, 0x0, 0x0, {0x2003}, [@nested={0x2000004c, 0x0, [@typed={0x8, 0x9, @ipv4}]}]}, 0x20}, 0x1}, 0x0) 2018/04/12 18:27:31 executing program 6: prctl$setname(0xf, &(0x7f0000ffbfe2)='/selinux/commit_pending_bools\x00') openat$dsp(0xffffffffffffff9c, &(0x7f000020effb)='/dev/dsp\x00', 0x0, 0x0) 2018/04/12 18:27:31 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006f3ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)) ioctl$KDGKBLED(r0, 0xc0045103, &(0x7f0000000040)) 2018/04/12 18:27:31 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xe, 0x4, 0x0, 0x8}, 0x2c) 2018/04/12 18:27:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000180)={0x20, 0x2e, 0x6fd, 0x0, 0x0, {0x2003}, [@nested={0x2000004c, 0x0, [@typed={0x8, 0x9, @ipv4}]}]}, 0x20}, 0x1}, 0x0) 2018/04/12 18:27:31 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@broute={'broute\x00', 0x20, 0x1, 0x240, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x86dd, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x128, 0x160, 0x1b0, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, [], [], 0x0, 0x0, 0x30}}}, @mark_m={'mark_m\x00', 0x18}]}, [@common=@dnat={'dnat\x00', 0x10, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x2b8) 2018/04/12 18:27:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlockall(0x3) sendfile(r0, r0, &(0x7f0000000000)=0x200005, 0x200) 2018/04/12 18:27:31 executing program 2: pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x36d) read(r0, &(0x7f0000000000)=""/126, 0x2000007e) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000300)) dup2(r0, r2) 2018/04/12 18:27:31 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x36d) read(r0, &(0x7f0000000000)=""/126, 0x2000007e) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000300)) dup2(r0, r2) 2018/04/12 18:27:31 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x10, &(0x7f0000faf000), 0x0) 2018/04/12 18:27:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000180)={0x20, 0x2e, 0x6fd, 0x0, 0x0, {0x2003}, [@nested={0x2000004c, 0x0, [@typed={0x8, 0x9, @ipv4}]}]}, 0x20}, 0x1}, 0x0) 2018/04/12 18:27:31 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006f3ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)) ioctl$KDGKBLED(r0, 0xc0045103, &(0x7f0000000040)) 2018/04/12 18:27:31 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@broute={'broute\x00', 0x20, 0x1, 0x240, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x86dd, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x128, 0x160, 0x1b0, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, [], [], 0x0, 0x0, 0x30}}}, @mark_m={'mark_m\x00', 0x18}]}, [@common=@dnat={'dnat\x00', 0x10, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x2b8) 2018/04/12 18:27:31 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x0) 2018/04/12 18:27:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000040)=0x1) 2018/04/12 18:27:31 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x10, &(0x7f0000faf000), 0x0) 2018/04/12 18:27:31 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@broute={'broute\x00', 0x20, 0x1, 0x240, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x86dd, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x128, 0x160, 0x1b0, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, [], [], 0x0, 0x0, 0x30}}}, @mark_m={'mark_m\x00', 0x18}]}, [@common=@dnat={'dnat\x00', 0x10, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x2b8) 2018/04/12 18:27:32 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x0) 2018/04/12 18:27:32 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006f3ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)) ioctl$KDGKBLED(r0, 0xc0045103, &(0x7f0000000040)) 2018/04/12 18:27:32 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x10, &(0x7f0000faf000), 0x0) 2018/04/12 18:27:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000040)=0x1) 2018/04/12 18:27:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000cb3fda)="260000005e0009000000eaf83a000000000000000d000000ffffff000008db1ee9ff4435eade", 0x26) 2018/04/12 18:27:32 executing program 2: perf_event_open(&(0x7f000025c000)={0x2000000000000002, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000644ff0)=[{&(0x7f0000001300)="480000001400255c0c004b01fcfc8c560a880000f217e0060000000000e5efa1bc560300000000000000200028213ee2060000000000fcffff5bf1ff00c7e5ed5e00000000620000", 0x48}], 0x1) 2018/04/12 18:27:32 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000148bfa)={@link_local={0x1, 0x80, 0xc2}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, '\t\x00', 0x30, 0x40000000003a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@time_exceed={0xffffff83, 0x0, 0x0, 0x0, [], {0x0, 0x6, "a97188", 0x0, 0x0, 0x0, @loopback={0x0, 0x1}, @loopback={0x0, 0x1}}}}}}}}, 0x0) 2018/04/12 18:27:32 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x47}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x4, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4f}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 2018/04/12 18:27:32 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000148bfa)={@link_local={0x1, 0x80, 0xc2}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, '\t\x00', 0x30, 0x40000000003a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@time_exceed={0xffffff83, 0x0, 0x0, 0x0, [], {0x0, 0x6, "a97188", 0x0, 0x0, 0x0, @loopback={0x0, 0x1}, @loopback={0x0, 0x1}}}}}}}}, 0x0) 2018/04/12 18:27:32 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x10, &(0x7f0000faf000), 0x0) 2018/04/12 18:27:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000cb3fda)="260000005e0009000000eaf83a000000000000000d000000ffffff000008db1ee9ff4435eade", 0x26) 2018/04/12 18:27:32 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006f3ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)) ioctl$KDGKBLED(r0, 0xc0045103, &(0x7f0000000040)) 2018/04/12 18:27:32 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x0) 2018/04/12 18:27:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000040)=0x1) 2018/04/12 18:27:32 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x47}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x4, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4f}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 2018/04/12 18:27:32 executing program 2: perf_event_open(&(0x7f000025c000)={0x2000000000000002, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000644ff0)=[{&(0x7f0000001300)="480000001400255c0c004b01fcfc8c560a880000f217e0060000000000e5efa1bc560300000000000000200028213ee2060000000000fcffff5bf1ff00c7e5ed5e00000000620000", 0x48}], 0x1) 2018/04/12 18:27:32 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000148bfa)={@link_local={0x1, 0x80, 0xc2}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, '\t\x00', 0x30, 0x40000000003a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@time_exceed={0xffffff83, 0x0, 0x0, 0x0, [], {0x0, 0x6, "a97188", 0x0, 0x0, 0x0, @loopback={0x0, 0x1}, @loopback={0x0, 0x1}}}}}}}}, 0x0) 2018/04/12 18:27:32 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f000092efe4)={0xf, 0x4, 0x4, 0xa}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000000), &(0x7f0000000080)=""/78}, 0x18) 2018/04/12 18:27:32 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x0) 2018/04/12 18:27:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000200)="0f07ea040000000f019f0f01c9c4c1785834988fe9b8912d00180000b8010000000f01c166baa000b80ce90d32ef0f23ce0f01df", 0x34}], 0x1, 0x0, &(0x7f0000000100), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@random={'trusted.', '/dev/kvm\x00'}, &(0x7f0000000140)='\x00', 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/12 18:27:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000cb3fda)="260000005e0009000000eaf83a000000000000000d000000ffffff000008db1ee9ff4435eade", 0x26) 2018/04/12 18:27:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000040)=0x1) 2018/04/12 18:27:32 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x47}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x4, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4f}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 2018/04/12 18:27:32 executing program 2: perf_event_open(&(0x7f000025c000)={0x2000000000000002, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000644ff0)=[{&(0x7f0000001300)="480000001400255c0c004b01fcfc8c560a880000f217e0060000000000e5efa1bc560300000000000000200028213ee2060000000000fcffff5bf1ff00c7e5ed5e00000000620000", 0x48}], 0x1) 2018/04/12 18:27:32 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f000092efe4)={0xf, 0x4, 0x4, 0xa}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000000), &(0x7f0000000080)=""/78}, 0x18) 2018/04/12 18:27:32 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000148bfa)={@link_local={0x1, 0x80, 0xc2}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, '\t\x00', 0x30, 0x40000000003a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@time_exceed={0xffffff83, 0x0, 0x0, 0x0, [], {0x0, 0x6, "a97188", 0x0, 0x0, 0x0, @loopback={0x0, 0x1}, @loopback={0x0, 0x1}}}}}}}}, 0x0) 2018/04/12 18:27:32 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0xa) close(0xffffffffffffffff) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000300), 0x1b5, &(0x7f0000000600)}}], 0x2, 0x0) 2018/04/12 18:27:32 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x47}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x4, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4f}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 2018/04/12 18:27:32 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec), 0x13) 2018/04/12 18:27:32 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 2018/04/12 18:27:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000cb3fda)="260000005e0009000000eaf83a000000000000000d000000ffffff000008db1ee9ff4435eade", 0x26) 2018/04/12 18:27:32 executing program 2: perf_event_open(&(0x7f000025c000)={0x2000000000000002, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000644ff0)=[{&(0x7f0000001300)="480000001400255c0c004b01fcfc8c560a880000f217e0060000000000e5efa1bc560300000000000000200028213ee2060000000000fcffff5bf1ff00c7e5ed5e00000000620000", 0x48}], 0x1) 2018/04/12 18:27:32 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f000092efe4)={0xf, 0x4, 0x4, 0xa}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000000), &(0x7f0000000080)=""/78}, 0x18) 2018/04/12 18:27:33 executing program 7: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x80) close(r1) 2018/04/12 18:27:33 executing program 0: futex(&(0x7f0000000ffc), 0xb, 0x0, &(0x7f0000000000), &(0x7f00000acffd), 0x0) 2018/04/12 18:27:33 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec), 0x13) 2018/04/12 18:27:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000200)="0f07ea040000000f019f0f01c9c4c1785834988fe9b8912d00180000b8010000000f01c166baa000b80ce90d32ef0f23ce0f01df", 0x34}], 0x1, 0x0, &(0x7f0000000100), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@random={'trusted.', '/dev/kvm\x00'}, &(0x7f0000000140)='\x00', 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/12 18:27:33 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0xa) close(0xffffffffffffffff) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000300), 0x1b5, &(0x7f0000000600)}}], 0x2, 0x0) 2018/04/12 18:27:33 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xc0ffffff, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000000)) 2018/04/12 18:27:33 executing program 0: futex(&(0x7f0000000ffc), 0xb, 0x0, &(0x7f0000000000), &(0x7f00000acffd), 0x0) 2018/04/12 18:27:33 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f000092efe4)={0xf, 0x4, 0x4, 0xa}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000000), &(0x7f0000000080)=""/78}, 0x18) 2018/04/12 18:27:33 executing program 7: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x80) close(r1) 2018/04/12 18:27:33 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000000c0)=""/24, 0x18) write$evdev(r0, &(0x7f0000b5df88)=[{}, {{0x77359400}}], 0x30) 2018/04/12 18:27:33 executing program 0: futex(&(0x7f0000000ffc), 0xb, 0x0, &(0x7f0000000000), &(0x7f00000acffd), 0x0) 2018/04/12 18:27:33 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000440)='/dev/adsp#\x00', 0x7, 0x2080000) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000080)=""/222) connect$can_bcm(r0, &(0x7f0000000180)={0x1d}, 0x10) r1 = fcntl$getown(r0, 0x9) wait4(r1, &(0x7f00000003c0), 0x80000001, 0x0) mmap(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x10000003, 0x100000000030, r0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ip6gretap0\x00', 0x4000}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000d9ff8), 0x400) ioctl(r5, 0xc0184900, &(0x7f0000000380)="60bc836ead2c9193cf") openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x80000, 0x0) rmdir(&(0x7f0000000400)='./file1\x00') write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00003b3000)='./file0\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0185879, &(0x7f0000000080)={0x2a0, &(0x7f0000001540)}) sendmsg$inet_sctp(r6, &(0x7f00000014c0)={&(0x7f0000000180)=@in6={0xa, 0x4e22, 0x6, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x6}, 0x1c, &(0x7f0000001400)=[{&(0x7f00000001c0)="1605dd", 0x3}], 0x1, &(0x7f0000001480), 0x0, 0x20000800}, 0x40000) semget$private(0x0, 0xfffffffffffffffc, 0x3d) syz_fuse_mount(&(0x7f0000000140)='./file0\x00', 0xc001, 0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r3) futex(&(0x7f00000001c0)=0x10000004, 0x80000000000b, 0x4, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f0000048000), 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000300)=""/2, &(0x7f0000000340)=0x2) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000240)={{0x2, 0x4e24, @multicast2=0xe0000002}, {0x1, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xf}}, 0x18, {0x2, 0x4e22, @multicast1=0xe0000001}, 'syz_tun\x00'}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 2018/04/12 18:27:33 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000003c0), 0x4) dup2(r1, r0) 2018/04/12 18:27:33 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0xa) close(0xffffffffffffffff) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000300), 0x1b5, &(0x7f0000000600)}}], 0x2, 0x0) 2018/04/12 18:27:33 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec), 0x13) 2018/04/12 18:27:33 executing program 7: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x80) close(r1) 2018/04/12 18:27:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000200)="0f07ea040000000f019f0f01c9c4c1785834988fe9b8912d00180000b8010000000f01c166baa000b80ce90d32ef0f23ce0f01df", 0x34}], 0x1, 0x0, &(0x7f0000000100), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@random={'trusted.', '/dev/kvm\x00'}, &(0x7f0000000140)='\x00', 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/12 18:27:34 executing program 0: futex(&(0x7f0000000ffc), 0xb, 0x0, &(0x7f0000000000), &(0x7f00000acffd), 0x0) 2018/04/12 18:27:34 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0xa) close(0xffffffffffffffff) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000300), 0x1b5, &(0x7f0000000600)}}], 0x2, 0x0) 2018/04/12 18:27:34 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec), 0x13) 2018/04/12 18:27:34 executing program 2: r0 = getpid() r1 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x7, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x100, 0x5, 0x1f, 0x0, 0x0, 0x40, 0x3, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a9, 0x0, 0x90000, 0x0, 0x8, 0x0, 0xe2, 0x5d6dc871, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0xfffffffffffffffc}, 0x10000, 0x9, 0x1ff, 0x0, 0x8}, 0x0, 0x6, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0}) recvmsg(r2, &(0x7f0000005180)={&(0x7f0000000180)=@can, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000005100)=""/93, 0x5d, 0x5}, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xfffffffffffffffd) getpid() ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) 2018/04/12 18:27:34 executing program 7: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x80) close(r1) 2018/04/12 18:27:34 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000440)='/dev/adsp#\x00', 0x7, 0x2080000) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000080)=""/222) connect$can_bcm(r0, &(0x7f0000000180)={0x1d}, 0x10) r1 = fcntl$getown(r0, 0x9) wait4(r1, &(0x7f00000003c0), 0x80000001, 0x0) mmap(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x10000003, 0x100000000030, r0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ip6gretap0\x00', 0x4000}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000d9ff8), 0x400) ioctl(r5, 0xc0184900, &(0x7f0000000380)="60bc836ead2c9193cf") openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x80000, 0x0) rmdir(&(0x7f0000000400)='./file1\x00') write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00003b3000)='./file0\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0185879, &(0x7f0000000080)={0x2a0, &(0x7f0000001540)}) sendmsg$inet_sctp(r6, &(0x7f00000014c0)={&(0x7f0000000180)=@in6={0xa, 0x4e22, 0x6, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x6}, 0x1c, &(0x7f0000001400)=[{&(0x7f00000001c0)="1605dd", 0x3}], 0x1, &(0x7f0000001480), 0x0, 0x20000800}, 0x40000) semget$private(0x0, 0xfffffffffffffffc, 0x3d) syz_fuse_mount(&(0x7f0000000140)='./file0\x00', 0xc001, 0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r3) futex(&(0x7f00000001c0)=0x10000004, 0x80000000000b, 0x4, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f0000048000), 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000300)=""/2, &(0x7f0000000340)=0x2) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000240)={{0x2, 0x4e24, @multicast2=0xe0000002}, {0x1, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xf}}, 0x18, {0x2, 0x4e22, @multicast1=0xe0000001}, 'syz_tun\x00'}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 2018/04/12 18:27:34 executing program 3: capset(&(0x7f00002d0ff8)={0x20071026}, &(0x7f0000cc0000)) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000340)={{}, 'port1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000580)='/dev/sequencer2\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x40000000401870cc, &(0x7f0000006100)) 2018/04/12 18:27:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000200)="0f07ea040000000f019f0f01c9c4c1785834988fe9b8912d00180000b8010000000f01c166baa000b80ce90d32ef0f23ce0f01df", 0x34}], 0x1, 0x0, &(0x7f0000000100), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@random={'trusted.', '/dev/kvm\x00'}, &(0x7f0000000140)='\x00', 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/12 18:27:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00') r1 = eventfd2(0x0, 0x0) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5d) 2018/04/12 18:27:34 executing program 7: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="0004000000100000cc000000490b0000ec03000001000000000000000000000000200000002000000004000000000000e95dbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@journal_path={'journal_path', 0x3d, './file0'}, 0x2c}]}) 2018/04/12 18:27:34 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000d97000)={0x0, 0x9}) 2018/04/12 18:27:34 executing program 6: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x190) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x110) 2018/04/12 18:27:34 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000440)='/dev/adsp#\x00', 0x7, 0x2080000) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000080)=""/222) connect$can_bcm(r0, &(0x7f0000000180)={0x1d}, 0x10) r1 = fcntl$getown(r0, 0x9) wait4(r1, &(0x7f00000003c0), 0x80000001, 0x0) mmap(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x10000003, 0x100000000030, r0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ip6gretap0\x00', 0x4000}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000d9ff8), 0x400) ioctl(r5, 0xc0184900, &(0x7f0000000380)="60bc836ead2c9193cf") openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x80000, 0x0) rmdir(&(0x7f0000000400)='./file1\x00') write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00003b3000)='./file0\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0185879, &(0x7f0000000080)={0x2a0, &(0x7f0000001540)}) sendmsg$inet_sctp(r6, &(0x7f00000014c0)={&(0x7f0000000180)=@in6={0xa, 0x4e22, 0x6, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x6}, 0x1c, &(0x7f0000001400)=[{&(0x7f00000001c0)="1605dd", 0x3}], 0x1, &(0x7f0000001480), 0x0, 0x20000800}, 0x40000) semget$private(0x0, 0xfffffffffffffffc, 0x3d) syz_fuse_mount(&(0x7f0000000140)='./file0\x00', 0xc001, 0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r3) futex(&(0x7f00000001c0)=0x10000004, 0x80000000000b, 0x4, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f0000048000), 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000300)=""/2, &(0x7f0000000340)=0x2) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000240)={{0x2, 0x4e24, @multicast2=0xe0000002}, {0x1, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xf}}, 0x18, {0x2, 0x4e22, @multicast1=0xe0000001}, 'syz_tun\x00'}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 2018/04/12 18:27:34 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x0, @empty, 0x4e21, 0x0, 'lc\x00'}, 0x2c) 2018/04/12 18:27:34 executing program 3: r0 = gettid() prctl$intptr(0x1d, 0xfffffffffffff2fd) io_setup(0x800, &(0x7f0000000000)=0x0) io_getevents(r1, 0x2, 0x800000000000224, &(0x7f0000000080)=[{}, {}], &(0x7f0000000100)={0x0, 0x989680}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000180)}]) timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000d64000)) tkill(r0, 0x1000000000016) [ 279.837073] EXT4-fs (loop7): Mount option "journal_path=./file0" incompatible with ext2 [ 279.888487] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20001 lc [ 279.939038] EXT4-fs (loop7): Mount option "journal_path=./file0" incompatible with ext2 2018/04/12 18:27:35 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000d97000)={0x0, 0x9}) 2018/04/12 18:27:35 executing program 6: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x190) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x110) 2018/04/12 18:27:35 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x0, @empty, 0x4e21, 0x0, 'lc\x00'}, 0x2c) 2018/04/12 18:27:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00') r1 = eventfd2(0x0, 0x0) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5d) 2018/04/12 18:27:35 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000440)='/dev/adsp#\x00', 0x7, 0x2080000) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000080)=""/222) connect$can_bcm(r0, &(0x7f0000000180)={0x1d}, 0x10) r1 = fcntl$getown(r0, 0x9) wait4(r1, &(0x7f00000003c0), 0x80000001, 0x0) mmap(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x10000003, 0x100000000030, r0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ip6gretap0\x00', 0x4000}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000d9ff8), 0x400) ioctl(r5, 0xc0184900, &(0x7f0000000380)="60bc836ead2c9193cf") openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x80000, 0x0) rmdir(&(0x7f0000000400)='./file1\x00') write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00003b3000)='./file0\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0185879, &(0x7f0000000080)={0x2a0, &(0x7f0000001540)}) sendmsg$inet_sctp(r6, &(0x7f00000014c0)={&(0x7f0000000180)=@in6={0xa, 0x4e22, 0x6, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x6}, 0x1c, &(0x7f0000001400)=[{&(0x7f00000001c0)="1605dd", 0x3}], 0x1, &(0x7f0000001480), 0x0, 0x20000800}, 0x40000) semget$private(0x0, 0xfffffffffffffffc, 0x3d) syz_fuse_mount(&(0x7f0000000140)='./file0\x00', 0xc001, 0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r3) futex(&(0x7f00000001c0)=0x10000004, 0x80000000000b, 0x4, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f0000048000), 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000300)=""/2, &(0x7f0000000340)=0x2) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000240)={{0x2, 0x4e24, @multicast2=0xe0000002}, {0x1, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xf}}, 0x18, {0x2, 0x4e22, @multicast1=0xe0000001}, 'syz_tun\x00'}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 2018/04/12 18:27:35 executing program 7: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="0004000000100000cc000000490b0000ec03000001000000000000000000000000200000002000000004000000000000e95dbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@journal_path={'journal_path', 0x3d, './file0'}, 0x2c}]}) 2018/04/12 18:27:35 executing program 3: r0 = gettid() prctl$intptr(0x1d, 0xfffffffffffff2fd) io_setup(0x800, &(0x7f0000000000)=0x0) io_getevents(r1, 0x2, 0x800000000000224, &(0x7f0000000080)=[{}, {}], &(0x7f0000000100)={0x0, 0x989680}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000180)}]) timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000d64000)) tkill(r0, 0x1000000000016) 2018/04/12 18:27:35 executing program 2: r0 = getpid() r1 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x7, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x100, 0x5, 0x1f, 0x0, 0x0, 0x40, 0x3, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a9, 0x0, 0x90000, 0x0, 0x8, 0x0, 0xe2, 0x5d6dc871, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0xfffffffffffffffc}, 0x10000, 0x9, 0x1ff, 0x0, 0x8}, 0x0, 0x6, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0}) recvmsg(r2, &(0x7f0000005180)={&(0x7f0000000180)=@can, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000005100)=""/93, 0x5d, 0x5}, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xfffffffffffffffd) getpid() ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) [ 280.767733] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20001 lc 2018/04/12 18:27:35 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000d97000)={0x0, 0x9}) 2018/04/12 18:27:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00') r1 = eventfd2(0x0, 0x0) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5d) 2018/04/12 18:27:35 executing program 5: r0 = getpid() r1 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x7, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x100, 0x5, 0x1f, 0x0, 0x0, 0x40, 0x3, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a9, 0x0, 0x90000, 0x0, 0x8, 0x0, 0xe2, 0x5d6dc871, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0xfffffffffffffffc}, 0x10000, 0x9, 0x1ff, 0x0, 0x8}, 0x0, 0x6, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0}) recvmsg(r2, &(0x7f0000005180)={&(0x7f0000000180)=@can, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000005100)=""/93, 0x5d, 0x5}, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xfffffffffffffffd) getpid() ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) [ 280.811066] EXT4-fs (loop7): Mount option "journal_path=./file0" incompatible with ext2 2018/04/12 18:27:35 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x0, @empty, 0x4e21, 0x0, 'lc\x00'}, 0x2c) 2018/04/12 18:27:35 executing program 6: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x190) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x110) 2018/04/12 18:27:35 executing program 7: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="0004000000100000cc000000490b0000ec03000001000000000000000000000000200000002000000004000000000000e95dbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@journal_path={'journal_path', 0x3d, './file0'}, 0x2c}]}) 2018/04/12 18:27:35 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000d97000)={0x0, 0x9}) 2018/04/12 18:27:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00') r1 = eventfd2(0x0, 0x0) sendfile(r1, r0, &(0x7f0000000080), 0x10ed5d) [ 280.939302] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20001 lc [ 280.976221] EXT4-fs (loop7): Mount option "journal_path=./file0" incompatible with ext2 2018/04/12 18:27:36 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x0, @empty, 0x4e21, 0x0, 'lc\x00'}, 0x2c) 2018/04/12 18:27:36 executing program 6: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x190) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x110) 2018/04/12 18:27:36 executing program 7: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="0004000000100000cc000000490b0000ec03000001000000000000000000000000200000002000000004000000000000e95dbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@journal_path={'journal_path', 0x3d, './file0'}, 0x2c}]}) 2018/04/12 18:27:36 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000067c000)="220000002100070700be0000090007010a00001e0000000000ff040405000c000000", 0x22) 2018/04/12 18:27:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') getdents(r0, &(0x7f0000000000)=""/25, 0x19) 2018/04/12 18:27:36 executing program 3: r0 = gettid() prctl$intptr(0x1d, 0xfffffffffffff2fd) io_setup(0x800, &(0x7f0000000000)=0x0) io_getevents(r1, 0x2, 0x800000000000224, &(0x7f0000000080)=[{}, {}], &(0x7f0000000100)={0x0, 0x989680}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000180)}]) timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000d64000)) tkill(r0, 0x1000000000016) 2018/04/12 18:27:36 executing program 5: r0 = getpid() r1 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x7, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x100, 0x5, 0x1f, 0x0, 0x0, 0x40, 0x3, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a9, 0x0, 0x90000, 0x0, 0x8, 0x0, 0xe2, 0x5d6dc871, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0xfffffffffffffffc}, 0x10000, 0x9, 0x1ff, 0x0, 0x8}, 0x0, 0x6, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0}) recvmsg(r2, &(0x7f0000005180)={&(0x7f0000000180)=@can, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000005100)=""/93, 0x5d, 0x5}, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xfffffffffffffffd) getpid() ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) 2018/04/12 18:27:36 executing program 2: r0 = getpid() r1 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x7, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x100, 0x5, 0x1f, 0x0, 0x0, 0x40, 0x3, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a9, 0x0, 0x90000, 0x0, 0x8, 0x0, 0xe2, 0x5d6dc871, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0xfffffffffffffffc}, 0x10000, 0x9, 0x1ff, 0x0, 0x8}, 0x0, 0x6, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0}) recvmsg(r2, &(0x7f0000005180)={&(0x7f0000000180)=@can, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000005100)=""/93, 0x5d, 0x5}, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xfffffffffffffffd) getpid() ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) 2018/04/12 18:27:36 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000067c000)="220000002100070700be0000090007010a00001e0000000000ff040405000c000000", 0x22) 2018/04/12 18:27:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') getdents(r0, &(0x7f0000000000)=""/25, 0x19) [ 281.867609] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20001 lc [ 281.877463] EXT4-fs (loop7): Mount option "journal_path=./file0" incompatible with ext2 2018/04/12 18:27:36 executing program 1: r0 = add_key(&(0x7f0000002000)='big_key\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, &(0x7f0000003000)="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", 0x4d1, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) keyctl$read(0xb, r0, &(0x7f00000046a9)=""/4096, 0xffffffffffffff5d) 2018/04/12 18:27:36 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000040)="440f20c0350e000000440f22c0260f013ab805000000b9078000000f01d9b9321001c0b802000000ba000000000f30c744240000f0d9e8c744240204000000c7442406000000000f011424c4227d0ff70f353e660f38814d0ac4e27d8c07668ec5", 0x61}], 0x1, 0x4d, &(0x7f0000000000), 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @rand_addr}, 0xc) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/12 18:27:36 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000736000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000000000002"]) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)) 2018/04/12 18:27:36 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000067c000)="220000002100070700be0000090007010a00001e0000000000ff040405000c000000", 0x22) 2018/04/12 18:27:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') getdents(r0, &(0x7f0000000000)=""/25, 0x19) 2018/04/12 18:27:36 executing program 1: r0 = add_key(&(0x7f0000002000)='big_key\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, &(0x7f0000003000)="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", 0x4d1, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) keyctl$read(0xb, r0, &(0x7f00000046a9)=""/4096, 0xffffffffffffff5d) 2018/04/12 18:27:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') getdents(r0, &(0x7f0000000000)=""/25, 0x19) 2018/04/12 18:27:36 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000067c000)="220000002100070700be0000090007010a00001e0000000000ff040405000c000000", 0x22) 2018/04/12 18:27:36 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000736000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000000000002"]) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)) 2018/04/12 18:27:36 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000240)=""/250}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xc, 0x20000000004, 0x4, 0xb, 0x0, r0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000040), &(0x7f0000000180)=""/181}, 0x18) 2018/04/12 18:27:36 executing program 1: r0 = add_key(&(0x7f0000002000)='big_key\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, &(0x7f0000003000)="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", 0x4d1, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) keyctl$read(0xb, r0, &(0x7f00000046a9)=""/4096, 0xffffffffffffff5d) 2018/04/12 18:27:37 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000040)="440f20c0350e000000440f22c0260f013ab805000000b9078000000f01d9b9321001c0b802000000ba000000000f30c744240000f0d9e8c744240204000000c7442406000000000f011424c4227d0ff70f353e660f38814d0ac4e27d8c07668ec5", 0x61}], 0x1, 0x4d, &(0x7f0000000000), 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @rand_addr}, 0xc) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/12 18:27:37 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000736000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000000000002"]) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)) 2018/04/12 18:27:37 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000240)=""/250}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xc, 0x20000000004, 0x4, 0xb, 0x0, r0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000040), &(0x7f0000000180)=""/181}, 0x18) 2018/04/12 18:27:37 executing program 1: r0 = add_key(&(0x7f0000002000)='big_key\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, &(0x7f0000003000)="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", 0x4d1, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) keyctl$read(0xb, r0, &(0x7f00000046a9)=""/4096, 0xffffffffffffff5d) 2018/04/12 18:27:37 executing program 3: r0 = gettid() prctl$intptr(0x1d, 0xfffffffffffff2fd) io_setup(0x800, &(0x7f0000000000)=0x0) io_getevents(r1, 0x2, 0x800000000000224, &(0x7f0000000080)=[{}, {}], &(0x7f0000000100)={0x0, 0x989680}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000180)}]) timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000d64000)) tkill(r0, 0x1000000000016) 2018/04/12 18:27:37 executing program 5: r0 = getpid() r1 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x7, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x100, 0x5, 0x1f, 0x0, 0x0, 0x40, 0x3, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a9, 0x0, 0x90000, 0x0, 0x8, 0x0, 0xe2, 0x5d6dc871, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0xfffffffffffffffc}, 0x10000, 0x9, 0x1ff, 0x0, 0x8}, 0x0, 0x6, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0}) recvmsg(r2, &(0x7f0000005180)={&(0x7f0000000180)=@can, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000005100)=""/93, 0x5d, 0x5}, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xfffffffffffffffd) getpid() ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) 2018/04/12 18:27:37 executing program 2: r0 = getpid() r1 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x7, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x100, 0x5, 0x1f, 0x0, 0x0, 0x40, 0x3, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a9, 0x0, 0x90000, 0x0, 0x8, 0x0, 0xe2, 0x5d6dc871, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0xfffffffffffffffc}, 0x10000, 0x9, 0x1ff, 0x0, 0x8}, 0x0, 0x6, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0}) recvmsg(r2, &(0x7f0000005180)={&(0x7f0000000180)=@can, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000005100)=""/93, 0x5d, 0x5}, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xfffffffffffffffd) getpid() ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) 2018/04/12 18:27:37 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d}, 0x10, &(0x7f0000002ff0)={&(0x7f0000004fb8)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b100"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f00005e4000)={&(0x7f00002ccff0)={0x1d}, 0x10, &(0x7f0000728000)={&(0x7f00000aef80)={0x5, 0x900, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "260503dd3e3c0a6afe3f7b377378f2e013e66ff1bf538a0f1abc5b8beb605be3d9448c99787c873249ed9c34e040a29606427925d8dd9065c240a288783179ce"}}, 0x80}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x6, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d300692ddfae1e24"}}, 0x48}, 0x1}, 0x0) 2018/04/12 18:27:37 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000240)=""/250}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xc, 0x20000000004, 0x4, 0xb, 0x0, r0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000040), &(0x7f0000000180)=""/181}, 0x18) 2018/04/12 18:27:37 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000736000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000000000002"]) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)) 2018/04/12 18:27:37 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="d179f2508fb13583605d0008a230e7a657f9cc6e", 0x14) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) readv(r1, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/57, 0x39}], 0x1) 2018/04/12 18:27:37 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d}, 0x10, &(0x7f0000002ff0)={&(0x7f0000004fb8)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b100"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f00005e4000)={&(0x7f00002ccff0)={0x1d}, 0x10, &(0x7f0000728000)={&(0x7f00000aef80)={0x5, 0x900, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "260503dd3e3c0a6afe3f7b377378f2e013e66ff1bf538a0f1abc5b8beb605be3d9448c99787c873249ed9c34e040a29606427925d8dd9065c240a288783179ce"}}, 0x80}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x6, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d300692ddfae1e24"}}, 0x48}, 0x1}, 0x0) 2018/04/12 18:27:37 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000240)=""/250}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xc, 0x20000000004, 0x4, 0xb, 0x0, r0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000040), &(0x7f0000000180)=""/181}, 0x18) 2018/04/12 18:27:37 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000040)="440f20c0350e000000440f22c0260f013ab805000000b9078000000f01d9b9321001c0b802000000ba000000000f30c744240000f0d9e8c744240204000000c7442406000000000f011424c4227d0ff70f353e660f38814d0ac4e27d8c07668ec5", 0x61}], 0x1, 0x4d, &(0x7f0000000000), 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @rand_addr}, 0xc) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/12 18:27:37 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d}, 0x10, &(0x7f0000002ff0)={&(0x7f0000004fb8)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b100"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f00005e4000)={&(0x7f00002ccff0)={0x1d}, 0x10, &(0x7f0000728000)={&(0x7f00000aef80)={0x5, 0x900, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "260503dd3e3c0a6afe3f7b377378f2e013e66ff1bf538a0f1abc5b8beb605be3d9448c99787c873249ed9c34e040a29606427925d8dd9065c240a288783179ce"}}, 0x80}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x6, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d300692ddfae1e24"}}, 0x48}, 0x1}, 0x0) 2018/04/12 18:27:37 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000001000)) r1 = syz_open_dev$sg(&(0x7f0000004ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r1, 0x100000001, &(0x7f0000001000)) 2018/04/12 18:27:37 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="d179f2508fb13583605d0008a230e7a657f9cc6e", 0x14) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) readv(r1, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/57, 0x39}], 0x1) 2018/04/12 18:27:37 executing program 4: clone(0x10210000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) 2018/04/12 18:27:37 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="d179f2508fb13583605d0008a230e7a657f9cc6e", 0x14) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) readv(r1, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/57, 0x39}], 0x1) 2018/04/12 18:27:37 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d}, 0x10, &(0x7f0000002ff0)={&(0x7f0000004fb8)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b100"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f00005e4000)={&(0x7f00002ccff0)={0x1d}, 0x10, &(0x7f0000728000)={&(0x7f00000aef80)={0x5, 0x900, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "260503dd3e3c0a6afe3f7b377378f2e013e66ff1bf538a0f1abc5b8beb605be3d9448c99787c873249ed9c34e040a29606427925d8dd9065c240a288783179ce"}}, 0x80}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x6, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d300692ddfae1e24"}}, 0x48}, 0x1}, 0x0) 2018/04/12 18:27:38 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="d179f2508fb13583605d0008a230e7a657f9cc6e", 0x14) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) readv(r1, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/57, 0x39}], 0x1) 2018/04/12 18:27:38 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000031cff7)='/dev/rtc\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$PIO_UNIMAPCLR(r0, 0x40247007, &(0x7f0000000040)) 2018/04/12 18:27:38 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000031cff7)='/dev/rtc\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$PIO_UNIMAPCLR(r0, 0x40247007, &(0x7f0000000040)) 2018/04/12 18:27:38 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000001000)) r1 = syz_open_dev$sg(&(0x7f0000004ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r1, 0x100000001, &(0x7f0000001000)) 2018/04/12 18:27:38 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000040)="440f20c0350e000000440f22c0260f013ab805000000b9078000000f01d9b9321001c0b802000000ba000000000f30c744240000f0d9e8c744240204000000c7442406000000000f011424c4227d0ff70f353e660f38814d0ac4e27d8c07668ec5", 0x61}], 0x1, 0x4d, &(0x7f0000000000), 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @rand_addr}, 0xc) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/12 18:27:38 executing program 4: clone(0x10210000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) 2018/04/12 18:27:38 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@ipv4={[], [0xff, 0xff], @rand_addr}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback=0x7f000001, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4, 0x0, 0x401}}, 0xe8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/12 18:27:38 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x80287010, &(0x7f00000000c0)) 2018/04/12 18:27:38 executing program 5: r0 = memfd_create(&(0x7f0000834000)='I', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) 2018/04/12 18:27:38 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000011c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000180)=""/4096) 2018/04/12 18:27:38 executing program 5: r0 = memfd_create(&(0x7f0000834000)='I', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) 2018/04/12 18:27:38 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000031cff7)='/dev/rtc\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$PIO_UNIMAPCLR(r0, 0x40247007, &(0x7f0000000040)) 2018/04/12 18:27:38 executing program 4: clone(0x10210000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) 2018/04/12 18:27:38 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000001000)) r1 = syz_open_dev$sg(&(0x7f0000004ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r1, 0x100000001, &(0x7f0000001000)) 2018/04/12 18:27:38 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x80287010, &(0x7f00000000c0)) 2018/04/12 18:27:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x8, 0x0, &(0x7f00001e4ff8)=[@acquire={0x40046305}], 0x118, 0x0, &(0x7f0000000100)}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000000)=[@dead_binder_done={0x40086310}, @decrefs={0x40046307}, @acquire_done={0x40106309}, @request_death={0x400c630e, 0x4}, @clear_death={0x400c630f, 0x0, 0x3}], 0x0, 0x0, &(0x7f000023c000)}) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) 2018/04/12 18:27:38 executing program 5: r0 = memfd_create(&(0x7f0000834000)='I', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) 2018/04/12 18:27:38 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@ipv4={[], [0xff, 0xff], @rand_addr}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback=0x7f000001, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4, 0x0, 0x401}}, 0xe8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/12 18:27:38 executing program 6: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f00000011c0), 0x0, &(0x7f0000000240)={[{@check_strict='check=strict', 0x2c}]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) execve(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000340), &(0x7f00000003c0)) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) 2018/04/12 18:27:38 executing program 4: clone(0x10210000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) 2018/04/12 18:27:38 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000001000)) r1 = syz_open_dev$sg(&(0x7f0000004ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r1, 0x100000001, &(0x7f0000001000)) 2018/04/12 18:27:38 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x80287010, &(0x7f00000000c0)) 2018/04/12 18:27:38 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@ipv4={[], [0xff, 0xff], @rand_addr}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback=0x7f000001, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4, 0x0, 0x401}}, 0xe8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/12 18:27:38 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000031cff7)='/dev/rtc\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$PIO_UNIMAPCLR(r0, 0x40247007, &(0x7f0000000040)) 2018/04/12 18:27:38 executing program 5: r0 = memfd_create(&(0x7f0000834000)='I', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) [ 284.052007] FAT-fs (loop6): bogus number of reserved sectors [ 284.057966] FAT-fs (loop6): Can't find a valid FAT filesystem 2018/04/12 18:27:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x21, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1}, 0x0) 2018/04/12 18:27:38 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f000087bff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00004a9fb0)={0x3, 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0x1, 0x0, {0x100000000005}}) 2018/04/12 18:27:38 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@mpls_getroute={0x20, 0x1a, 0x1, 0x0, 0x0, {0x1c}, [@RTA_DST={0x4, 0x1}]}, 0x20}, 0x1}, 0x0) [ 284.236889] netlink: 'syz-executor7': attribute type 1 has an invalid length. [ 284.256520] ALSA: seq fatal error: cannot create timer (-16) [ 284.274654] ALSA: seq fatal error: cannot create timer (-16) [ 284.796642] binder: 19089:19138 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 284.804112] binder: 19089 invalid dec weak, ref 50 desc 0 s 1 w 0 [ 284.810405] binder: 19089:19138 BC_ACQUIRE_DONE node 49 has no pending acquire request [ 284.818744] binder: 19089:19138 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 284.826310] binder: 19089:19138 BC_CLEAR_DEATH_NOTIFICATION death notification not active 2018/04/12 18:27:39 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f000087bff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00004a9fb0)={0x3, 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0x1, 0x0, {0x100000000005}}) 2018/04/12 18:27:39 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@ipv4={[], [0xff, 0xff], @rand_addr}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback=0x7f000001, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4, 0x0, 0x401}}, 0xe8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/12 18:27:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x21, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1}, 0x0) 2018/04/12 18:27:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x8, 0x0, &(0x7f00001e4ff8)=[@acquire={0x40046305}], 0x118, 0x0, &(0x7f0000000100)}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000000)=[@dead_binder_done={0x40086310}, @decrefs={0x40046307}, @acquire_done={0x40106309}, @request_death={0x400c630e, 0x4}, @clear_death={0x400c630f, 0x0, 0x3}], 0x0, 0x0, &(0x7f000023c000)}) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) 2018/04/12 18:27:39 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@mpls_getroute={0x20, 0x1a, 0x1, 0x0, 0x0, {0x1c}, [@RTA_DST={0x4, 0x1}]}, 0x20}, 0x1}, 0x0) 2018/04/12 18:27:39 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000100)=""/139, 0x8b) r2 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r2, 0x40086607, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) 2018/04/12 18:27:39 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x80287010, &(0x7f00000000c0)) 2018/04/12 18:27:39 executing program 6: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f00000011c0), 0x0, &(0x7f0000000240)={[{@check_strict='check=strict', 0x2c}]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) execve(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000340), &(0x7f00000003c0)) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) [ 284.931419] binder: BINDER_SET_CONTEXT_MGR already set [ 284.936804] binder: 19089:19138 ioctl 40046207 0 returned -16 [ 284.939398] binder: 19089:19140 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 284.950111] binder: 19089 invalid dec weak, ref 51 desc 0 s 1 w 0 [ 284.956374] binder: 19089:19140 BC_ACQUIRE_DONE u0000000000000000 no match [ 284.963432] binder: 19089:19140 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 284.970583] binder: 19089:19140 BC_CLEAR_DEATH_NOTIFICATION death notification not active 2018/04/12 18:27:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f00000011c0), 0x0, &(0x7f0000000240)={[{@check_strict='check=strict', 0x2c}]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) execve(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000340), &(0x7f00000003c0)) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) [ 284.998565] netlink: 'syz-executor7': attribute type 1 has an invalid length. [ 285.025627] FAT-fs (loop6): bogus number of reserved sectors [ 285.031625] FAT-fs (loop6): Can't find a valid FAT filesystem [ 285.035031] ALSA: seq fatal error: cannot create timer (-16) [ 285.854803] binder: 19157:19171 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 285.862247] binder: 19157 invalid dec weak, ref 53 desc 0 s 1 w 0 [ 285.868525] binder: 19157:19171 BC_ACQUIRE_DONE node 52 has no pending acquire request [ 285.876641] binder: 19157:19171 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 285.884217] binder: 19157:19171 BC_CLEAR_DEATH_NOTIFICATION death notification not active 2018/04/12 18:27:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x8, 0x0, &(0x7f00001e4ff8)=[@acquire={0x40046305}], 0x118, 0x0, &(0x7f0000000100)}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000000)=[@dead_binder_done={0x40086310}, @decrefs={0x40046307}, @acquire_done={0x40106309}, @request_death={0x400c630e, 0x4}, @clear_death={0x400c630f, 0x0, 0x3}], 0x0, 0x0, &(0x7f000023c000)}) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) 2018/04/12 18:27:40 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f000087bff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00004a9fb0)={0x3, 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0x1, 0x0, {0x100000000005}}) 2018/04/12 18:27:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f00000011c0), 0x0, &(0x7f0000000240)={[{@check_strict='check=strict', 0x2c}]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) execve(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000340), &(0x7f00000003c0)) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) 2018/04/12 18:27:40 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@mpls_getroute={0x20, 0x1a, 0x1, 0x0, 0x0, {0x1c}, [@RTA_DST={0x4, 0x1}]}, 0x20}, 0x1}, 0x0) 2018/04/12 18:27:40 executing program 6: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f00000011c0), 0x0, &(0x7f0000000240)={[{@check_strict='check=strict', 0x2c}]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) execve(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000340), &(0x7f00000003c0)) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) 2018/04/12 18:27:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x21, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1}, 0x0) 2018/04/12 18:27:40 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000100)=""/139, 0x8b) r2 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r2, 0x40086607, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) 2018/04/12 18:27:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x8, 0x0, &(0x7f00001e4ff8)=[@acquire={0x40046305}], 0x118, 0x0, &(0x7f0000000100)}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000000)=[@dead_binder_done={0x40086310}, @decrefs={0x40046307}, @acquire_done={0x40106309}, @request_death={0x400c630e, 0x4}, @clear_death={0x400c630f, 0x0, 0x3}], 0x0, 0x0, &(0x7f000023c000)}) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) 2018/04/12 18:27:40 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@mpls_getroute={0x20, 0x1a, 0x1, 0x0, 0x0, {0x1c}, [@RTA_DST={0x4, 0x1}]}, 0x20}, 0x1}, 0x0) 2018/04/12 18:27:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f00000011c0), 0x0, &(0x7f0000000240)={[{@check_strict='check=strict', 0x2c}]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) execve(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000340), &(0x7f00000003c0)) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) [ 286.025293] netlink: 'syz-executor7': attribute type 1 has an invalid length. [ 286.042063] FAT-fs (loop6): bogus number of reserved sectors [ 286.047957] FAT-fs (loop6): Can't find a valid FAT filesystem [ 286.054179] ALSA: seq fatal error: cannot create timer (-16) [ 286.064587] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/12 18:27:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x21, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1}, 0x0) 2018/04/12 18:27:40 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f000087bff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00004a9fb0)={0x3, 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0x1, 0x0, {0x100000000005}}) [ 286.091976] binder: 19191:19193 ioctl 40046207 0 returned -16 [ 286.115771] netlink: 'syz-executor7': attribute type 1 has an invalid length. 2018/04/12 18:27:40 executing program 7: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="200a4f7d2cd3cf681df3e40f9a52c906790667ea55684d1647b5e62cd403c20cdc7d576f7ea8e978c8aec8834536b5140fed9f16c9c0763033919c342ff0084dd944f0455006071b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/12 18:27:40 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14}, @remote={0xac, 0x14, 0x14, 0xbb}, {[@timestamp={0x44, 0xc, 0x7, 0x5, 0x0, [{}, {}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f00000002c0)) [ 286.177606] ALSA: seq fatal error: cannot create timer (-16) 2018/04/12 18:27:40 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x8000) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000000000800002, 0x11, r1, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) 2018/04/12 18:27:40 executing program 6: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f00000011c0), 0x0, &(0x7f0000000240)={[{@check_strict='check=strict', 0x2c}]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) execve(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000340), &(0x7f00000003c0)) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) [ 286.259674] binder: BINDER_SET_CONTEXT_MGR already set [ 286.293335] binder: 19210:19211 ioctl 40046207 0 returned -16 [ 286.312853] binder: BINDER_SET_CONTEXT_MGR already set [ 286.330725] FAT-fs (loop6): bogus number of reserved sectors [ 286.336591] binder: 19220:19221 ioctl 40046207 0 returned -16 [ 286.337293] binder_alloc: 19178: binder_alloc_buf, no vma [ 286.342554] FAT-fs (loop6): Can't find a valid FAT filesystem [ 286.348137] binder: 19220:19221 transaction failed 29189/-3, size 0-8 line 2963 [ 286.361886] binder: 19210:19211 ERROR: BC_REGISTER_LOOPER called without request [ 286.389847] binder: BINDER_SET_CONTEXT_MGR already set [ 286.389859] binder_alloc: binder_alloc_mmap_handler: 19220 20000000-20002000 already mapped failed -16 [ 286.410989] binder: 19220:19224 ioctl 40046207 0 returned -16 [ 286.437867] binder: undelivered TRANSACTION_ERROR: 29189 [ 286.822660] binder: 19178:19229 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 286.830141] binder: 19178 invalid dec weak, ref 55 desc 0 s 1 w 0 [ 286.836434] binder: 19178:19229 BC_ACQUIRE_DONE node 54 has no pending acquire request [ 286.844966] binder: 19178:19229 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 286.852144] binder: 19178:19229 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 286.877277] binder: 19191:19232 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 286.884732] binder: 19191 invalid dec weak, ref 56 desc 0 s 1 w 0 [ 286.891004] binder: 19191:19232 BC_ACQUIRE_DONE u0000000000000000 no match [ 286.898747] binder: 19191:19232 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 286.905940] binder: 19191:19232 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 287.036636] binder: 19210:19237 transaction failed 29189/-22, size 0-0 line 2848 2018/04/12 18:27:41 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14}, @remote={0xac, 0x14, 0x14, 0xbb}, {[@timestamp={0x44, 0xc, 0x7, 0x5, 0x0, [{}, {}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f00000002c0)) 2018/04/12 18:27:41 executing program 0: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0xffffffffffffffe8) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x6, 0x4) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=""/143, &(0x7f00000000c0)=0x341) sendto$inet6(r0, &(0x7f00000000c0), 0xfead, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x100000002, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/04/12 18:27:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x8, 0x0, &(0x7f00001e4ff8)=[@acquire={0x40046305}], 0x118, 0x0, &(0x7f0000000100)}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000000)=[@dead_binder_done={0x40086310}, @decrefs={0x40046307}, @acquire_done={0x40106309}, @request_death={0x400c630e, 0x4}, @clear_death={0x400c630f, 0x0, 0x3}], 0x0, 0x0, &(0x7f000023c000)}) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) 2018/04/12 18:27:41 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)) dup3(r0, r1, 0x0) 2018/04/12 18:27:41 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000100)=""/139, 0x8b) r2 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r2, 0x40086607, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) 2018/04/12 18:27:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x8, 0x0, &(0x7f00001e4ff8)=[@acquire={0x40046305}], 0x118, 0x0, &(0x7f0000000100)}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000000)=[@dead_binder_done={0x40086310}, @decrefs={0x40046307}, @acquire_done={0x40106309}, @request_death={0x400c630e, 0x4}, @clear_death={0x400c630f, 0x0, 0x3}], 0x0, 0x0, &(0x7f000023c000)}) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) 2018/04/12 18:27:41 executing program 7: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000040)=""/122) 2018/04/12 18:27:41 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_opts(r0, 0x0, 0x2000000013, &(0x7f0000000080), 0x0) [ 287.149839] binder_alloc: binder_alloc_mmap_handler: 19210 20ffb000-20ffe000 already mapped failed -16 [ 287.163306] binder: 19210:19238 ERROR: BC_REGISTER_LOOPER called without request [ 287.187016] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/12 18:27:41 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_opts(r0, 0x0, 0x2000000013, &(0x7f0000000080), 0x0) 2018/04/12 18:27:41 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14}, @remote={0xac, 0x14, 0x14, 0xbb}, {[@timestamp={0x44, 0xc, 0x7, 0x5, 0x0, [{}, {}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f00000002c0)) 2018/04/12 18:27:41 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)) dup3(r0, r1, 0x0) 2018/04/12 18:27:41 executing program 0: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0xffffffffffffffe8) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x6, 0x4) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=""/143, &(0x7f00000000c0)=0x341) sendto$inet6(r0, &(0x7f00000000c0), 0xfead, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x100000002, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 287.231554] binder: BINDER_SET_CONTEXT_MGR already set [ 287.262541] binder: 19248:19251 ioctl 40046207 0 returned -16 2018/04/12 18:27:41 executing program 7: add_key(&(0x7f000068b000)='asymmetric\x00', &(0x7f000046bae7)={0x73, 0x79, 0x7a}, &(0x7f0000cefffa)="1082", 0x2, 0xffffffffffffffff) 2018/04/12 18:27:41 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_opts(r0, 0x0, 0x2000000013, &(0x7f0000000080), 0x0) 2018/04/12 18:27:41 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14}, @remote={0xac, 0x14, 0x14, 0xbb}, {[@timestamp={0x44, 0xc, 0x7, 0x5, 0x0, [{}, {}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f00000002c0)) 2018/04/12 18:27:41 executing program 0: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0xffffffffffffffe8) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x6, 0x4) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=""/143, &(0x7f00000000c0)=0x341) sendto$inet6(r0, &(0x7f00000000c0), 0xfead, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x100000002, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/04/12 18:27:41 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)) dup3(r0, r1, 0x0) [ 288.019972] binder: 19240:19287 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 288.027417] binder: 19240 invalid dec weak, ref 61 desc 0 s 1 w 0 [ 288.031330] binder: 19248:19288 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 288.033702] binder: 19240:19287 BC_ACQUIRE_DONE node 60 has no pending acquire request [ 288.041098] binder: 19248 invalid dec weak, ref 62 desc 0 s 1 w 0 [ 288.049451] binder: 19240:19287 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 288.055423] binder: 19248:19288 BC_ACQUIRE_DONE u0000000000000000 no match [ 288.062543] binder: 19240:19287 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 288.070369] binder: 19248:19288 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 288.085079] binder: 19248:19288 BC_CLEAR_DEATH_NOTIFICATION death notification not active 2018/04/12 18:27:42 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_opts(r0, 0x0, 0x2000000013, &(0x7f0000000080), 0x0) 2018/04/12 18:27:42 executing program 7: add_key(&(0x7f000068b000)='asymmetric\x00', &(0x7f000046bae7)={0x73, 0x79, 0x7a}, &(0x7f0000cefffa)="1082", 0x2, 0xffffffffffffffff) 2018/04/12 18:27:42 executing program 0: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0xffffffffffffffe8) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x6, 0x4) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=""/143, &(0x7f00000000c0)=0x341) sendto$inet6(r0, &(0x7f00000000c0), 0xfead, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x100000002, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/04/12 18:27:42 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)) dup3(r0, r1, 0x0) 2018/04/12 18:27:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f00007a9000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f00006c1000)=@ipv6_newroute={0x28, 0x18, 0x501, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_METRICS={0xc, 0x8, "06000c0006"}]}, 0x28}, 0x1}, 0x0) 2018/04/12 18:27:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x8, 0x0, &(0x7f00001e4ff8)=[@acquire={0x40046305}], 0x118, 0x0, &(0x7f0000000100)}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000000)=[@dead_binder_done={0x40086310}, @decrefs={0x40046307}, @acquire_done={0x40106309}, @request_death={0x400c630e, 0x4}, @clear_death={0x400c630f, 0x0, 0x3}], 0x0, 0x0, &(0x7f000023c000)}) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) 2018/04/12 18:27:42 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000100)=""/139, 0x8b) r2 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r2, 0x40086607, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) 2018/04/12 18:27:42 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000475ff9)="ffffffff", 0x4) 2018/04/12 18:27:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f00007a9000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f00006c1000)=@ipv6_newroute={0x28, 0x18, 0x501, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_METRICS={0xc, 0x8, "06000c0006"}]}, 0x28}, 0x1}, 0x0) 2018/04/12 18:27:42 executing program 4: r0 = socket$inet(0x2, 0x3, 0x1) mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x10000002, 0x100000002132, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r1, 0x0) getsockopt(r0, 0xff, 0x1, &(0x7f0000000200)=""/4096, &(0x7f00000001c0)=0x1000) 2018/04/12 18:27:42 executing program 7: add_key(&(0x7f000068b000)='asymmetric\x00', &(0x7f000046bae7)={0x73, 0x79, 0x7a}, &(0x7f0000cefffa)="1082", 0x2, 0xffffffffffffffff) 2018/04/12 18:27:42 executing program 0: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000003c0)={[{@umask={'umask', 0x3d, [0x35]}, 0x2c}]}) 2018/04/12 18:27:42 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000475ff9)="ffffffff", 0x4) 2018/04/12 18:27:42 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000cac000)='net/snmp\x00') r1 = socket$alg(0x26, 0x5, 0x0) close(r1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00002c6fa8)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f000026bfdd), 0x11) sendfile(r3, r0, &(0x7f0000297000), 0x8) 2018/04/12 18:27:42 executing program 4: r0 = socket$inet(0x2, 0x3, 0x1) mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x10000002, 0x100000002132, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r1, 0x0) getsockopt(r0, 0xff, 0x1, &(0x7f0000000200)=""/4096, &(0x7f00000001c0)=0x1000) 2018/04/12 18:27:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f00007a9000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f00006c1000)=@ipv6_newroute={0x28, 0x18, 0x501, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_METRICS={0xc, 0x8, "06000c0006"}]}, 0x28}, 0x1}, 0x0) 2018/04/12 18:27:42 executing program 7: add_key(&(0x7f000068b000)='asymmetric\x00', &(0x7f000046bae7)={0x73, 0x79, 0x7a}, &(0x7f0000cefffa)="1082", 0x2, 0xffffffffffffffff) 2018/04/12 18:27:42 executing program 0: syz_open_procfs(0x0, &(0x7f0000000200)='net/mcfilter\x00') ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) mmap(&(0x7f0000000000/0xef5000)=nil, 0xef5000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 289.045621] binder: 19292:19346 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 289.053092] binder: 19292 invalid dec weak, ref 64 desc 0 s 1 w 0 [ 289.059362] binder: 19292:19346 BC_ACQUIRE_DONE node 63 has no pending acquire request [ 289.067488] binder: 19292:19346 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 289.075459] binder: 19292:19346 BC_CLEAR_DEATH_NOTIFICATION death notification not active 2018/04/12 18:27:43 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000475ff9)="ffffffff", 0x4) 2018/04/12 18:27:43 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000cac000)='net/snmp\x00') r1 = socket$alg(0x26, 0x5, 0x0) close(r1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00002c6fa8)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f000026bfdd), 0x11) sendfile(r3, r0, &(0x7f0000297000), 0x8) 2018/04/12 18:27:43 executing program 4: r0 = socket$inet(0x2, 0x3, 0x1) mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x10000002, 0x100000002132, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r1, 0x0) getsockopt(r0, 0xff, 0x1, &(0x7f0000000200)=""/4096, &(0x7f00000001c0)=0x1000) 2018/04/12 18:27:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f00007a9000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f00006c1000)=@ipv6_newroute={0x28, 0x18, 0x501, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_METRICS={0xc, 0x8, "06000c0006"}]}, 0x28}, 0x1}, 0x0) 2018/04/12 18:27:43 executing program 0: syz_open_procfs(0x0, &(0x7f0000000200)='net/mcfilter\x00') ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) mmap(&(0x7f0000000000/0xef5000)=nil, 0xef5000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2018/04/12 18:27:43 executing program 7: syz_open_procfs(0x0, &(0x7f0000000200)='net/mcfilter\x00') ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) mmap(&(0x7f0000000000/0xef5000)=nil, 0xef5000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2018/04/12 18:27:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000240)="421c74c423010afef748b800300000000000000f23d00f21f835100000050f23f866b8ba000f00d8660ff30f45dbdd420f35f2f20f01c848b8c3a00000000000000f23d80f21f835000000300f23f8c4826590ac2c00280000", 0x59}], 0x1, 0x50, &(0x7f00000002c0), 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/12 18:27:43 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x5) 2018/04/12 18:27:43 executing program 7: syz_open_procfs(0x0, &(0x7f0000000200)='net/mcfilter\x00') ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) mmap(&(0x7f0000000000/0xef5000)=nil, 0xef5000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2018/04/12 18:27:43 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000475ff9)="ffffffff", 0x4) 2018/04/12 18:27:43 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000cac000)='net/snmp\x00') r1 = socket$alg(0x26, 0x5, 0x0) close(r1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00002c6fa8)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f000026bfdd), 0x11) sendfile(r3, r0, &(0x7f0000297000), 0x8) 2018/04/12 18:27:43 executing program 0: syz_open_procfs(0x0, &(0x7f0000000200)='net/mcfilter\x00') ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) mmap(&(0x7f0000000000/0xef5000)=nil, 0xef5000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2018/04/12 18:27:43 executing program 4: r0 = socket$inet(0x2, 0x3, 0x1) mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x10000002, 0x100000002132, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r1, 0x0) getsockopt(r0, 0xff, 0x1, &(0x7f0000000200)=""/4096, &(0x7f00000001c0)=0x1000) 2018/04/12 18:27:43 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000ae4000)={0xaa}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@multicast1, @in=@loopback}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000280)=ANY=[], 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000604000/0x4000)=nil, 0x4000}, 0x1}) 2018/04/12 18:27:43 executing program 7: syz_open_procfs(0x0, &(0x7f0000000200)='net/mcfilter\x00') ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) mmap(&(0x7f0000000000/0xef5000)=nil, 0xef5000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2018/04/12 18:27:43 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x2000000005452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000027ff8)=[{r2}], 0x1, 0x8000) dup3(r1, r2, 0x0) tkill(r0, 0x16) 2018/04/12 18:27:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000240)="421c74c423010afef748b800300000000000000f23d00f21f835100000050f23f866b8ba000f00d8660ff30f45dbdd420f35f2f20f01c848b8c3a00000000000000f23d80f21f835000000300f23f8c4826590ac2c00280000", 0x59}], 0x1, 0x50, &(0x7f00000002c0), 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/12 18:27:44 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000cac000)='net/snmp\x00') r1 = socket$alg(0x26, 0x5, 0x0) close(r1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00002c6fa8)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f000026bfdd), 0x11) sendfile(r3, r0, &(0x7f0000297000), 0x8) 2018/04/12 18:27:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000240)="421c74c423010afef748b800300000000000000f23d00f21f835100000050f23f866b8ba000f00d8660ff30f45dbdd420f35f2f20f01c848b8c3a00000000000000f23d80f21f835000000300f23f8c4826590ac2c00280000", 0x59}], 0x1, 0x50, &(0x7f00000002c0), 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/12 18:27:44 executing program 0: syz_open_procfs(0x0, &(0x7f0000000200)='net/mcfilter\x00') ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) mmap(&(0x7f0000000000/0xef5000)=nil, 0xef5000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2018/04/12 18:27:44 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000ae4000)={0xaa}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@multicast1, @in=@loopback}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000280)=ANY=[], 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000604000/0x4000)=nil, 0x4000}, 0x1}) 2018/04/12 18:27:44 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000240)="421c74c423010afef748b800300000000000000f23d00f21f835100000050f23f866b8ba000f00d8660ff30f45dbdd420f35f2f20f01c848b8c3a00000000000000f23d80f21f835000000300f23f8c4826590ac2c00280000", 0x59}], 0x1, 0x50, &(0x7f00000002c0), 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/12 18:27:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000240)="421c74c423010afef748b800300000000000000f23d00f21f835100000050f23f866b8ba000f00d8660ff30f45dbdd420f35f2f20f01c848b8c3a00000000000000f23d80f21f835000000300f23f8c4826590ac2c00280000", 0x59}], 0x1, 0x50, &(0x7f00000002c0), 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/12 18:27:44 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x2000000005452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000027ff8)=[{r2}], 0x1, 0x8000) dup3(r1, r2, 0x0) tkill(r0, 0x16) 2018/04/12 18:27:44 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x5) 2018/04/12 18:27:44 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x2000000005452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000027ff8)=[{r2}], 0x1, 0x8000) dup3(r1, r2, 0x0) tkill(r0, 0x16) 2018/04/12 18:27:44 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000ae4000)={0xaa}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@multicast1, @in=@loopback}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000280)=ANY=[], 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000604000/0x4000)=nil, 0x4000}, 0x1}) 2018/04/12 18:27:44 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000002dff8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001340)=[{&(0x7f0000001240)="1d", 0x1}], 0x1) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, 0x2710}, 0x10) recvmmsg(r0, &(0x7f000000a780)=[{{0x0, 0x0, &(0x7f000000a6c0)=[{&(0x7f0000008240)=""/100, 0x64}], 0x1}}], 0x1, 0x200000000100, 0x0) 2018/04/12 18:27:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000240)="421c74c423010afef748b800300000000000000f23d00f21f835100000050f23f866b8ba000f00d8660ff30f45dbdd420f35f2f20f01c848b8c3a00000000000000f23d80f21f835000000300f23f8c4826590ac2c00280000", 0x59}], 0x1, 0x50, &(0x7f00000002c0), 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/12 18:27:44 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000240)="421c74c423010afef748b800300000000000000f23d00f21f835100000050f23f866b8ba000f00d8660ff30f45dbdd420f35f2f20f01c848b8c3a00000000000000f23d80f21f835000000300f23f8c4826590ac2c00280000", 0x59}], 0x1, 0x50, &(0x7f00000002c0), 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/12 18:27:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000240)="421c74c423010afef748b800300000000000000f23d00f21f835100000050f23f866b8ba000f00d8660ff30f45dbdd420f35f2f20f01c848b8c3a00000000000000f23d80f21f835000000300f23f8c4826590ac2c00280000", 0x59}], 0x1, 0x50, &(0x7f00000002c0), 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/12 18:27:44 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000002dff8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001340)=[{&(0x7f0000001240)="1d", 0x1}], 0x1) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, 0x2710}, 0x10) recvmmsg(r0, &(0x7f000000a780)=[{{0x0, 0x0, &(0x7f000000a6c0)=[{&(0x7f0000008240)=""/100, 0x64}], 0x1}}], 0x1, 0x200000000100, 0x0) 2018/04/12 18:27:45 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000ae4000)={0xaa}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@multicast1, @in=@loopback}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000280)=ANY=[], 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000604000/0x4000)=nil, 0x4000}, 0x1}) 2018/04/12 18:27:45 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000002dff8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001340)=[{&(0x7f0000001240)="1d", 0x1}], 0x1) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, 0x2710}, 0x10) recvmmsg(r0, &(0x7f000000a780)=[{{0x0, 0x0, &(0x7f000000a6c0)=[{&(0x7f0000008240)=""/100, 0x64}], 0x1}}], 0x1, 0x200000000100, 0x0) 2018/04/12 18:27:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000dbc000)={0x10, 0x0, 0x0, 0xb6c}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/netlink\x00') read$eventfd(r1, &(0x7f0000000200), 0xfffffcfd) 2018/04/12 18:27:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000240)="421c74c423010afef748b800300000000000000f23d00f21f835100000050f23f866b8ba000f00d8660ff30f45dbdd420f35f2f20f01c848b8c3a00000000000000f23d80f21f835000000300f23f8c4826590ac2c00280000", 0x59}], 0x1, 0x50, &(0x7f00000002c0), 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/12 18:27:45 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000240)="421c74c423010afef748b800300000000000000f23d00f21f835100000050f23f866b8ba000f00d8660ff30f45dbdd420f35f2f20f01c848b8c3a00000000000000f23d80f21f835000000300f23f8c4826590ac2c00280000", 0x59}], 0x1, 0x50, &(0x7f00000002c0), 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/12 18:27:45 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x5) 2018/04/12 18:27:45 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x2000000005452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000027ff8)=[{r2}], 0x1, 0x8000) dup3(r1, r2, 0x0) tkill(r0, 0x16) 2018/04/12 18:27:45 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x2000000005452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000027ff8)=[{r2}], 0x1, 0x8000) dup3(r1, r2, 0x0) tkill(r0, 0x16) 2018/04/12 18:27:45 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000002dff8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001340)=[{&(0x7f0000001240)="1d", 0x1}], 0x1) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, 0x2710}, 0x10) recvmmsg(r0, &(0x7f000000a780)=[{{0x0, 0x0, &(0x7f000000a6c0)=[{&(0x7f0000008240)=""/100, 0x64}], 0x1}}], 0x1, 0x200000000100, 0x0) 2018/04/12 18:27:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000dbc000)={0x10, 0x0, 0x0, 0xb6c}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/netlink\x00') read$eventfd(r1, &(0x7f0000000200), 0xfffffcfd) 2018/04/12 18:27:45 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x10000) getpeername$llc(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x10) memfd_create(&(0x7f0000000140)='cgroup\x00', 0x1) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000012f18)={{{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in=@loopback=0x7f000001}}, {{@in=@multicast1=0xe0000001}, 0x0, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}}}, 0xe8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8840, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0xb, &(0x7f0000128000)=""/210, &(0x7f0000663ffc)=0xd2) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/04/12 18:27:45 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6}, 0x10) 2018/04/12 18:27:45 executing program 7: syz_mount_image$ext4(&(0x7f0000000140)="63512d1c00", &(0x7f0000000080)='/\x00', 0x0, 0x0, &(0x7f00000004c0), 0x28020, &(0x7f0000000000)={[{@noacl='noacl', 0x2c}]}) 2018/04/12 18:27:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000dbc000)={0x10, 0x0, 0x0, 0xb6c}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/netlink\x00') read$eventfd(r1, &(0x7f0000000200), 0xfffffcfd) 2018/04/12 18:27:45 executing program 2: mkdir(&(0x7f0000000040)='./file0/', 0x0) mount(&(0x7f0000000180)='./file0/', &(0x7f00000001c0)='./file0/', &(0x7f0000000200)='proc\x00', 0x0, 0x0) mount(&(0x7f0000000000)='.', &(0x7f0000000040)='.', &(0x7f0000000080)='cgroup\x00', 0x5010, &(0x7f00000000c0)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='ncpfs\x00', 0x20000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000000440)) [ 291.531520] device syz_tun entered promiscuous mode [ 291.564066] EXT4-fs (sda1): Mount option "noacl" will be removed by 3.5 [ 291.564066] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 291.564066] 2018/04/12 18:27:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000dbc000)={0x10, 0x0, 0x0, 0xb6c}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/netlink\x00') read$eventfd(r1, &(0x7f0000000200), 0xfffffcfd) 2018/04/12 18:27:45 executing program 2: mkdir(&(0x7f0000000040)='./file0/', 0x0) mount(&(0x7f0000000180)='./file0/', &(0x7f00000001c0)='./file0/', &(0x7f0000000200)='proc\x00', 0x0, 0x0) mount(&(0x7f0000000000)='.', &(0x7f0000000040)='.', &(0x7f0000000080)='cgroup\x00', 0x5010, &(0x7f00000000c0)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='ncpfs\x00', 0x20000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000000440)) 2018/04/12 18:27:45 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6}, 0x10) [ 291.606637] EXT4-fs (sda1): re-mounted. Opts: noacl, [ 291.607982] device syz_tun left promiscuous mode 2018/04/12 18:27:46 executing program 3: mkdir(&(0x7f0000000040)='./file0/', 0x0) mount(&(0x7f0000000180)='./file0/', &(0x7f00000001c0)='./file0/', &(0x7f0000000200)='proc\x00', 0x0, 0x0) mount(&(0x7f0000000000)='.', &(0x7f0000000040)='.', &(0x7f0000000080)='cgroup\x00', 0x5010, &(0x7f00000000c0)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='ncpfs\x00', 0x20000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000000440)) [ 291.650034] EXT4-fs (sda1): Mount option "noacl" will be removed by 3.5 [ 291.650034] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 291.650034] [ 291.681270] device syz_tun entered promiscuous mode [ 291.685806] EXT4-fs (sda1): re-mounted. Opts: noacl, 2018/04/12 18:27:46 executing program 7: syz_mount_image$ext4(&(0x7f0000000140)="63512d1c00", &(0x7f0000000080)='/\x00', 0x0, 0x0, &(0x7f00000004c0), 0x28020, &(0x7f0000000000)={[{@noacl='noacl', 0x2c}]}) 2018/04/12 18:27:46 executing program 3: mkdir(&(0x7f0000000040)='./file0/', 0x0) mount(&(0x7f0000000180)='./file0/', &(0x7f00000001c0)='./file0/', &(0x7f0000000200)='proc\x00', 0x0, 0x0) mount(&(0x7f0000000000)='.', &(0x7f0000000040)='.', &(0x7f0000000080)='cgroup\x00', 0x5010, &(0x7f00000000c0)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='ncpfs\x00', 0x20000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000000440)) [ 291.745071] device syz_tun left promiscuous mode [ 291.785207] EXT4-fs (sda1): Mount option "noacl" will be removed by 3.5 [ 291.785207] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 291.785207] [ 291.805590] EXT4-fs (sda1): re-mounted. Opts: noacl, 2018/04/12 18:27:46 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x5) 2018/04/12 18:27:46 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x2000000005452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000027ff8)=[{r2}], 0x1, 0x8000) dup3(r1, r2, 0x0) tkill(r0, 0x16) 2018/04/12 18:27:46 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6}, 0x10) 2018/04/12 18:27:46 executing program 2: mkdir(&(0x7f0000000040)='./file0/', 0x0) mount(&(0x7f0000000180)='./file0/', &(0x7f00000001c0)='./file0/', &(0x7f0000000200)='proc\x00', 0x0, 0x0) mount(&(0x7f0000000000)='.', &(0x7f0000000040)='.', &(0x7f0000000080)='cgroup\x00', 0x5010, &(0x7f00000000c0)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='ncpfs\x00', 0x20000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000000440)) 2018/04/12 18:27:46 executing program 3: mkdir(&(0x7f0000000040)='./file0/', 0x0) mount(&(0x7f0000000180)='./file0/', &(0x7f00000001c0)='./file0/', &(0x7f0000000200)='proc\x00', 0x0, 0x0) mount(&(0x7f0000000000)='.', &(0x7f0000000040)='.', &(0x7f0000000080)='cgroup\x00', 0x5010, &(0x7f00000000c0)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='ncpfs\x00', 0x20000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000000440)) [ 292.204389] device syz_tun entered promiscuous mode [ 292.258851] device syz_tun left promiscuous mode 2018/04/12 18:27:47 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x10000) getpeername$llc(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x10) memfd_create(&(0x7f0000000140)='cgroup\x00', 0x1) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000012f18)={{{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in=@loopback=0x7f000001}}, {{@in=@multicast1=0xe0000001}, 0x0, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}}}, 0xe8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8840, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0xb, &(0x7f0000128000)=""/210, &(0x7f0000663ffc)=0xd2) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/04/12 18:27:47 executing program 5: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00@']) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000580)='T', 0x1}], 0x1) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000380)={0x0, 0x5, 0x2000000005}) 2018/04/12 18:27:47 executing program 7: syz_mount_image$ext4(&(0x7f0000000140)="63512d1c00", &(0x7f0000000080)='/\x00', 0x0, 0x0, &(0x7f00000004c0), 0x28020, &(0x7f0000000000)={[{@noacl='noacl', 0x2c}]}) 2018/04/12 18:27:47 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x2000000005452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000027ff8)=[{r2}], 0x1, 0x8000) dup3(r1, r2, 0x0) tkill(r0, 0x16) 2018/04/12 18:27:47 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/3, 0x3, &(0x7f0000000400)=""/177}}, 0x68) 2018/04/12 18:27:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4000085}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0x188, &(0x7f00001a7f05)=""/251}, 0x48) 2018/04/12 18:27:47 executing program 2: mkdir(&(0x7f0000000040)='./file0/', 0x0) mount(&(0x7f0000000180)='./file0/', &(0x7f00000001c0)='./file0/', &(0x7f0000000200)='proc\x00', 0x0, 0x0) mount(&(0x7f0000000000)='.', &(0x7f0000000040)='.', &(0x7f0000000080)='cgroup\x00', 0x5010, &(0x7f00000000c0)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='ncpfs\x00', 0x20000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000000440)) 2018/04/12 18:27:47 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6}, 0x10) [ 293.085402] device syz_tun entered promiscuous mode 2018/04/12 18:27:47 executing program 5: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00@']) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000580)='T', 0x1}], 0x1) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000380)={0x0, 0x5, 0x2000000005}) 2018/04/12 18:27:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4000085}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0x188, &(0x7f00001a7f05)=""/251}, 0x48) [ 293.106102] EXT4-fs (sda1): Mount option "noacl" will be removed by 3.5 [ 293.106102] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 293.106102] [ 293.128798] EXT4-fs (sda1): re-mounted. Opts: noacl, 2018/04/12 18:27:47 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/3, 0x3, &(0x7f0000000400)=""/177}}, 0x68) [ 293.165882] device syz_tun left promiscuous mode 2018/04/12 18:27:47 executing program 2: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00@']) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000580)='T', 0x1}], 0x1) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000380)={0x0, 0x5, 0x2000000005}) 2018/04/12 18:27:47 executing program 7: syz_mount_image$ext4(&(0x7f0000000140)="63512d1c00", &(0x7f0000000080)='/\x00', 0x0, 0x0, &(0x7f00000004c0), 0x28020, &(0x7f0000000000)={[{@noacl='noacl', 0x2c}]}) 2018/04/12 18:27:47 executing program 0: r0 = socket(0xa, 0x80806, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000140)={'tunl0\x00'}) 2018/04/12 18:27:47 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/3, 0x3, &(0x7f0000000400)=""/177}}, 0x68) 2018/04/12 18:27:47 executing program 5: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00@']) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000580)='T', 0x1}], 0x1) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000380)={0x0, 0x5, 0x2000000005}) [ 293.294812] EXT4-fs (sda1): Mount option "noacl" will be removed by 3.5 [ 293.294812] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 293.294812] [ 293.376330] EXT4-fs (sda1): re-mounted. Opts: noacl, 2018/04/12 18:27:48 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x10000) getpeername$llc(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x10) memfd_create(&(0x7f0000000140)='cgroup\x00', 0x1) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000012f18)={{{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in=@loopback=0x7f000001}}, {{@in=@multicast1=0xe0000001}, 0x0, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}}}, 0xe8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8840, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0xb, &(0x7f0000128000)=""/210, &(0x7f0000663ffc)=0xd2) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/04/12 18:27:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4000085}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0x188, &(0x7f00001a7f05)=""/251}, 0x48) 2018/04/12 18:27:48 executing program 0: r0 = socket(0xa, 0x80806, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000140)={'tunl0\x00'}) 2018/04/12 18:27:48 executing program 2: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00@']) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000580)='T', 0x1}], 0x1) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000380)={0x0, 0x5, 0x2000000005}) 2018/04/12 18:27:48 executing program 5: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00@']) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000580)='T', 0x1}], 0x1) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000380)={0x0, 0x5, 0x2000000005}) 2018/04/12 18:27:48 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/3, 0x3, &(0x7f0000000400)=""/177}}, 0x68) 2018/04/12 18:27:48 executing program 7: r0 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0xaf01, &(0x7f0000000100)) r2 = eventfd(0x80000002) write$eventfd(r2, &(0x7f0000000080)=0xffffffffffffff90, 0x8) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000857ff8)={0x0, r2}) write$eventfd(r2, &(0x7f0000000040), 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='IPVS\x00') r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/loop-control\x00', 0x900, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = socket$inet(0x2, 0x3, 0x8) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r6 = dup3(r5, r3, 0x80000) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000080)={0x2, r3, 0xfffffffffffffffe}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) ioctl$sock_inet_tcp_SIOCATMARK(r7, 0x8905, &(0x7f00000002c0)) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@loopback}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) write$cgroup_pid(r8, &(0x7f0000000100)=ANY=[], 0x1023c) truncate(&(0x7f0000000140)='./file0\x00', 0x3) write(r8, &(0x7f0000000180)="15", 0x1) fallocate(0xffffffffffffffff, 0x0, 0xffff, 0x9) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) close(r0) open(&(0x7f0000000100)='./file0\x00', 0x200, 0x80) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x0, 0x0) 2018/04/12 18:27:48 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0/bus\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f00000001c0)) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 2018/04/12 18:27:48 executing program 0: r0 = socket(0xa, 0x80806, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000140)={'tunl0\x00'}) 2018/04/12 18:27:48 executing program 2: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00@']) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000580)='T', 0x1}], 0x1) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000380)={0x0, 0x5, 0x2000000005}) 2018/04/12 18:27:48 executing program 5: rt_sigprocmask(0x0, &(0x7f0000039ff8)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x17, 0x4, @tid=r0}, &(0x7f00008ec000)) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) timer_delete(0x0) 2018/04/12 18:27:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4000085}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0x188, &(0x7f00001a7f05)=""/251}, 0x48) 2018/04/12 18:27:48 executing program 6: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000080)=[@free_buffer={0x40086303}], 0x0, 0x0, &(0x7f00000000c0)}) 2018/04/12 18:27:48 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0/bus\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f00000001c0)) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 2018/04/12 18:27:48 executing program 0: r0 = socket(0xa, 0x80806, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000140)={'tunl0\x00'}) [ 294.089034] binder: 19629:19634 BC_FREE_BUFFER u0000000000000000 no match 2018/04/12 18:27:48 executing program 2: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0x97}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x7, 0xfffffffc, 0xcce0ecd, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0x39}, 0xffffffffffffff75) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x705000, 0x2, 0xe, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000001c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) [ 294.132799] binder: 19629:19638 BC_FREE_BUFFER u0000000000000000 no match 2018/04/12 18:27:49 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x10000) getpeername$llc(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x10) memfd_create(&(0x7f0000000140)='cgroup\x00', 0x1) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000012f18)={{{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in=@loopback=0x7f000001}}, {{@in=@multicast1=0xe0000001}, 0x0, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}}}, 0xe8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8840, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0xb, &(0x7f0000128000)=""/210, &(0x7f0000663ffc)=0xd2) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/04/12 18:27:49 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/12 18:27:49 executing program 5: rt_sigprocmask(0x0, &(0x7f0000039ff8)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x17, 0x4, @tid=r0}, &(0x7f00008ec000)) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) timer_delete(0x0) 2018/04/12 18:27:49 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) tkill(r0, 0x1000000000016) 2018/04/12 18:27:49 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0/bus\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f00000001c0)) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 2018/04/12 18:27:49 executing program 6: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000080)=[@free_buffer={0x40086303}], 0x0, 0x0, &(0x7f00000000c0)}) 2018/04/12 18:27:49 executing program 2: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0x97}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x7, 0xfffffffc, 0xcce0ecd, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0x39}, 0xffffffffffffff75) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x705000, 0x2, 0xe, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000001c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) 2018/04/12 18:27:49 executing program 7: r0 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0xaf01, &(0x7f0000000100)) r2 = eventfd(0x80000002) write$eventfd(r2, &(0x7f0000000080)=0xffffffffffffff90, 0x8) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000857ff8)={0x0, r2}) write$eventfd(r2, &(0x7f0000000040), 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='IPVS\x00') r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/loop-control\x00', 0x900, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = socket$inet(0x2, 0x3, 0x8) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r6 = dup3(r5, r3, 0x80000) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000080)={0x2, r3, 0xfffffffffffffffe}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) ioctl$sock_inet_tcp_SIOCATMARK(r7, 0x8905, &(0x7f00000002c0)) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@loopback}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) write$cgroup_pid(r8, &(0x7f0000000100)=ANY=[], 0x1023c) truncate(&(0x7f0000000140)='./file0\x00', 0x3) write(r8, &(0x7f0000000180)="15", 0x1) fallocate(0xffffffffffffffff, 0x0, 0xffff, 0x9) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) close(r0) open(&(0x7f0000000100)='./file0\x00', 0x200, 0x80) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x0, 0x0) [ 295.088489] binder: 19660:19662 BC_FREE_BUFFER u0000000000000000 no match 2018/04/12 18:27:49 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0/bus\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f00000001c0)) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 2018/04/12 18:27:49 executing program 5: rt_sigprocmask(0x0, &(0x7f0000039ff8)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x17, 0x4, @tid=r0}, &(0x7f00008ec000)) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) timer_delete(0x0) 2018/04/12 18:27:49 executing program 6: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000080)=[@free_buffer={0x40086303}], 0x0, 0x0, &(0x7f00000000c0)}) 2018/04/12 18:27:49 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/12 18:27:49 executing program 5: rt_sigprocmask(0x0, &(0x7f0000039ff8)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x17, 0x4, @tid=r0}, &(0x7f00008ec000)) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) timer_delete(0x0) 2018/04/12 18:27:49 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) [ 295.238641] binder: 19683:19684 BC_FREE_BUFFER u0000000000000000 no match 2018/04/12 18:27:49 executing program 6: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000080)=[@free_buffer={0x40086303}], 0x0, 0x0, &(0x7f00000000c0)}) 2018/04/12 18:27:49 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) [ 295.393099] binder: 19698:19699 BC_FREE_BUFFER u0000000000000000 no match 2018/04/12 18:27:50 executing program 6: r0 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0xaf01, &(0x7f0000000100)) r2 = eventfd(0x80000002) write$eventfd(r2, &(0x7f0000000080)=0xffffffffffffff90, 0x8) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000857ff8)={0x0, r2}) write$eventfd(r2, &(0x7f0000000040), 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='IPVS\x00') r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/loop-control\x00', 0x900, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = socket$inet(0x2, 0x3, 0x8) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r6 = dup3(r5, r3, 0x80000) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000080)={0x2, r3, 0xfffffffffffffffe}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) ioctl$sock_inet_tcp_SIOCATMARK(r7, 0x8905, &(0x7f00000002c0)) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@loopback}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) write$cgroup_pid(r8, &(0x7f0000000100)=ANY=[], 0x1023c) truncate(&(0x7f0000000140)='./file0\x00', 0x3) write(r8, &(0x7f0000000180)="15", 0x1) fallocate(0xffffffffffffffff, 0x0, 0xffff, 0x9) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) close(r0) open(&(0x7f0000000100)='./file0\x00', 0x200, 0x80) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x0, 0x0) 2018/04/12 18:27:50 executing program 7: r0 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0xaf01, &(0x7f0000000100)) r2 = eventfd(0x80000002) write$eventfd(r2, &(0x7f0000000080)=0xffffffffffffff90, 0x8) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000857ff8)={0x0, r2}) write$eventfd(r2, &(0x7f0000000040), 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='IPVS\x00') r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/loop-control\x00', 0x900, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = socket$inet(0x2, 0x3, 0x8) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r6 = dup3(r5, r3, 0x80000) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000080)={0x2, r3, 0xfffffffffffffffe}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) ioctl$sock_inet_tcp_SIOCATMARK(r7, 0x8905, &(0x7f00000002c0)) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@loopback}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) write$cgroup_pid(r8, &(0x7f0000000100)=ANY=[], 0x1023c) truncate(&(0x7f0000000140)='./file0\x00', 0x3) write(r8, &(0x7f0000000180)="15", 0x1) fallocate(0xffffffffffffffff, 0x0, 0xffff, 0x9) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) close(r0) open(&(0x7f0000000100)='./file0\x00', 0x200, 0x80) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x0, 0x0) 2018/04/12 18:27:50 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) tkill(r0, 0x1000000000016) 2018/04/12 18:27:50 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/12 18:27:50 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/12 18:27:50 executing program 1: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) tkill(r0, 0x1000000000016) 2018/04/12 18:27:50 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/12 18:27:50 executing program 2: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0x97}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x7, 0xfffffffc, 0xcce0ecd, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0x39}, 0xffffffffffffff75) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x705000, 0x2, 0xe, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000001c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) 2018/04/12 18:27:50 executing program 3: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0x97}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x7, 0xfffffffc, 0xcce0ecd, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0x39}, 0xffffffffffffff75) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x705000, 0x2, 0xe, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000001c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) 2018/04/12 18:27:50 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/12 18:27:50 executing program 4: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0x97}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x7, 0xfffffffc, 0xcce0ecd, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0x39}, 0xffffffffffffff75) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x705000, 0x2, 0xe, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000001c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) 2018/04/12 18:27:50 executing program 2: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0x97}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x7, 0xfffffffc, 0xcce0ecd, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0x39}, 0xffffffffffffff75) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x705000, 0x2, 0xe, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000001c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) 2018/04/12 18:27:50 executing program 3: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0x97}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x7, 0xfffffffc, 0xcce0ecd, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0x39}, 0xffffffffffffff75) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x705000, 0x2, 0xe, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000001c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) 2018/04/12 18:27:50 executing program 4: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0x97}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x7, 0xfffffffc, 0xcce0ecd, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0x39}, 0xffffffffffffff75) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x705000, 0x2, 0xe, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000001c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) 2018/04/12 18:27:51 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) faccessat(r2, &(0x7f0000000100)='./file0\x00', 0x20, 0xa00) setreuid(0x0, r1) keyctl$session_to_parent(0x12) 2018/04/12 18:27:51 executing program 3: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0x97}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x7, 0xfffffffc, 0xcce0ecd, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0x39}, 0xffffffffffffff75) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x705000, 0x2, 0xe, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000001c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) 2018/04/12 18:27:51 executing program 6: r0 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0xaf01, &(0x7f0000000100)) r2 = eventfd(0x80000002) write$eventfd(r2, &(0x7f0000000080)=0xffffffffffffff90, 0x8) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000857ff8)={0x0, r2}) write$eventfd(r2, &(0x7f0000000040), 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='IPVS\x00') r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/loop-control\x00', 0x900, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = socket$inet(0x2, 0x3, 0x8) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r6 = dup3(r5, r3, 0x80000) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000080)={0x2, r3, 0xfffffffffffffffe}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) ioctl$sock_inet_tcp_SIOCATMARK(r7, 0x8905, &(0x7f00000002c0)) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@loopback}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) write$cgroup_pid(r8, &(0x7f0000000100)=ANY=[], 0x1023c) truncate(&(0x7f0000000140)='./file0\x00', 0x3) write(r8, &(0x7f0000000180)="15", 0x1) fallocate(0xffffffffffffffff, 0x0, 0xffff, 0x9) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) close(r0) open(&(0x7f0000000100)='./file0\x00', 0x200, 0x80) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x0, 0x0) 2018/04/12 18:27:51 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) faccessat(r2, &(0x7f0000000100)='./file0\x00', 0x20, 0xa00) setreuid(0x0, r1) keyctl$session_to_parent(0x12) 2018/04/12 18:27:51 executing program 4: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0x97}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x7, 0xfffffffc, 0xcce0ecd, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0x39}, 0xffffffffffffff75) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x705000, 0x2, 0xe, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000001c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) 2018/04/12 18:27:51 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40082404, 0xffffffffffffffff) 2018/04/12 18:27:51 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/12 18:27:51 executing program 1: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) tkill(r0, 0x1000000000016) 2018/04/12 18:27:51 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) tkill(r0, 0x1000000000016) 2018/04/12 18:27:51 executing program 7: r0 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0xaf01, &(0x7f0000000100)) r2 = eventfd(0x80000002) write$eventfd(r2, &(0x7f0000000080)=0xffffffffffffff90, 0x8) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000857ff8)={0x0, r2}) write$eventfd(r2, &(0x7f0000000040), 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='IPVS\x00') r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/loop-control\x00', 0x900, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = socket$inet(0x2, 0x3, 0x8) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r6 = dup3(r5, r3, 0x80000) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000080)={0x2, r3, 0xfffffffffffffffe}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) ioctl$sock_inet_tcp_SIOCATMARK(r7, 0x8905, &(0x7f00000002c0)) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@loopback}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) write$cgroup_pid(r8, &(0x7f0000000100)=ANY=[], 0x1023c) truncate(&(0x7f0000000140)='./file0\x00', 0x3) write(r8, &(0x7f0000000180)="15", 0x1) fallocate(0xffffffffffffffff, 0x0, 0xffff, 0x9) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) close(r0) open(&(0x7f0000000100)='./file0\x00', 0x200, 0x80) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x0, 0x0) 2018/04/12 18:27:51 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40082404, 0xffffffffffffffff) 2018/04/12 18:27:51 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) faccessat(r2, &(0x7f0000000100)='./file0\x00', 0x20, 0xa00) setreuid(0x0, r1) keyctl$session_to_parent(0x12) 2018/04/12 18:27:51 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40082404, 0xffffffffffffffff) 2018/04/12 18:27:51 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) faccessat(r2, &(0x7f0000000100)='./file0\x00', 0x20, 0xa00) setreuid(0x0, r1) keyctl$session_to_parent(0x12) 2018/04/12 18:27:51 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40082404, 0xffffffffffffffff) 2018/04/12 18:27:51 executing program 2: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000023000)={&(0x7f0000000040)={0x14}, 0x14}, 0x1}, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', @ifru_data=&(0x7f0000000000)="ac8be4abd0f79d6325ae476aab5970a3131f2fb4bbfb3c75500e33d0612f430d"}) 2018/04/12 18:27:51 executing program 4: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1040000000000004, 0x400000a9}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0xfee1dead, 0x28121969, 0x1, &(0x7f0000000000)) 2018/04/12 18:27:51 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000fef000/0x2000)=nil}) [ 297.518685] x86/PAT: syz-executor3:19823 map pfn RAM range req write-combining for [mem 0x195360000-0x195363fff], got write-back [ 297.542710] x86/PAT: syz-executor3:19825 map pfn RAM range req write-combining for [mem 0x195360000-0x195363fff], got write-back 2018/04/12 18:27:52 executing program 6: r0 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0xaf01, &(0x7f0000000100)) r2 = eventfd(0x80000002) write$eventfd(r2, &(0x7f0000000080)=0xffffffffffffff90, 0x8) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000857ff8)={0x0, r2}) write$eventfd(r2, &(0x7f0000000040), 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='IPVS\x00') r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/loop-control\x00', 0x900, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = socket$inet(0x2, 0x3, 0x8) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r6 = dup3(r5, r3, 0x80000) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000080)={0x2, r3, 0xfffffffffffffffe}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) ioctl$sock_inet_tcp_SIOCATMARK(r7, 0x8905, &(0x7f00000002c0)) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@loopback}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) write$cgroup_pid(r8, &(0x7f0000000100)=ANY=[], 0x1023c) truncate(&(0x7f0000000140)='./file0\x00', 0x3) write(r8, &(0x7f0000000180)="15", 0x1) fallocate(0xffffffffffffffff, 0x0, 0xffff, 0x9) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) close(r0) open(&(0x7f0000000100)='./file0\x00', 0x200, 0x80) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x0, 0x0) 2018/04/12 18:27:52 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000100000028000007a0a00fffffffffd6301"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x2b6, &(0x7f0000000300)=""/187}, 0x48) 2018/04/12 18:27:52 executing program 4: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1040000000000004, 0x400000a9}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0xfee1dead, 0x28121969, 0x1, &(0x7f0000000000)) 2018/04/12 18:27:52 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000fef000/0x2000)=nil}) 2018/04/12 18:27:52 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/12 18:27:52 executing program 1: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) tkill(r0, 0x1000000000016) 2018/04/12 18:27:52 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) tkill(r0, 0x1000000000016) 2018/04/12 18:27:52 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000fef000/0x2000)=nil}) 2018/04/12 18:27:52 executing program 4: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1040000000000004, 0x400000a9}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0xfee1dead, 0x28121969, 0x1, &(0x7f0000000000)) 2018/04/12 18:27:52 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000100000028000007a0a00fffffffffd6301"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x2b6, &(0x7f0000000300)=""/187}, 0x48) 2018/04/12 18:27:52 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000fef000/0x2000)=nil}) [ 298.347065] x86/PAT: syz-executor3:19839 map pfn RAM range req write-combining for [mem 0x1d2cb0000-0x1d2cb3fff], got write-back [ 298.367154] x86/PAT: syz-executor7:19851 map pfn RAM range req write-combining for [mem 0x1d2ce0000-0x1d2ce3fff], got write-back 2018/04/12 18:27:52 executing program 4: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1040000000000004, 0x400000a9}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0xfee1dead, 0x28121969, 0x1, &(0x7f0000000000)) 2018/04/12 18:27:52 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000100000028000007a0a00fffffffffd6301"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x2b6, &(0x7f0000000300)=""/187}, 0x48) 2018/04/12 18:27:52 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000fef000/0x2000)=nil}) [ 298.461343] x86/PAT: syz-executor3:19859 map pfn RAM range req write-combining for [mem 0x195a20000-0x195a23fff], got write-back 2018/04/12 18:27:52 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000fef000/0x2000)=nil}) 2018/04/12 18:27:52 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, &(0x7f0000000900)={0x27, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x0, "03f4d9931e3bc0a8428581e03ee18838304e624ee8fc12f8abbd026dfd9763ec8618cc07cf99f95baf3052333a69cad313a83de05bce39ab5730be8dda2cb9"}, 0x60) [ 298.525460] x86/PAT: syz-executor7:19866 map pfn RAM range req write-combining for [mem 0x1d2cd0000-0x1d2cd3fff], got write-back [ 298.563566] x86/PAT: syz-executor3:19868 map pfn RAM range req write-combining for [mem 0x1cbba0000-0x1cbba3fff], got write-back 2018/04/12 18:27:53 executing program 1: clone(0x143b9d8157eb999c, &(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) 2018/04/12 18:27:53 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000100000028000007a0a00fffffffffd6301"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x2b6, &(0x7f0000000300)=""/187}, 0x48) 2018/04/12 18:27:53 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f7c000), &(0x7f00004a7ffe)=0x4) 2018/04/12 18:27:53 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, &(0x7f0000000900)={0x27, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x0, "03f4d9931e3bc0a8428581e03ee18838304e624ee8fc12f8abbd026dfd9763ec8618cc07cf99f95baf3052333a69cad313a83de05bce39ab5730be8dda2cb9"}, 0x60) 2018/04/12 18:27:53 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000fef000/0x2000)=nil}) 2018/04/12 18:27:53 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r0, r0, 0x0, 0x364) r1 = dup(r0) sendfile(r1, r0, &(0x7f0000000040), 0x3) 2018/04/12 18:27:53 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000086fff4)) r3 = getpgrp(0xffffffffffffffff) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f0000000000)={r2, r1}) 2018/04/12 18:27:53 executing program 6: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x20b}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x20000000, 0x6f2000, 0x2, &(0x7f0000000000)) 2018/04/12 18:27:53 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f7c000), &(0x7f00004a7ffe)=0x4) 2018/04/12 18:27:53 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, &(0x7f0000000900)={0x27, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x0, "03f4d9931e3bc0a8428581e03ee18838304e624ee8fc12f8abbd026dfd9763ec8618cc07cf99f95baf3052333a69cad313a83de05bce39ab5730be8dda2cb9"}, 0x60) 2018/04/12 18:27:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003e4000)={&(0x7f0000e87000)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f0000183fcc)=@ipmr_newroute={0x24, 0x18, 0xc21, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_SRC={0x8, 0x2, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) [ 299.430648] x86/PAT: syz-executor7:19893 map pfn RAM range req write-combining for [mem 0x194290000-0x194293fff], got write-back 2018/04/12 18:27:53 executing program 1: clone(0x143b9d8157eb999c, &(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) 2018/04/12 18:27:53 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r0, r0, 0x0, 0x364) r1 = dup(r0) sendfile(r1, r0, &(0x7f0000000040), 0x3) 2018/04/12 18:27:53 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r0, r0, 0x0, 0x364) r1 = dup(r0) sendfile(r1, r0, &(0x7f0000000040), 0x3) 2018/04/12 18:27:53 executing program 6: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x20b}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x20000000, 0x6f2000, 0x2, &(0x7f0000000000)) 2018/04/12 18:27:53 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f7c000), &(0x7f00004a7ffe)=0x4) 2018/04/12 18:27:53 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, &(0x7f0000000900)={0x27, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x0, "03f4d9931e3bc0a8428581e03ee18838304e624ee8fc12f8abbd026dfd9763ec8618cc07cf99f95baf3052333a69cad313a83de05bce39ab5730be8dda2cb9"}, 0x60) 2018/04/12 18:27:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003e4000)={&(0x7f0000e87000)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f0000183fcc)=@ipmr_newroute={0x24, 0x18, 0xc21, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_SRC={0x8, 0x2, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/04/12 18:27:53 executing program 7: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x10, &(0x7f0000000600), 0x0, &(0x7f0000002040)}}], 0x2, 0x0) 2018/04/12 18:27:53 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f7c000), &(0x7f00004a7ffe)=0x4) 2018/04/12 18:27:54 executing program 7: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x10, &(0x7f0000000600), 0x0, &(0x7f0000002040)}}], 0x2, 0x0) 2018/04/12 18:27:54 executing program 1: clone(0x143b9d8157eb999c, &(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) 2018/04/12 18:27:54 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r0, r0, 0x0, 0x364) r1 = dup(r0) sendfile(r1, r0, &(0x7f0000000040), 0x3) 2018/04/12 18:27:54 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r0, r0, 0x0, 0x364) r1 = dup(r0) sendfile(r1, r0, &(0x7f0000000040), 0x3) 2018/04/12 18:27:54 executing program 6: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x20b}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x20000000, 0x6f2000, 0x2, &(0x7f0000000000)) 2018/04/12 18:27:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003e4000)={&(0x7f0000e87000)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f0000183fcc)=@ipmr_newroute={0x24, 0x18, 0xc21, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_SRC={0x8, 0x2, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/04/12 18:27:54 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r0, r0, 0x0, 0x364) r1 = dup(r0) sendfile(r1, r0, &(0x7f0000000040), 0x3) 2018/04/12 18:27:54 executing program 7: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x10, &(0x7f0000000600), 0x0, &(0x7f0000002040)}}], 0x2, 0x0) 2018/04/12 18:27:54 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x10, &(0x7f0000000600), 0x0, &(0x7f0000002040)}}], 0x2, 0x0) 2018/04/12 18:27:54 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r0, r0, 0x0, 0x364) r1 = dup(r0) sendfile(r1, r0, &(0x7f0000000040), 0x3) 2018/04/12 18:27:54 executing program 1: clone(0x143b9d8157eb999c, &(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) 2018/04/12 18:27:54 executing program 6: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x20b}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x20000000, 0x6f2000, 0x2, &(0x7f0000000000)) 2018/04/12 18:27:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003e4000)={&(0x7f0000e87000)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f0000183fcc)=@ipmr_newroute={0x24, 0x18, 0xc21, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_SRC={0x8, 0x2, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/04/12 18:27:54 executing program 4: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x211}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x2, 0x2, 0x705000, &(0x7f0000000000)) socketpair$inet_icmp(0x16, 0x6, 0x705000, &(0x7f0000000180)) 2018/04/12 18:27:54 executing program 7: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x10, &(0x7f0000000600), 0x0, &(0x7f0000002040)}}], 0x2, 0x0) 2018/04/12 18:27:54 executing program 1: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="4244d6e42a80d6e42a87010000050003000007fa0c00024c", 0x18, 0x400}], 0x0, &(0x7f0000000780)=ANY=[]) 2018/04/12 18:27:54 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x10, &(0x7f0000000600), 0x0, &(0x7f0000002040)}}], 0x2, 0x0) 2018/04/12 18:27:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000d32fc0), 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x5f) sync() ioprio_set$pid(0x0, 0x0, 0x4001) r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80, 0xfffffffffffffffd}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a, 0x8000, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000400)={{0xd2, 0x5}, 'port0\x00', 0x8, 0x10000, 0x4, 0x3, 0x2, 0x8001, 0x2, 0x0, 0x0, 0xffffffffffffffc0}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000005c0)={{0x3, 0x63}, 'port0\x00', 0x10, 0x10401, 0x100, 0x229, 0x7f, 0xffffffffffffffc0, 0x80000000, 0x0, 0x2, 0x3}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000000c0)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000000)={{}, 'port1\x00'}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0x80, @time, 0x0, {0xfff, 0x7}, 0x0, 0x0, 0x3e8}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @rand_addr}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) fcntl$getownex(r1, 0x10, &(0x7f0000000540)={0x0, 0x0}) ptrace$peek(0x2, r4, &(0x7f0000000580)) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r5 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000044ff6)='./control\x00', 0x0) r6 = fanotify_init(0x4, 0x800) fanotify_mark(r6, 0x32, 0x40000002, r5, &(0x7f0000000000)='./control\x00') setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000680)={r3, 0x1, 0xfffffffffffffca9, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0xff96) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000240)) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/89) 2018/04/12 18:27:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) sendto$inet(r0, &(0x7f0000f7db7f), 0x0, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/12 18:27:54 executing program 6: r0 = socket$inet6(0x2b, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@nl=@kern={0x10}, 0xc) 2018/04/12 18:27:54 executing program 4: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x211}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x2, 0x2, 0x705000, &(0x7f0000000000)) socketpair$inet_icmp(0x16, 0x6, 0x705000, &(0x7f0000000180)) [ 300.017746] hfs: bad allocation block size 201327180 [ 300.023170] hfs: can't find a HFS filesystem on dev loop1 [ 300.094485] hfs: bad allocation block size 201327180 [ 300.099711] hfs: can't find a HFS filesystem on dev loop1 2018/04/12 18:27:55 executing program 1: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="4244d6e42a80d6e42a87010000050003000007fa0c00024c", 0x18, 0x400}], 0x0, &(0x7f0000000780)=ANY=[]) 2018/04/12 18:27:55 executing program 6: r0 = socket$inet6(0x2b, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@nl=@kern={0x10}, 0xc) 2018/04/12 18:27:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100400000106, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) writev(r1, &(0x7f000036bfd0)=[{&(0x7f0000b51000)="ebb29c2aa804af640d63b2908439b40213", 0x11}], 0x1) ioctl$TCSETAW(r0, 0x5402, &(0x7f0000cdf000)={0x7ff}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x401) read(r0, &(0x7f0000000080)=""/1, 0x1) ioctl$TCSETA(r1, 0x5402, &(0x7f0000a26fec)) 2018/04/12 18:27:55 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x10, &(0x7f0000000600), 0x0, &(0x7f0000002040)}}], 0x2, 0x0) 2018/04/12 18:27:55 executing program 4: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x211}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x2, 0x2, 0x705000, &(0x7f0000000000)) socketpair$inet_icmp(0x16, 0x6, 0x705000, &(0x7f0000000180)) 2018/04/12 18:27:55 executing program 7: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x211}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x2, 0x2, 0x705000, &(0x7f0000000000)) socketpair$inet_icmp(0x16, 0x6, 0x705000, &(0x7f0000000180)) 2018/04/12 18:27:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000d32fc0), 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x5f) sync() ioprio_set$pid(0x0, 0x0, 0x4001) r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80, 0xfffffffffffffffd}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a, 0x8000, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000400)={{0xd2, 0x5}, 'port0\x00', 0x8, 0x10000, 0x4, 0x3, 0x2, 0x8001, 0x2, 0x0, 0x0, 0xffffffffffffffc0}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000005c0)={{0x3, 0x63}, 'port0\x00', 0x10, 0x10401, 0x100, 0x229, 0x7f, 0xffffffffffffffc0, 0x80000000, 0x0, 0x2, 0x3}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000000c0)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000000)={{}, 'port1\x00'}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0x80, @time, 0x0, {0xfff, 0x7}, 0x0, 0x0, 0x3e8}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @rand_addr}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) fcntl$getownex(r1, 0x10, &(0x7f0000000540)={0x0, 0x0}) ptrace$peek(0x2, r4, &(0x7f0000000580)) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r5 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000044ff6)='./control\x00', 0x0) r6 = fanotify_init(0x4, 0x800) fanotify_mark(r6, 0x32, 0x40000002, r5, &(0x7f0000000000)='./control\x00') setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000680)={r3, 0x1, 0xfffffffffffffca9, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0xff96) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000240)) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/89) 2018/04/12 18:27:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000d32fc0), 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x5f) sync() ioprio_set$pid(0x0, 0x0, 0x4001) r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80, 0xfffffffffffffffd}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a, 0x8000, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000400)={{0xd2, 0x5}, 'port0\x00', 0x8, 0x10000, 0x4, 0x3, 0x2, 0x8001, 0x2, 0x0, 0x0, 0xffffffffffffffc0}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000005c0)={{0x3, 0x63}, 'port0\x00', 0x10, 0x10401, 0x100, 0x229, 0x7f, 0xffffffffffffffc0, 0x80000000, 0x0, 0x2, 0x3}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000000c0)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000000)={{}, 'port1\x00'}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0x80, @time, 0x0, {0xfff, 0x7}, 0x0, 0x0, 0x3e8}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @rand_addr}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) fcntl$getownex(r1, 0x10, &(0x7f0000000540)={0x0, 0x0}) ptrace$peek(0x2, r4, &(0x7f0000000580)) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r5 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000044ff6)='./control\x00', 0x0) r6 = fanotify_init(0x4, 0x800) fanotify_mark(r6, 0x32, 0x40000002, r5, &(0x7f0000000000)='./control\x00') setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000680)={r3, 0x1, 0xfffffffffffffca9, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0xff96) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000240)) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/89) 2018/04/12 18:27:55 executing program 6: r0 = socket$inet6(0x2b, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@nl=@kern={0x10}, 0xc) 2018/04/12 18:27:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000d32fc0), 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x5f) sync() ioprio_set$pid(0x0, 0x0, 0x4001) r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80, 0xfffffffffffffffd}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a, 0x8000, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000400)={{0xd2, 0x5}, 'port0\x00', 0x8, 0x10000, 0x4, 0x3, 0x2, 0x8001, 0x2, 0x0, 0x0, 0xffffffffffffffc0}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000005c0)={{0x3, 0x63}, 'port0\x00', 0x10, 0x10401, 0x100, 0x229, 0x7f, 0xffffffffffffffc0, 0x80000000, 0x0, 0x2, 0x3}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000000c0)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000000)={{}, 'port1\x00'}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0x80, @time, 0x0, {0xfff, 0x7}, 0x0, 0x0, 0x3e8}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @rand_addr}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) fcntl$getownex(r1, 0x10, &(0x7f0000000540)={0x0, 0x0}) ptrace$peek(0x2, r4, &(0x7f0000000580)) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r5 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000044ff6)='./control\x00', 0x0) r6 = fanotify_init(0x4, 0x800) fanotify_mark(r6, 0x32, 0x40000002, r5, &(0x7f0000000000)='./control\x00') setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000680)={r3, 0x1, 0xfffffffffffffca9, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0xff96) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000240)) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/89) [ 301.193134] hfs: bad allocation block size 201327180 [ 301.198383] hfs: can't find a HFS filesystem on dev loop1 2018/04/12 18:27:55 executing program 4: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x211}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x2, 0x2, 0x705000, &(0x7f0000000000)) socketpair$inet_icmp(0x16, 0x6, 0x705000, &(0x7f0000000180)) 2018/04/12 18:27:55 executing program 7: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x211}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x2, 0x2, 0x705000, &(0x7f0000000000)) socketpair$inet_icmp(0x16, 0x6, 0x705000, &(0x7f0000000180)) 2018/04/12 18:27:55 executing program 6: r0 = socket$inet6(0x2b, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@nl=@kern={0x10}, 0xc) 2018/04/12 18:27:55 executing program 1: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="4244d6e42a80d6e42a87010000050003000007fa0c00024c", 0x18, 0x400}], 0x0, &(0x7f0000000780)=ANY=[]) 2018/04/12 18:27:55 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000d32fc0), 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x5f) sync() ioprio_set$pid(0x0, 0x0, 0x4001) r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80, 0xfffffffffffffffd}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a, 0x8000, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000400)={{0xd2, 0x5}, 'port0\x00', 0x8, 0x10000, 0x4, 0x3, 0x2, 0x8001, 0x2, 0x0, 0x0, 0xffffffffffffffc0}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000005c0)={{0x3, 0x63}, 'port0\x00', 0x10, 0x10401, 0x100, 0x229, 0x7f, 0xffffffffffffffc0, 0x80000000, 0x0, 0x2, 0x3}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000000c0)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000000)={{}, 'port1\x00'}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0x80, @time, 0x0, {0xfff, 0x7}, 0x0, 0x0, 0x3e8}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @rand_addr}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) fcntl$getownex(r1, 0x10, &(0x7f0000000540)={0x0, 0x0}) ptrace$peek(0x2, r4, &(0x7f0000000580)) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r5 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000044ff6)='./control\x00', 0x0) r6 = fanotify_init(0x4, 0x800) fanotify_mark(r6, 0x32, 0x40000002, r5, &(0x7f0000000000)='./control\x00') setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000680)={r3, 0x1, 0xfffffffffffffca9, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0xff96) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000240)) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/89) 2018/04/12 18:27:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000d32fc0), 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x5f) sync() ioprio_set$pid(0x0, 0x0, 0x4001) r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80, 0xfffffffffffffffd}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a, 0x8000, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000400)={{0xd2, 0x5}, 'port0\x00', 0x8, 0x10000, 0x4, 0x3, 0x2, 0x8001, 0x2, 0x0, 0x0, 0xffffffffffffffc0}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000005c0)={{0x3, 0x63}, 'port0\x00', 0x10, 0x10401, 0x100, 0x229, 0x7f, 0xffffffffffffffc0, 0x80000000, 0x0, 0x2, 0x3}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000000c0)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000000)={{}, 'port1\x00'}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0x80, @time, 0x0, {0xfff, 0x7}, 0x0, 0x0, 0x3e8}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @rand_addr}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) fcntl$getownex(r1, 0x10, &(0x7f0000000540)={0x0, 0x0}) ptrace$peek(0x2, r4, &(0x7f0000000580)) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r5 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000044ff6)='./control\x00', 0x0) r6 = fanotify_init(0x4, 0x800) fanotify_mark(r6, 0x32, 0x40000002, r5, &(0x7f0000000000)='./control\x00') setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000680)={r3, 0x1, 0xfffffffffffffca9, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0xff96) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000240)) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/89) 2018/04/12 18:27:55 executing program 7: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x211}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x2, 0x2, 0x705000, &(0x7f0000000000)) socketpair$inet_icmp(0x16, 0x6, 0x705000, &(0x7f0000000180)) [ 301.375077] hfs: bad allocation block size 201327180 [ 301.380338] hfs: can't find a HFS filesystem on dev loop1 2018/04/12 18:27:55 executing program 1: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="4244d6e42a80d6e42a87010000050003000007fa0c00024c", 0x18, 0x400}], 0x0, &(0x7f0000000780)=ANY=[]) [ 301.498832] hfs: bad allocation block size 201327180 [ 301.504105] hfs: can't find a HFS filesystem on dev loop1 2018/04/12 18:27:56 executing program 7: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r1) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="05", 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0x0, 0x0) 2018/04/12 18:27:56 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x78, 0x0, 0x100000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='\f5') 2018/04/12 18:27:56 executing program 1: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x2c871, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='/exe\x00\x00\x00\x00\x00\x00') fcntl$setstatus(r0, 0x4, 0x4000000000046800) io_setup(0x8, &(0x7f0000000080)=0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x6, 0x200, 0x2, 0x80, 0x3, 0x3, 0x1, 0x8a, 0x0}, &(0x7f0000000140)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r2, @in={{0x2, 0x4e24}}, 0x7, 0xfffffffffffffffe, 0x200, 0x4}, 0x98) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000a00)="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", 0x800}]) rt_sigprocmask(0x0, &(0x7f0000000240)={0x3ff}, &(0x7f0000000280), 0x8) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x30, r0, 0x0) 2018/04/12 18:27:56 executing program 7: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r1) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="05", 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0x0, 0x0) 2018/04/12 18:27:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000d32fc0), 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x5f) sync() ioprio_set$pid(0x0, 0x0, 0x4001) r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80, 0xfffffffffffffffd}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a, 0x8000, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000400)={{0xd2, 0x5}, 'port0\x00', 0x8, 0x10000, 0x4, 0x3, 0x2, 0x8001, 0x2, 0x0, 0x0, 0xffffffffffffffc0}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000005c0)={{0x3, 0x63}, 'port0\x00', 0x10, 0x10401, 0x100, 0x229, 0x7f, 0xffffffffffffffc0, 0x80000000, 0x0, 0x2, 0x3}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000000c0)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000000)={{}, 'port1\x00'}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0x80, @time, 0x0, {0xfff, 0x7}, 0x0, 0x0, 0x3e8}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @rand_addr}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) fcntl$getownex(r1, 0x10, &(0x7f0000000540)={0x0, 0x0}) ptrace$peek(0x2, r4, &(0x7f0000000580)) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r5 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000044ff6)='./control\x00', 0x0) r6 = fanotify_init(0x4, 0x800) fanotify_mark(r6, 0x32, 0x40000002, r5, &(0x7f0000000000)='./control\x00') setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000680)={r3, 0x1, 0xfffffffffffffca9, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0xff96) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000240)) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/89) 2018/04/12 18:27:56 executing program 7: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r1) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="05", 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0x0, 0x0) 2018/04/12 18:27:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000d32fc0), 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x5f) sync() ioprio_set$pid(0x0, 0x0, 0x4001) r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80, 0xfffffffffffffffd}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a, 0x8000, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000400)={{0xd2, 0x5}, 'port0\x00', 0x8, 0x10000, 0x4, 0x3, 0x2, 0x8001, 0x2, 0x0, 0x0, 0xffffffffffffffc0}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000005c0)={{0x3, 0x63}, 'port0\x00', 0x10, 0x10401, 0x100, 0x229, 0x7f, 0xffffffffffffffc0, 0x80000000, 0x0, 0x2, 0x3}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000000c0)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000000)={{}, 'port1\x00'}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0x80, @time, 0x0, {0xfff, 0x7}, 0x0, 0x0, 0x3e8}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @rand_addr}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) fcntl$getownex(r1, 0x10, &(0x7f0000000540)={0x0, 0x0}) ptrace$peek(0x2, r4, &(0x7f0000000580)) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r5 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000044ff6)='./control\x00', 0x0) r6 = fanotify_init(0x4, 0x800) fanotify_mark(r6, 0x32, 0x40000002, r5, &(0x7f0000000000)='./control\x00') setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000680)={r3, 0x1, 0xfffffffffffffca9, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0xff96) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000240)) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/89) 2018/04/12 18:27:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000d32fc0), 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x5f) sync() ioprio_set$pid(0x0, 0x0, 0x4001) r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80, 0xfffffffffffffffd}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a, 0x8000, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000400)={{0xd2, 0x5}, 'port0\x00', 0x8, 0x10000, 0x4, 0x3, 0x2, 0x8001, 0x2, 0x0, 0x0, 0xffffffffffffffc0}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000005c0)={{0x3, 0x63}, 'port0\x00', 0x10, 0x10401, 0x100, 0x229, 0x7f, 0xffffffffffffffc0, 0x80000000, 0x0, 0x2, 0x3}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000000c0)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000000)={{}, 'port1\x00'}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0x80, @time, 0x0, {0xfff, 0x7}, 0x0, 0x0, 0x3e8}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @rand_addr}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) fcntl$getownex(r1, 0x10, &(0x7f0000000540)={0x0, 0x0}) ptrace$peek(0x2, r4, &(0x7f0000000580)) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r5 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000044ff6)='./control\x00', 0x0) r6 = fanotify_init(0x4, 0x800) fanotify_mark(r6, 0x32, 0x40000002, r5, &(0x7f0000000000)='./control\x00') setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000680)={r3, 0x1, 0xfffffffffffffca9, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0xff96) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000240)) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/89) 2018/04/12 18:27:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000d32fc0), 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x5f) sync() ioprio_set$pid(0x0, 0x0, 0x4001) r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80, 0xfffffffffffffffd}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a, 0x8000, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000400)={{0xd2, 0x5}, 'port0\x00', 0x8, 0x10000, 0x4, 0x3, 0x2, 0x8001, 0x2, 0x0, 0x0, 0xffffffffffffffc0}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000005c0)={{0x3, 0x63}, 'port0\x00', 0x10, 0x10401, 0x100, 0x229, 0x7f, 0xffffffffffffffc0, 0x80000000, 0x0, 0x2, 0x3}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000000c0)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000000)={{}, 'port1\x00'}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0x80, @time, 0x0, {0xfff, 0x7}, 0x0, 0x0, 0x3e8}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @rand_addr}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) fcntl$getownex(r1, 0x10, &(0x7f0000000540)={0x0, 0x0}) ptrace$peek(0x2, r4, &(0x7f0000000580)) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r5 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000044ff6)='./control\x00', 0x0) r6 = fanotify_init(0x4, 0x800) fanotify_mark(r6, 0x32, 0x40000002, r5, &(0x7f0000000000)='./control\x00') setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000680)={r3, 0x1, 0xfffffffffffffca9, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0xff96) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000240)) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/89) 2018/04/12 18:27:56 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x78, 0x0, 0x100000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='\f5') 2018/04/12 18:27:56 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000d32fc0), 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x5f) sync() ioprio_set$pid(0x0, 0x0, 0x4001) r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80, 0xfffffffffffffffd}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a, 0x8000, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000400)={{0xd2, 0x5}, 'port0\x00', 0x8, 0x10000, 0x4, 0x3, 0x2, 0x8001, 0x2, 0x0, 0x0, 0xffffffffffffffc0}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000005c0)={{0x3, 0x63}, 'port0\x00', 0x10, 0x10401, 0x100, 0x229, 0x7f, 0xffffffffffffffc0, 0x80000000, 0x0, 0x2, 0x3}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000000c0)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000000)={{}, 'port1\x00'}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0x80, @time, 0x0, {0xfff, 0x7}, 0x0, 0x0, 0x3e8}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @rand_addr}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) fcntl$getownex(r1, 0x10, &(0x7f0000000540)={0x0, 0x0}) ptrace$peek(0x2, r4, &(0x7f0000000580)) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r5 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000044ff6)='./control\x00', 0x0) r6 = fanotify_init(0x4, 0x800) fanotify_mark(r6, 0x32, 0x40000002, r5, &(0x7f0000000000)='./control\x00') setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000680)={r3, 0x1, 0xfffffffffffffca9, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0xff96) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000240)) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/89) 2018/04/12 18:27:56 executing program 1: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x2c871, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='/exe\x00\x00\x00\x00\x00\x00') fcntl$setstatus(r0, 0x4, 0x4000000000046800) io_setup(0x8, &(0x7f0000000080)=0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x6, 0x200, 0x2, 0x80, 0x3, 0x3, 0x1, 0x8a, 0x0}, &(0x7f0000000140)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r2, @in={{0x2, 0x4e24}}, 0x7, 0xfffffffffffffffe, 0x200, 0x4}, 0x98) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000a00)="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", 0x800}]) rt_sigprocmask(0x0, &(0x7f0000000240)={0x3ff}, &(0x7f0000000280), 0x8) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x30, r0, 0x0) 2018/04/12 18:27:58 executing program 7: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r1) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="05", 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0x0, 0x0) 2018/04/12 18:27:58 executing program 1: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x2c871, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='/exe\x00\x00\x00\x00\x00\x00') fcntl$setstatus(r0, 0x4, 0x4000000000046800) io_setup(0x8, &(0x7f0000000080)=0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x6, 0x200, 0x2, 0x80, 0x3, 0x3, 0x1, 0x8a, 0x0}, &(0x7f0000000140)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r2, @in={{0x2, 0x4e24}}, 0x7, 0xfffffffffffffffe, 0x200, 0x4}, 0x98) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000a00)="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", 0x800}]) rt_sigprocmask(0x0, &(0x7f0000000240)={0x3ff}, &(0x7f0000000280), 0x8) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x30, r0, 0x0) 2018/04/12 18:27:58 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x78, 0x0, 0x100000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='\f5') 2018/04/12 18:27:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000d32fc0), 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x5f) sync() ioprio_set$pid(0x0, 0x0, 0x4001) r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80, 0xfffffffffffffffd}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a, 0x8000, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000400)={{0xd2, 0x5}, 'port0\x00', 0x8, 0x10000, 0x4, 0x3, 0x2, 0x8001, 0x2, 0x0, 0x0, 0xffffffffffffffc0}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000005c0)={{0x3, 0x63}, 'port0\x00', 0x10, 0x10401, 0x100, 0x229, 0x7f, 0xffffffffffffffc0, 0x80000000, 0x0, 0x2, 0x3}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000000c0)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000000)={{}, 'port1\x00'}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0x80, @time, 0x0, {0xfff, 0x7}, 0x0, 0x0, 0x3e8}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @rand_addr}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) fcntl$getownex(r1, 0x10, &(0x7f0000000540)={0x0, 0x0}) ptrace$peek(0x2, r4, &(0x7f0000000580)) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r5 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000044ff6)='./control\x00', 0x0) r6 = fanotify_init(0x4, 0x800) fanotify_mark(r6, 0x32, 0x40000002, r5, &(0x7f0000000000)='./control\x00') setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000680)={r3, 0x1, 0xfffffffffffffca9, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0xff96) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000240)) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/89) 2018/04/12 18:27:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000d32fc0), 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x5f) sync() ioprio_set$pid(0x0, 0x0, 0x4001) r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80, 0xfffffffffffffffd}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a, 0x8000, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000400)={{0xd2, 0x5}, 'port0\x00', 0x8, 0x10000, 0x4, 0x3, 0x2, 0x8001, 0x2, 0x0, 0x0, 0xffffffffffffffc0}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000005c0)={{0x3, 0x63}, 'port0\x00', 0x10, 0x10401, 0x100, 0x229, 0x7f, 0xffffffffffffffc0, 0x80000000, 0x0, 0x2, 0x3}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000000c0)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000000)={{}, 'port1\x00'}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0x80, @time, 0x0, {0xfff, 0x7}, 0x0, 0x0, 0x3e8}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @rand_addr}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) fcntl$getownex(r1, 0x10, &(0x7f0000000540)={0x0, 0x0}) ptrace$peek(0x2, r4, &(0x7f0000000580)) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r5 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000044ff6)='./control\x00', 0x0) r6 = fanotify_init(0x4, 0x800) fanotify_mark(r6, 0x32, 0x40000002, r5, &(0x7f0000000000)='./control\x00') setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000680)={r3, 0x1, 0xfffffffffffffca9, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0xff96) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000240)) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/89) 2018/04/12 18:27:58 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000d32fc0), 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x5f) sync() ioprio_set$pid(0x0, 0x0, 0x4001) r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80, 0xfffffffffffffffd}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a, 0x8000, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000400)={{0xd2, 0x5}, 'port0\x00', 0x8, 0x10000, 0x4, 0x3, 0x2, 0x8001, 0x2, 0x0, 0x0, 0xffffffffffffffc0}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000005c0)={{0x3, 0x63}, 'port0\x00', 0x10, 0x10401, 0x100, 0x229, 0x7f, 0xffffffffffffffc0, 0x80000000, 0x0, 0x2, 0x3}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000000c0)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000000)={{}, 'port1\x00'}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0x80, @time, 0x0, {0xfff, 0x7}, 0x0, 0x0, 0x3e8}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @rand_addr}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) fcntl$getownex(r1, 0x10, &(0x7f0000000540)={0x0, 0x0}) ptrace$peek(0x2, r4, &(0x7f0000000580)) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r5 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000044ff6)='./control\x00', 0x0) r6 = fanotify_init(0x4, 0x800) fanotify_mark(r6, 0x32, 0x40000002, r5, &(0x7f0000000000)='./control\x00') setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000680)={r3, 0x1, 0xfffffffffffffca9, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0xff96) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000240)) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/89) 2018/04/12 18:27:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000d32fc0), 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x5f) sync() ioprio_set$pid(0x0, 0x0, 0x4001) r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80, 0xfffffffffffffffd}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a, 0x8000, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000400)={{0xd2, 0x5}, 'port0\x00', 0x8, 0x10000, 0x4, 0x3, 0x2, 0x8001, 0x2, 0x0, 0x0, 0xffffffffffffffc0}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000005c0)={{0x3, 0x63}, 'port0\x00', 0x10, 0x10401, 0x100, 0x229, 0x7f, 0xffffffffffffffc0, 0x80000000, 0x0, 0x2, 0x3}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000000c0)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000000)={{}, 'port1\x00'}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0x80, @time, 0x0, {0xfff, 0x7}, 0x0, 0x0, 0x3e8}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @rand_addr}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) fcntl$getownex(r1, 0x10, &(0x7f0000000540)={0x0, 0x0}) ptrace$peek(0x2, r4, &(0x7f0000000580)) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r5 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000044ff6)='./control\x00', 0x0) r6 = fanotify_init(0x4, 0x800) fanotify_mark(r6, 0x32, 0x40000002, r5, &(0x7f0000000000)='./control\x00') setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000680)={r3, 0x1, 0xfffffffffffffca9, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0xff96) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000240)) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/89) 2018/04/12 18:27:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000d32fc0), 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x5f) sync() ioprio_set$pid(0x0, 0x0, 0x4001) r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80, 0xfffffffffffffffd}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a, 0x8000, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000400)={{0xd2, 0x5}, 'port0\x00', 0x8, 0x10000, 0x4, 0x3, 0x2, 0x8001, 0x2, 0x0, 0x0, 0xffffffffffffffc0}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000005c0)={{0x3, 0x63}, 'port0\x00', 0x10, 0x10401, 0x100, 0x229, 0x7f, 0xffffffffffffffc0, 0x80000000, 0x0, 0x2, 0x3}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000000c0)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000000)={{}, 'port1\x00'}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0x80, @time, 0x0, {0xfff, 0x7}, 0x0, 0x0, 0x3e8}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @rand_addr}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) fcntl$getownex(r1, 0x10, &(0x7f0000000540)={0x0, 0x0}) ptrace$peek(0x2, r4, &(0x7f0000000580)) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r5 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000044ff6)='./control\x00', 0x0) r6 = fanotify_init(0x4, 0x800) fanotify_mark(r6, 0x32, 0x40000002, r5, &(0x7f0000000000)='./control\x00') setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000680)={r3, 0x1, 0xfffffffffffffca9, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0xff96) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000240)) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/89) 2018/04/12 18:27:58 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x802, 0x0) accept(r0, &(0x7f0000000040)=@generic, &(0x7f00000000c0)=0x80) 2018/04/12 18:27:58 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x78, 0x0, 0x100000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='\f5') 2018/04/12 18:27:58 executing program 1: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x2c871, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='/exe\x00\x00\x00\x00\x00\x00') fcntl$setstatus(r0, 0x4, 0x4000000000046800) io_setup(0x8, &(0x7f0000000080)=0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x6, 0x200, 0x2, 0x80, 0x3, 0x3, 0x1, 0x8a, 0x0}, &(0x7f0000000140)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r2, @in={{0x2, 0x4e24}}, 0x7, 0xfffffffffffffffe, 0x200, 0x4}, 0x98) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000a00)="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", 0x800}]) rt_sigprocmask(0x0, &(0x7f0000000240)={0x3ff}, &(0x7f0000000280), 0x8) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x30, r0, 0x0) 2018/04/12 18:27:58 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x802, 0x0) accept(r0, &(0x7f0000000040)=@generic, &(0x7f00000000c0)=0x80) 2018/04/12 18:27:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4000000004d032, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 2018/04/12 18:27:59 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000951000)="2400000032001f1546f9ff7f0000055b090007010c00020050ff01000000000000000000", 0x24) 2018/04/12 18:27:59 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x802, 0x0) accept(r0, &(0x7f0000000040)=@generic, &(0x7f00000000c0)=0x80) 2018/04/12 18:27:59 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(blowfish-asm)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab2719", 0x4) write(r1, &(0x7f0000000000)="791f7dfde08186d67dba3f649a7ba85e30", 0x11) 2018/04/12 18:27:59 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800aa829393e5c9f801f9db006d8215f54f96ca6500ff00b5d118"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f00000004c0)="73797a6b584e3e2f9afed6d0ee3d5d5de2f791e4545b69c564e359a02949ab535c1b25caa665b968d2f1a32e3febe4189befa5f044722bae83e5b6959e392e8d24e41b4ce153c97b5a23e135e38d3b1d14ad7a9eeb7069347fee053569544f1a0000000000000000", 0x80000001, 0x466, &(0x7f0000000300)=""/187}, 0x48) 2018/04/12 18:27:59 executing program 4: syz_emit_ethernet(0x988e518002d8b65, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x2d8b2f, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 2018/04/12 18:27:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfffffffffffffd90, 0x20020003, &(0x7f0000385ff0)={0x2, 0x20000000004e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000769f0f)=""/241, 0xfffffffffffffdd4, 0x0, &(0x7f0000497ff0)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) shutdown(r0, 0x1) read(r0, &(0x7f00000001c0)=""/252, 0xfc) recvfrom$inet(r0, &(0x7f0000000000)=""/149, 0x95, 0x40000001, 0x0, 0x0) 2018/04/12 18:27:59 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f00000001c0)={'bridge0\x00', @ifru_data=&(0x7f0000000000)="bfd94a6fcf8b823785ff9b8f6324c21f918388cf8960cc33442e7292ff1c6f33"}) 2018/04/12 18:27:59 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000951000)="2400000032001f1546f9ff7f0000055b090007010c00020050ff01000000000000000000", 0x24) 2018/04/12 18:27:59 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x802, 0x0) accept(r0, &(0x7f0000000040)=@generic, &(0x7f00000000c0)=0x80) 2018/04/12 18:27:59 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f00000001c0)={'bridge0\x00', @ifru_data=&(0x7f0000000000)="bfd94a6fcf8b823785ff9b8f6324c21f918388cf8960cc33442e7292ff1c6f33"}) 2018/04/12 18:27:59 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800aa829393e5c9f801f9db006d8215f54f96ca6500ff00b5d118"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f00000004c0)="73797a6b584e3e2f9afed6d0ee3d5d5de2f791e4545b69c564e359a02949ab535c1b25caa665b968d2f1a32e3febe4189befa5f044722bae83e5b6959e392e8d24e41b4ce153c97b5a23e135e38d3b1d14ad7a9eeb7069347fee053569544f1a0000000000000000", 0x80000001, 0x466, &(0x7f0000000300)=""/187}, 0x48) 2018/04/12 18:27:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4000000004d032, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 2018/04/12 18:27:59 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(blowfish-asm)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab2719", 0x4) write(r1, &(0x7f0000000000)="791f7dfde08186d67dba3f649a7ba85e30", 0x11) 2018/04/12 18:27:59 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000951000)="2400000032001f1546f9ff7f0000055b090007010c00020050ff01000000000000000000", 0x24) 2018/04/12 18:27:59 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(blowfish-asm)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab2719", 0x4) write(r1, &(0x7f0000000000)="791f7dfde08186d67dba3f649a7ba85e30", 0x11) 2018/04/12 18:27:59 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800aa829393e5c9f801f9db006d8215f54f96ca6500ff00b5d118"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f00000004c0)="73797a6b584e3e2f9afed6d0ee3d5d5de2f791e4545b69c564e359a02949ab535c1b25caa665b968d2f1a32e3febe4189befa5f044722bae83e5b6959e392e8d24e41b4ce153c97b5a23e135e38d3b1d14ad7a9eeb7069347fee053569544f1a0000000000000000", 0x80000001, 0x466, &(0x7f0000000300)=""/187}, 0x48) 2018/04/12 18:27:59 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f00000001c0)={'bridge0\x00', @ifru_data=&(0x7f0000000000)="bfd94a6fcf8b823785ff9b8f6324c21f918388cf8960cc33442e7292ff1c6f33"}) 2018/04/12 18:27:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4000000004d032, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 2018/04/12 18:28:00 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(blowfish-asm)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab2719", 0x4) write(r1, &(0x7f0000000000)="791f7dfde08186d67dba3f649a7ba85e30", 0x11) 2018/04/12 18:28:00 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(blowfish-asm)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab2719", 0x4) write(r1, &(0x7f0000000000)="791f7dfde08186d67dba3f649a7ba85e30", 0x11) 2018/04/12 18:28:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000951000)="2400000032001f1546f9ff7f0000055b090007010c00020050ff01000000000000000000", 0x24) 2018/04/12 18:28:00 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f00000001c0)={'bridge0\x00', @ifru_data=&(0x7f0000000000)="bfd94a6fcf8b823785ff9b8f6324c21f918388cf8960cc33442e7292ff1c6f33"}) 2018/04/12 18:28:00 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800aa829393e5c9f801f9db006d8215f54f96ca6500ff00b5d118"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f00000004c0)="73797a6b584e3e2f9afed6d0ee3d5d5de2f791e4545b69c564e359a02949ab535c1b25caa665b968d2f1a32e3febe4189befa5f044722bae83e5b6959e392e8d24e41b4ce153c97b5a23e135e38d3b1d14ad7a9eeb7069347fee053569544f1a0000000000000000", 0x80000001, 0x466, &(0x7f0000000300)=""/187}, 0x48) 2018/04/12 18:28:00 executing program 4: syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x223, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000000)) 2018/04/12 18:28:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4000000004d032, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 2018/04/12 18:28:00 executing program 5: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'tunl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2018/04/12 18:28:00 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(blowfish-asm)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab2719", 0x4) write(r1, &(0x7f0000000000)="791f7dfde08186d67dba3f649a7ba85e30", 0x11) 2018/04/12 18:28:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="480f21af37528c"], &(0x7f0000000240)=0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000de9000)=[@text32={0x20, &(0x7f0000f59fc6)="0fc75fedc4c3c968fb6c0f9cfbb9040100c00f3266b842008ee80f230064672ec015dec4e245bea5d41e6082f9440f20c03506000000440f22c0", 0x3a}], 0x1, 0x0, &(0x7f0000000180), 0x1ba) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/12 18:28:00 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000cf1ffc)=0x600210) pipe(&(0x7f0000000240)={0xffffffffffffffff}) pipe(&(0x7f0000652ff8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0x8, 0x0) r4 = dup2(r2, r3) ioctl$int_in(r4, 0x5452, &(0x7f0000e35ff8)=0x45) readv(r0, &(0x7f0000001f00)=[{&(0x7f0000001e80)=""/120, 0x78}], 0x1) r5 = getpgrp(0x0) fcntl$setown(r2, 0x8, r5) fcntl$setsig(r3, 0xa, 0x12) tkill(r5, 0x100000000000016) pwritev(r0, &(0x7f0000ed8f70)=[{&(0x7f00007d7f41)='k', 0x1}], 0x1, 0x0) 2018/04/12 18:28:00 executing program 4: unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'erspan0\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000500)={{0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 'syz_tun\x00'}) 2018/04/12 18:28:00 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(blowfish-asm)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab2719", 0x4) write(r1, &(0x7f0000000000)="791f7dfde08186d67dba3f649a7ba85e30", 0x11) 2018/04/12 18:28:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000016000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000001000)={0x14, 0x12, 0x301}, 0x14}, 0x1}, 0x0) recvmsg(r0, &(0x7f000001f000)={&(0x7f000000f000)=@alg, 0x58, &(0x7f000001e000)=[{&(0x7f0000006000)=""/220, 0x14d}, {&(0x7f0000007000)=""/53, 0xa}, {&(0x7f0000017000)=""/128, 0x4f}, {&(0x7f000000f000)=""/4096, 0x1000}, {&(0x7f000001001f)=""/4096, 0xcbb}], 0x5, 0x0, 0x3}, 0x0) 2018/04/12 18:28:00 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@get={0x1, &(0x7f00000002c0)=""/238}) 2018/04/12 18:28:00 executing program 5: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'tunl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2018/04/12 18:28:00 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, {}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100), 0xc) [ 305.983266] IPVS: ftp: loaded support on port[0] = 21 2018/04/12 18:28:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000016000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000001000)={0x14, 0x12, 0x301}, 0x14}, 0x1}, 0x0) recvmsg(r0, &(0x7f000001f000)={&(0x7f000000f000)=@alg, 0x58, &(0x7f000001e000)=[{&(0x7f0000006000)=""/220, 0x14d}, {&(0x7f0000007000)=""/53, 0xa}, {&(0x7f0000017000)=""/128, 0x4f}, {&(0x7f000000f000)=""/4096, 0x1000}, {&(0x7f000001001f)=""/4096, 0xcbb}], 0x5, 0x0, 0x3}, 0x0) 2018/04/12 18:28:00 executing program 6: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000000280)='./file0/control\x00', 0x0) mkdir(&(0x7f0000155ff2)='./file0/file0\x00', 0x0) rename(&(0x7f0000b2a000)='./file0/file0\x00', &(0x7f0000ab3ff0)='./file0/control\x00') 2018/04/12 18:28:00 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x216}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x4c, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000180)) 2018/04/12 18:28:00 executing program 5: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'tunl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2018/04/12 18:28:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="480f21af37528c"], &(0x7f0000000240)=0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000de9000)=[@text32={0x20, &(0x7f0000f59fc6)="0fc75fedc4c3c968fb6c0f9cfbb9040100c00f3266b842008ee80f230064672ec015dec4e245bea5d41e6082f9440f20c03506000000440f22c0", 0x3a}], 0x1, 0x0, &(0x7f0000000180), 0x1ba) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/12 18:28:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000016000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000001000)={0x14, 0x12, 0x301}, 0x14}, 0x1}, 0x0) recvmsg(r0, &(0x7f000001f000)={&(0x7f000000f000)=@alg, 0x58, &(0x7f000001e000)=[{&(0x7f0000006000)=""/220, 0x14d}, {&(0x7f0000007000)=""/53, 0xa}, {&(0x7f0000017000)=""/128, 0x4f}, {&(0x7f000000f000)=""/4096, 0x1000}, {&(0x7f000001001f)=""/4096, 0xcbb}], 0x5, 0x0, 0x3}, 0x0) 2018/04/12 18:28:00 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, {}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100), 0xc) 2018/04/12 18:28:00 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x216}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x4c, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000180)) 2018/04/12 18:28:00 executing program 6: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000000280)='./file0/control\x00', 0x0) mkdir(&(0x7f0000155ff2)='./file0/file0\x00', 0x0) rename(&(0x7f0000b2a000)='./file0/file0\x00', &(0x7f0000ab3ff0)='./file0/control\x00') 2018/04/12 18:28:01 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000cf1ffc)=0x600210) pipe(&(0x7f0000000240)={0xffffffffffffffff}) pipe(&(0x7f0000652ff8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0x8, 0x0) r4 = dup2(r2, r3) ioctl$int_in(r4, 0x5452, &(0x7f0000e35ff8)=0x45) readv(r0, &(0x7f0000001f00)=[{&(0x7f0000001e80)=""/120, 0x78}], 0x1) r5 = getpgrp(0x0) fcntl$setown(r2, 0x8, r5) fcntl$setsig(r3, 0xa, 0x12) tkill(r5, 0x100000000000016) pwritev(r0, &(0x7f0000ed8f70)=[{&(0x7f00007d7f41)='k', 0x1}], 0x1, 0x0) 2018/04/12 18:28:01 executing program 4: unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'erspan0\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000500)={{0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 'syz_tun\x00'}) 2018/04/12 18:28:01 executing program 5: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'tunl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2018/04/12 18:28:01 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, {}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100), 0xc) 2018/04/12 18:28:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000016000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000001000)={0x14, 0x12, 0x301}, 0x14}, 0x1}, 0x0) recvmsg(r0, &(0x7f000001f000)={&(0x7f000000f000)=@alg, 0x58, &(0x7f000001e000)=[{&(0x7f0000006000)=""/220, 0x14d}, {&(0x7f0000007000)=""/53, 0xa}, {&(0x7f0000017000)=""/128, 0x4f}, {&(0x7f000000f000)=""/4096, 0x1000}, {&(0x7f000001001f)=""/4096, 0xcbb}], 0x5, 0x0, 0x3}, 0x0) 2018/04/12 18:28:01 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x216}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x4c, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000180)) 2018/04/12 18:28:01 executing program 6: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000000280)='./file0/control\x00', 0x0) mkdir(&(0x7f0000155ff2)='./file0/file0\x00', 0x0) rename(&(0x7f0000b2a000)='./file0/file0\x00', &(0x7f0000ab3ff0)='./file0/control\x00') 2018/04/12 18:28:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="480f21af37528c"], &(0x7f0000000240)=0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000de9000)=[@text32={0x20, &(0x7f0000f59fc6)="0fc75fedc4c3c968fb6c0f9cfbb9040100c00f3266b842008ee80f230064672ec015dec4e245bea5d41e6082f9440f20c03506000000440f22c0", 0x3a}], 0x1, 0x0, &(0x7f0000000180), 0x1ba) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/12 18:28:01 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000cf1ffc)=0x600210) pipe(&(0x7f0000000240)={0xffffffffffffffff}) pipe(&(0x7f0000652ff8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0x8, 0x0) r4 = dup2(r2, r3) ioctl$int_in(r4, 0x5452, &(0x7f0000e35ff8)=0x45) readv(r0, &(0x7f0000001f00)=[{&(0x7f0000001e80)=""/120, 0x78}], 0x1) r5 = getpgrp(0x0) fcntl$setown(r2, 0x8, r5) fcntl$setsig(r3, 0xa, 0x12) tkill(r5, 0x100000000000016) pwritev(r0, &(0x7f0000ed8f70)=[{&(0x7f00007d7f41)='k', 0x1}], 0x1, 0x0) [ 307.391374] IPVS: ftp: loaded support on port[0] = 21 2018/04/12 18:28:01 executing program 6: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000000280)='./file0/control\x00', 0x0) mkdir(&(0x7f0000155ff2)='./file0/file0\x00', 0x0) rename(&(0x7f0000b2a000)='./file0/file0\x00', &(0x7f0000ab3ff0)='./file0/control\x00') 2018/04/12 18:28:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="480f21af37528c"], &(0x7f0000000240)=0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000de9000)=[@text32={0x20, &(0x7f0000f59fc6)="0fc75fedc4c3c968fb6c0f9cfbb9040100c00f3266b842008ee80f230064672ec015dec4e245bea5d41e6082f9440f20c03506000000440f22c0", 0x3a}], 0x1, 0x0, &(0x7f0000000180), 0x1ba) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/12 18:28:01 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000cf1ffc)=0x600210) pipe(&(0x7f0000000240)={0xffffffffffffffff}) pipe(&(0x7f0000652ff8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0x8, 0x0) r4 = dup2(r2, r3) ioctl$int_in(r4, 0x5452, &(0x7f0000e35ff8)=0x45) readv(r0, &(0x7f0000001f00)=[{&(0x7f0000001e80)=""/120, 0x78}], 0x1) r5 = getpgrp(0x0) fcntl$setown(r2, 0x8, r5) fcntl$setsig(r3, 0xa, 0x12) tkill(r5, 0x100000000000016) pwritev(r0, &(0x7f0000ed8f70)=[{&(0x7f00007d7f41)='k', 0x1}], 0x1, 0x0) 2018/04/12 18:28:01 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, {}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100), 0xc) 2018/04/12 18:28:01 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x216}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x4c, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000180)) 2018/04/12 18:28:01 executing program 7: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@broute={'broute\x00', 0x20, 0x4, 0x7b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001840], 0x0, &(0x7f0000000240), &(0x7f0000001840)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x5, 0x0, 0x0, 'lo\x00', 'bcsf0\x00', 'irlan0\x00', 'ip_vti0\x00', @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x120, 0x1c0, 0x1f8, [@statistic={'statistic\x00', 0x18}, @stp={'stp\x00', 0x48, {{0x0, {0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}, [], 0x0, 0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x680}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x1, 'syz0\x00'}}}, @common=@log={'log\x00', 0x28, {{0x0, "9b2ae9577bc60ee6374850a8ef9f28884c64086bb3142cb86e535618630b"}}}]}, @common=@mark={'mark\x00', 0x10}}, {{{0x5, 0x0, 0x0, 'ifb0\x00', 'erspan0\x00', 'ifb0\x00', 'rose0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x70, 0x1d0, 0x220}, [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:dbusd_exec_t:s0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'bond0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xa0, 0x138, 0x188, [@pkttype={'pkttype\x00', 0x8}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x130, 0x130, 0x180, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, @limit={'limit\x00', 0x20}]}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x828) 2018/04/12 18:28:01 executing program 6: r0 = syz_fuseblk_mount(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_fuseblk_mount(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r1) 2018/04/12 18:28:02 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000cf1ffc)=0x600210) pipe(&(0x7f0000000240)={0xffffffffffffffff}) pipe(&(0x7f0000652ff8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0x8, 0x0) r4 = dup2(r2, r3) ioctl$int_in(r4, 0x5452, &(0x7f0000e35ff8)=0x45) readv(r0, &(0x7f0000001f00)=[{&(0x7f0000001e80)=""/120, 0x78}], 0x1) r5 = getpgrp(0x0) fcntl$setown(r2, 0x8, r5) fcntl$setsig(r3, 0xa, 0x12) tkill(r5, 0x100000000000016) pwritev(r0, &(0x7f0000ed8f70)=[{&(0x7f00007d7f41)='k', 0x1}], 0x1, 0x0) 2018/04/12 18:28:02 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000cf1ffc)=0x600210) pipe(&(0x7f0000000240)={0xffffffffffffffff}) pipe(&(0x7f0000652ff8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0x8, 0x0) r4 = dup2(r2, r3) ioctl$int_in(r4, 0x5452, &(0x7f0000e35ff8)=0x45) readv(r0, &(0x7f0000001f00)=[{&(0x7f0000001e80)=""/120, 0x78}], 0x1) r5 = getpgrp(0x0) fcntl$setown(r2, 0x8, r5) fcntl$setsig(r3, 0xa, 0x12) tkill(r5, 0x100000000000016) pwritev(r0, &(0x7f0000ed8f70)=[{&(0x7f00007d7f41)='k', 0x1}], 0x1, 0x0) 2018/04/12 18:28:02 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000cf1ffc)=0x600210) pipe(&(0x7f0000000240)={0xffffffffffffffff}) pipe(&(0x7f0000652ff8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0x8, 0x0) r4 = dup2(r2, r3) ioctl$int_in(r4, 0x5452, &(0x7f0000e35ff8)=0x45) readv(r0, &(0x7f0000001f00)=[{&(0x7f0000001e80)=""/120, 0x78}], 0x1) r5 = getpgrp(0x0) fcntl$setown(r2, 0x8, r5) fcntl$setsig(r3, 0xa, 0x12) tkill(r5, 0x100000000000016) pwritev(r0, &(0x7f0000ed8f70)=[{&(0x7f00007d7f41)='k', 0x1}], 0x1, 0x0) 2018/04/12 18:28:02 executing program 3: r0 = memfd_create(&(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{0x3, 0x0, 0x6d, 0x0, 0x0, 0x5, 0x0, 0x1000}]}, 0x78) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000d0e000), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/04/12 18:28:02 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x9, 0x0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f00000001c0)=0x3, 0x4) ioctl$TCFLSH(r0, 0x540b, 0xfff) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000200)=""/217) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f0000000300)) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000), &(0x7f00000000c0)=0xb) 2018/04/12 18:28:02 executing program 6: r0 = syz_fuseblk_mount(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_fuseblk_mount(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r1) 2018/04/12 18:28:02 executing program 4: unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'erspan0\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000500)={{0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 'syz_tun\x00'}) 2018/04/12 18:28:02 executing program 7: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@broute={'broute\x00', 0x20, 0x4, 0x7b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001840], 0x0, &(0x7f0000000240), &(0x7f0000001840)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x5, 0x0, 0x0, 'lo\x00', 'bcsf0\x00', 'irlan0\x00', 'ip_vti0\x00', @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x120, 0x1c0, 0x1f8, [@statistic={'statistic\x00', 0x18}, @stp={'stp\x00', 0x48, {{0x0, {0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}, [], 0x0, 0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x680}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x1, 'syz0\x00'}}}, @common=@log={'log\x00', 0x28, {{0x0, "9b2ae9577bc60ee6374850a8ef9f28884c64086bb3142cb86e535618630b"}}}]}, @common=@mark={'mark\x00', 0x10}}, {{{0x5, 0x0, 0x0, 'ifb0\x00', 'erspan0\x00', 'ifb0\x00', 'rose0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x70, 0x1d0, 0x220}, [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:dbusd_exec_t:s0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'bond0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xa0, 0x138, 0x188, [@pkttype={'pkttype\x00', 0x8}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x130, 0x130, 0x180, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, @limit={'limit\x00', 0x20}]}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x828) [ 308.417711] IPVS: ftp: loaded support on port[0] = 21 2018/04/12 18:28:02 executing program 7: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@broute={'broute\x00', 0x20, 0x4, 0x7b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001840], 0x0, &(0x7f0000000240), &(0x7f0000001840)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x5, 0x0, 0x0, 'lo\x00', 'bcsf0\x00', 'irlan0\x00', 'ip_vti0\x00', @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x120, 0x1c0, 0x1f8, [@statistic={'statistic\x00', 0x18}, @stp={'stp\x00', 0x48, {{0x0, {0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}, [], 0x0, 0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x680}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x1, 'syz0\x00'}}}, @common=@log={'log\x00', 0x28, {{0x0, "9b2ae9577bc60ee6374850a8ef9f28884c64086bb3142cb86e535618630b"}}}]}, @common=@mark={'mark\x00', 0x10}}, {{{0x5, 0x0, 0x0, 'ifb0\x00', 'erspan0\x00', 'ifb0\x00', 'rose0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x70, 0x1d0, 0x220}, [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:dbusd_exec_t:s0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'bond0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xa0, 0x138, 0x188, [@pkttype={'pkttype\x00', 0x8}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x130, 0x130, 0x180, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, @limit={'limit\x00', 0x20}]}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x828) 2018/04/12 18:28:02 executing program 6: r0 = syz_fuseblk_mount(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_fuseblk_mount(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r1) 2018/04/12 18:28:02 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x9, 0x0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f00000001c0)=0x3, 0x4) ioctl$TCFLSH(r0, 0x540b, 0xfff) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000200)=""/217) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f0000000300)) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000), &(0x7f00000000c0)=0xb) 2018/04/12 18:28:02 executing program 3: r0 = memfd_create(&(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{0x3, 0x0, 0x6d, 0x0, 0x0, 0x5, 0x0, 0x1000}]}, 0x78) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000d0e000), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/04/12 18:28:02 executing program 6: r0 = syz_fuseblk_mount(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_fuseblk_mount(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r1) 2018/04/12 18:28:02 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x9, 0x0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f00000001c0)=0x3, 0x4) ioctl$TCFLSH(r0, 0x540b, 0xfff) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000200)=""/217) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f0000000300)) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000), &(0x7f00000000c0)=0xb) 2018/04/12 18:28:02 executing program 7: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@broute={'broute\x00', 0x20, 0x4, 0x7b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001840], 0x0, &(0x7f0000000240), &(0x7f0000001840)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x5, 0x0, 0x0, 'lo\x00', 'bcsf0\x00', 'irlan0\x00', 'ip_vti0\x00', @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x120, 0x1c0, 0x1f8, [@statistic={'statistic\x00', 0x18}, @stp={'stp\x00', 0x48, {{0x0, {0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}, [], 0x0, 0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x680}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x1, 'syz0\x00'}}}, @common=@log={'log\x00', 0x28, {{0x0, "9b2ae9577bc60ee6374850a8ef9f28884c64086bb3142cb86e535618630b"}}}]}, @common=@mark={'mark\x00', 0x10}}, {{{0x5, 0x0, 0x0, 'ifb0\x00', 'erspan0\x00', 'ifb0\x00', 'rose0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x70, 0x1d0, 0x220}, [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:dbusd_exec_t:s0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'bond0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xa0, 0x138, 0x188, [@pkttype={'pkttype\x00', 0x8}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x130, 0x130, 0x180, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, @limit={'limit\x00', 0x20}]}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x828) 2018/04/12 18:28:03 executing program 3: r0 = memfd_create(&(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{0x3, 0x0, 0x6d, 0x0, 0x0, 0x5, 0x0, 0x1000}]}, 0x78) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000d0e000), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/04/12 18:28:03 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000cf1ffc)=0x600210) pipe(&(0x7f0000000240)={0xffffffffffffffff}) pipe(&(0x7f0000652ff8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0x8, 0x0) r4 = dup2(r2, r3) ioctl$int_in(r4, 0x5452, &(0x7f0000e35ff8)=0x45) readv(r0, &(0x7f0000001f00)=[{&(0x7f0000001e80)=""/120, 0x78}], 0x1) r5 = getpgrp(0x0) fcntl$setown(r2, 0x8, r5) fcntl$setsig(r3, 0xa, 0x12) tkill(r5, 0x100000000000016) pwritev(r0, &(0x7f0000ed8f70)=[{&(0x7f00007d7f41)='k', 0x1}], 0x1, 0x0) 2018/04/12 18:28:03 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000cf1ffc)=0x600210) pipe(&(0x7f0000000240)={0xffffffffffffffff}) pipe(&(0x7f0000652ff8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0x8, 0x0) r4 = dup2(r2, r3) ioctl$int_in(r4, 0x5452, &(0x7f0000e35ff8)=0x45) readv(r0, &(0x7f0000001f00)=[{&(0x7f0000001e80)=""/120, 0x78}], 0x1) r5 = getpgrp(0x0) fcntl$setown(r2, 0x8, r5) fcntl$setsig(r3, 0xa, 0x12) tkill(r5, 0x100000000000016) pwritev(r0, &(0x7f0000ed8f70)=[{&(0x7f00007d7f41)='k', 0x1}], 0x1, 0x0) 2018/04/12 18:28:03 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000cf1ffc)=0x600210) pipe(&(0x7f0000000240)={0xffffffffffffffff}) pipe(&(0x7f0000652ff8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0x8, 0x0) r4 = dup2(r2, r3) ioctl$int_in(r4, 0x5452, &(0x7f0000e35ff8)=0x45) readv(r0, &(0x7f0000001f00)=[{&(0x7f0000001e80)=""/120, 0x78}], 0x1) r5 = getpgrp(0x0) fcntl$setown(r2, 0x8, r5) fcntl$setsig(r3, 0xa, 0x12) tkill(r5, 0x100000000000016) pwritev(r0, &(0x7f0000ed8f70)=[{&(0x7f00007d7f41)='k', 0x1}], 0x1, 0x0) 2018/04/12 18:28:03 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x9, 0x0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f00000001c0)=0x3, 0x4) ioctl$TCFLSH(r0, 0x540b, 0xfff) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000200)=""/217) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f0000000300)) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000), &(0x7f00000000c0)=0xb) 2018/04/12 18:28:03 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x9, 0x0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f00000001c0)=0x3, 0x4) ioctl$TCFLSH(r0, 0x540b, 0xfff) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000200)=""/217) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f0000000300)) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000), &(0x7f00000000c0)=0xb) 2018/04/12 18:28:03 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x12002, 0x63) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa8, r2, 0x800, 0x70bd2a, 0x25dfdbfd, {0x5}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100000001}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast=0xffffffff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast=0xffffffff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x100}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x100000001}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x382}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$sock_bt(r0, 0x8906, &(0x7f0000000000)) 2018/04/12 18:28:03 executing program 3: r0 = memfd_create(&(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{0x3, 0x0, 0x6d, 0x0, 0x0, 0x5, 0x0, 0x1000}]}, 0x78) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000d0e000), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/04/12 18:28:03 executing program 4: unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'erspan0\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000500)={{0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 'syz_tun\x00'}) [ 309.379627] IPVS: ftp: loaded support on port[0] = 21 2018/04/12 18:28:03 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x12002, 0x63) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa8, r2, 0x800, 0x70bd2a, 0x25dfdbfd, {0x5}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100000001}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast=0xffffffff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast=0xffffffff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x100}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x100000001}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x382}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$sock_bt(r0, 0x8906, &(0x7f0000000000)) 2018/04/12 18:28:03 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027400f8", 0x16}], 0x0, &(0x7f0000000140)={[{@debug='debug', 0x2c}]}) 2018/04/12 18:28:03 executing program 2: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x5000, 0x3, &(0x7f0000004000/0x5000)=nil) remap_file_pages(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 2018/04/12 18:28:03 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x9, 0x0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f00000001c0)=0x3, 0x4) ioctl$TCFLSH(r0, 0x540b, 0xfff) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000200)=""/217) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f0000000300)) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000), &(0x7f00000000c0)=0xb) 2018/04/12 18:28:03 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x12002, 0x63) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa8, r2, 0x800, 0x70bd2a, 0x25dfdbfd, {0x5}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100000001}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast=0xffffffff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast=0xffffffff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x100}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x100000001}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x382}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$sock_bt(r0, 0x8906, &(0x7f0000000000)) 2018/04/12 18:28:03 executing program 2: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x5000, 0x3, &(0x7f0000004000/0x5000)=nil) remap_file_pages(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 2018/04/12 18:28:03 executing program 3: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x5}}, &(0x7f0000002000)) timerfd_gettime(r0, &(0x7f0000997fe0)) 2018/04/12 18:28:03 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x9, 0x0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f00000001c0)=0x3, 0x4) ioctl$TCFLSH(r0, 0x540b, 0xfff) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000200)=""/217) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f0000000300)) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000), &(0x7f00000000c0)=0xb) 2018/04/12 18:28:04 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00005f5ffd)='io\x00') bind$alg(r0, &(0x7f0000466000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, &(0x7f0000807000), 0x3f) 2018/04/12 18:28:04 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000000080)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000affc0), &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f00000e0000)='stack\x00') ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000040)) readv(r0, &(0x7f000066dff0)=[{&(0x7f00008ad000)=""/178, 0xb2}], 0x1) execveat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000001780), &(0x7f0000001880), 0x0) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/04/12 18:28:04 executing program 4: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x1b}, 0x9b) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x3, 0x2, 0x1, &(0x7f0000000180)) 2018/04/12 18:28:04 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x12002, 0x63) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa8, r2, 0x800, 0x70bd2a, 0x25dfdbfd, {0x5}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100000001}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast=0xffffffff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast=0xffffffff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x100}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x100000001}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x382}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$sock_bt(r0, 0x8906, &(0x7f0000000000)) 2018/04/12 18:28:04 executing program 2: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x5000, 0x3, &(0x7f0000004000/0x5000)=nil) remap_file_pages(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 2018/04/12 18:28:04 executing program 3: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x5}}, &(0x7f0000002000)) timerfd_gettime(r0, &(0x7f0000997fe0)) 2018/04/12 18:28:04 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r0, r2, 0x0) 2018/04/12 18:28:04 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000009fc8)={0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000000740)="87", 0x1}], 0x1, &(0x7f00000000c0)}, 0xc100) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="98d45020c48194c726c46b0caa71743e92522c1d595cd18d397bcca007eb588a1d1dd141ef10c1c9b12141e050bb59270053a3d7f4f48b4dceb3a54dc8cfd8c68c201881048abb59974041d6697ae15f74be84778bbf7abf4e066179773d6c25df0e6c84dce050551a5709e163093a7bf50efb9d1033f378acd410482ab895ce648225f830143400b6d7cd85af91cca62b2f1798f9750b572e765fb3544801a65b69faac4aa36eccf23bd5c0ac55c978c775fbd0aff5422764bcdef50f5fd2fb5f70aa3a263f0606747220959c849da58fd718553cea444ec2b503b0f0f30408df62fc19b2f0d58bc1fcd13be2e087665d00b064c3a203a01db59b6bf151beb10370a89661b88ca7305c20191e7d130772ae4bd47f7afcb2f0bcf8abfe5df676a884e6c48910cc74b90c6dc4480fd554d08219ecb0b77e970df41986d7d79818fadf9f40f12525586e6ad25a64cd2fa65871f5b4f465fc62339b1502c049a43f805db47fa418a44514199ccee421bbd2a1a568a309425f7de87d9e86f210e362abdc142c9e89486052e27e2226626adde52a7248599fa705e849c43ca6019468e6e4da9d0197e6c8b0ceee6a6537d5c77c72a7147e993dbc1ff25cb88f427005c76ea2a206baa00a5316e83c161da9f7871599eb8ffb8a0e0cfc52be50a741147e97d4f16ca5e0bf92a9669c1ace4a30624e0f052b05529fa52970a06d8fdfb45cb97ea78f4a23b2cbb5dabc6632f08701937c13040b66a3a1118d65460082716ed2144334003bcd9aaeb92f094b49a8a6441dffad3531e934c2748a590f3770de373d3074959700f13bcf04000000546426e33a77b0e902a6aa8591b03b2097b920000f6dd7722e682fdea200110d96304b441f909d9e37ba9f2610cb946a5789e5ea921ad70f7df22ac905d8edf9abc8d1ec521739186e9f3aa867f4983ec1b289300922e648be82c11d8c54e3a533e1ff7b0e2334d5aefcd6ea14ae5ed53e1a278ca04530ac8e3c9d1f08e55dc70ea9d2abdd81b0ae06f1271b2f8eca7e08d03f52805e600d34052c66f3515e18e1044666bd12d10fd62ba2dba772fcc18f16a25806d1605c052a82a0d8f20d1b891c66d3710712876eaaabea1b382e50f8accda3520b11db15c2a72aeae4a52f488627502d794efd839e5faa220e54280a44271309fa961aa9c1aa066ccc1549dae85ac09b34813addd42a3002f243fa809ca75b24b61db28b6ad4d0022024be8c035f86f516341cb2002acf1d2dc525544b84f8d2204118b9d99c0b627fc9757ae14ead57074163819f0ff19655cac2e200b78d399dedf745c1810b73d26c6a4fc0658df3b61886933dbefc4b7ecc655d0cb19824d8faa3c0223dd0a3931e92bdb553c678475c860989c2ce33804deb4708a422d6713525e2029085144d7d996cb0a87a1999f227644957f842d36787b945fdbca248fda4da81dec59508137d397934372a20f2438e7f4e61e212e349f7d5892cbf6c8e1112669d57e6c107c530b66592975d9fdd1a1ed86781f7d22bf824c61d7894f60d38e184ea3a7a786d3eb7761a495318e9b94eea1ba6da5cf5fe37a2d8672a7fa4eca80404ed69243382822f246e29c183562d7c62364820c42ffad573ca29166fea4dafe4fe27790ecd9c59e59e173e41c5ee0b853f25f454cf8918bf8c8e4572d816370fe2d22463fa948e0cf25f81286ef5aa84b11d57fd1b8ae0fcc9a3bf23663389f86b0113f4446584", 0x4d2}], 0x1, &(0x7f0000000100)}, 0x0) 2018/04/12 18:28:04 executing program 7: r0 = socket(0x11, 0x803, 0x300) syz_emit_ethernet(0x32, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000daeffc)=0x9, 0x4) recvmmsg(r0, &(0x7f00000062c0)=[{{0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f00000059c0)=""/185, 0xb9}], 0x1, &(0x7f0000005ac0)=""/27, 0x1b}}], 0x1, 0x0, 0x0) 2018/04/12 18:28:04 executing program 2: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x5000, 0x3, &(0x7f0000004000/0x5000)=nil) remap_file_pages(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 2018/04/12 18:28:04 executing program 3: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x5}}, &(0x7f0000002000)) timerfd_gettime(r0, &(0x7f0000997fe0)) 2018/04/12 18:28:04 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r0, r2, 0x0) 2018/04/12 18:28:04 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000009fc8)={0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000000740)="87", 0x1}], 0x1, &(0x7f00000000c0)}, 0xc100) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="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", 0x4d2}], 0x1, &(0x7f0000000100)}, 0x0) 2018/04/12 18:28:04 executing program 4: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x1b}, 0x9b) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x3, 0x2, 0x1, &(0x7f0000000180)) 2018/04/12 18:28:05 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x7a, &(0x7f0000f83000)={0x0, @in6={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f000095f000)=0x98) 2018/04/12 18:28:05 executing program 7: r0 = socket(0x11, 0x803, 0x300) syz_emit_ethernet(0x32, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000daeffc)=0x9, 0x4) recvmmsg(r0, &(0x7f00000062c0)=[{{0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f00000059c0)=""/185, 0xb9}], 0x1, &(0x7f0000005ac0)=""/27, 0x1b}}], 0x1, 0x0, 0x0) 2018/04/12 18:28:05 executing program 2: r0 = socket(0x11, 0x803, 0x300) syz_emit_ethernet(0x32, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000daeffc)=0x9, 0x4) recvmmsg(r0, &(0x7f00000062c0)=[{{0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f00000059c0)=""/185, 0xb9}], 0x1, &(0x7f0000005ac0)=""/27, 0x1b}}], 0x1, 0x0, 0x0) 2018/04/12 18:28:05 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r0, r2, 0x0) 2018/04/12 18:28:05 executing program 3: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x5}}, &(0x7f0000002000)) timerfd_gettime(r0, &(0x7f0000997fe0)) 2018/04/12 18:28:05 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000009fc8)={0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000000740)="87", 0x1}], 0x1, &(0x7f00000000c0)}, 0xc100) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="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", 0x4d2}], 0x1, &(0x7f0000000100)}, 0x0) 2018/04/12 18:28:05 executing program 4: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x1b}, 0x9b) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x3, 0x2, 0x1, &(0x7f0000000180)) 2018/04/12 18:28:05 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000da9000)={0x2, 0x3, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x8, 0x13}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x80}, 0x1}, 0x0) 2018/04/12 18:28:05 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x7a, &(0x7f0000f83000)={0x0, @in6={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f000095f000)=0x98) 2018/04/12 18:28:05 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000009fc8)={0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000000740)="87", 0x1}], 0x1, &(0x7f00000000c0)}, 0xc100) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="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", 0x4d2}], 0x1, &(0x7f0000000100)}, 0x0) 2018/04/12 18:28:05 executing program 4: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x1b}, 0x9b) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x3, 0x2, 0x1, &(0x7f0000000180)) 2018/04/12 18:28:05 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000c06fc2)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x16, 0x0, 0x0, @multicast1=0xe0000001}}}}}, &(0x7f0000000100)) 2018/04/12 18:28:05 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r0, r2, 0x0) 2018/04/12 18:28:05 executing program 7: r0 = socket(0x11, 0x803, 0x300) syz_emit_ethernet(0x32, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000daeffc)=0x9, 0x4) recvmmsg(r0, &(0x7f00000062c0)=[{{0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f00000059c0)=""/185, 0xb9}], 0x1, &(0x7f0000005ac0)=""/27, 0x1b}}], 0x1, 0x0, 0x0) 2018/04/12 18:28:05 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x7a, &(0x7f0000f83000)={0x0, @in6={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f000095f000)=0x98) 2018/04/12 18:28:05 executing program 2: r0 = socket(0x11, 0x803, 0x300) syz_emit_ethernet(0x32, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000daeffc)=0x9, 0x4) recvmmsg(r0, &(0x7f00000062c0)=[{{0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f00000059c0)=""/185, 0xb9}], 0x1, &(0x7f0000005ac0)=""/27, 0x1b}}], 0x1, 0x0, 0x0) 2018/04/12 18:28:05 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000da9000)={0x2, 0x3, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x8, 0x13}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x80}, 0x1}, 0x0) 2018/04/12 18:28:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000010ff4)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000019007fafb72d1cb2a4a280930af8011000a843dc91052369390009002f000000000000001900050000000000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000080)}, 0x0) 2018/04/12 18:28:05 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000c06fc2)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x16, 0x0, 0x0, @multicast1=0xe0000001}}}}}, &(0x7f0000000100)) 2018/04/12 18:28:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f00000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000f8f000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f77fc8)={0x0, 0x0, &(0x7f00006ec000), 0x0, &(0x7f00005c8fd0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) writev(r1, &(0x7f0000376ff0)=[{&(0x7f00000d8ece)="15b0e0be203f09df4425333944b79497f675bc1ceb755264d28bb55850aacf65", 0x20}], 0x1) recvmmsg(r1, &(0x7f0000001480)=[{{&(0x7f0000000040)=@generic, 0x80, &(0x7f0000001300)=[{&(0x7f00000011c0)=""/178, 0xb2}], 0x1, &(0x7f00000014c0)=""/206, 0xce}}], 0x1, 0x0, &(0x7f00002d9000)) 2018/04/12 18:28:05 executing program 7: r0 = socket(0x11, 0x803, 0x300) syz_emit_ethernet(0x32, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000daeffc)=0x9, 0x4) recvmmsg(r0, &(0x7f00000062c0)=[{{0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f00000059c0)=""/185, 0xb9}], 0x1, &(0x7f0000005ac0)=""/27, 0x1b}}], 0x1, 0x0, 0x0) 2018/04/12 18:28:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000003ec0)=[{{&(0x7f0000001200)=@generic, 0x80, &(0x7f0000001440), 0x0, &(0x7f0000001480)=""/163, 0xa3}}, {{&(0x7f0000002ac0)=@l2, 0xe, &(0x7f0000003dc0), 0x0, &(0x7f0000003e00)=""/170, 0xaa}}], 0x2, 0x0, &(0x7f0000004000)={0x77359400}) sendmsg$unix(r1, &(0x7f0000d1d000)={&(0x7f0000b6b000)=@abs, 0x8, &(0x7f0000eeafb0), 0x0, &(0x7f0000072fd8)}, 0x0) sendmsg$unix(r0, &(0x7f000062e000)={&(0x7f0000690ff6)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f0000096fd8)}, 0x0) close(r1) 2018/04/12 18:28:06 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x7a, &(0x7f0000f83000)={0x0, @in6={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f000095f000)=0x98) 2018/04/12 18:28:06 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000c06fc2)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x16, 0x0, 0x0, @multicast1=0xe0000001}}}}}, &(0x7f0000000100)) 2018/04/12 18:28:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000003ec0)=[{{&(0x7f0000001200)=@generic, 0x80, &(0x7f0000001440), 0x0, &(0x7f0000001480)=""/163, 0xa3}}, {{&(0x7f0000002ac0)=@l2, 0xe, &(0x7f0000003dc0), 0x0, &(0x7f0000003e00)=""/170, 0xaa}}], 0x2, 0x0, &(0x7f0000004000)={0x77359400}) sendmsg$unix(r1, &(0x7f0000d1d000)={&(0x7f0000b6b000)=@abs, 0x8, &(0x7f0000eeafb0), 0x0, &(0x7f0000072fd8)}, 0x0) sendmsg$unix(r0, &(0x7f000062e000)={&(0x7f0000690ff6)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f0000096fd8)}, 0x0) close(r1) 2018/04/12 18:28:06 executing program 2: r0 = socket(0x11, 0x803, 0x300) syz_emit_ethernet(0x32, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000daeffc)=0x9, 0x4) recvmmsg(r0, &(0x7f00000062c0)=[{{0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f00000059c0)=""/185, 0xb9}], 0x1, &(0x7f0000005ac0)=""/27, 0x1b}}], 0x1, 0x0, 0x0) 2018/04/12 18:28:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000010ff4)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000019007fafb72d1cb2a4a280930af8011000a843dc91052369390009002f000000000000001900050000000000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000080)}, 0x0) 2018/04/12 18:28:06 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000da9000)={0x2, 0x3, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x8, 0x13}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x80}, 0x1}, 0x0) 2018/04/12 18:28:06 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000007fc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000018df0)={0x18, 0x30, 0x3fd, 0x0, 0x0, {}, [@nested={0x4, 0x1}]}, 0x18}, 0x1}, 0x0) 2018/04/12 18:28:06 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x20000000053, &(0x7f00000000c0)=""/16, &(0x7f0000000080)=0x10) 2018/04/12 18:28:06 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f00000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000f8f000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f77fc8)={0x0, 0x0, &(0x7f00006ec000), 0x0, &(0x7f00005c8fd0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) writev(r1, &(0x7f0000376ff0)=[{&(0x7f00000d8ece)="15b0e0be203f09df4425333944b79497f675bc1ceb755264d28bb55850aacf65", 0x20}], 0x1) recvmmsg(r1, &(0x7f0000001480)=[{{&(0x7f0000000040)=@generic, 0x80, &(0x7f0000001300)=[{&(0x7f00000011c0)=""/178, 0xb2}], 0x1, &(0x7f00000014c0)=""/206, 0xce}}], 0x1, 0x0, &(0x7f00002d9000)) 2018/04/12 18:28:06 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000c06fc2)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x16, 0x0, 0x0, @multicast1=0xe0000001}}}}}, &(0x7f0000000100)) 2018/04/12 18:28:06 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x20000000053, &(0x7f00000000c0)=""/16, &(0x7f0000000080)=0x10) 2018/04/12 18:28:06 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000007fc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000018df0)={0x18, 0x30, 0x3fd, 0x0, 0x0, {}, [@nested={0x4, 0x1}]}, 0x18}, 0x1}, 0x0) 2018/04/12 18:28:06 executing program 2: timer_create(0x7, &(0x7f0000000140)={0x0, 0x3d, 0x2, @thr={&(0x7f0000000000)="a6065c991726dcf3166895e53846db309f6c605485650a4c6e9c06fc297b8ca81ab4f7a8e0e34646231a4c16e461fc098958ba5f33b26f2145c9ca2bc13295f33c7e291c5308f7f3bfb30a7ee7c61de88978d55518f80db3b0296ebce2858c749bee334cca2d1de261dcd715fe0234f28c570468de", &(0x7f0000000080)="3d6135cf269deada016109d611ed71c44d6d87e0de9ee0c80f657687851f4f936f47c79269289cb81d7550d04561e26bba3da05cfe347a22263ca7476774e877e3fe79128c56d2800a6e4c777369569db19a93805d9b85465b4859977ab9bf2f5bf990687a6e7cb65ec58282d5764ee43435f2e25707195d86b298cb88856913e8639862633b079ef089178e22"}}, &(0x7f0000000180)) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2402) mmap(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x3, 0x11, r0, 0x0) sched_getparam(0x0, &(0x7f000029a000)) 2018/04/12 18:28:06 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f00000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000f8f000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f77fc8)={0x0, 0x0, &(0x7f00006ec000), 0x0, &(0x7f00005c8fd0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) writev(r1, &(0x7f0000376ff0)=[{&(0x7f00000d8ece)="15b0e0be203f09df4425333944b79497f675bc1ceb755264d28bb55850aacf65", 0x20}], 0x1) recvmmsg(r1, &(0x7f0000001480)=[{{&(0x7f0000000040)=@generic, 0x80, &(0x7f0000001300)=[{&(0x7f00000011c0)=""/178, 0xb2}], 0x1, &(0x7f00000014c0)=""/206, 0xce}}], 0x1, 0x0, &(0x7f00002d9000)) 2018/04/12 18:28:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000010ff4)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000019007fafb72d1cb2a4a280930af8011000a843dc91052369390009002f000000000000001900050000000000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000080)}, 0x0) 2018/04/12 18:28:06 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000da9000)={0x2, 0x3, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x8, 0x13}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x80}, 0x1}, 0x0) 2018/04/12 18:28:06 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000007fc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000018df0)={0x18, 0x30, 0x3fd, 0x0, 0x0, {}, [@nested={0x4, 0x1}]}, 0x18}, 0x1}, 0x0) 2018/04/12 18:28:06 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x686d}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000911000)={{&(0x7f0000822000/0x2000)=nil, 0x2000}, 0x1}) clone(0x0, &(0x7f0000000100), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f00000001c0)) read(r1, &(0x7f0000910000)=""/100, 0x64) 2018/04/12 18:28:08 executing program 2: timer_create(0x7, &(0x7f0000000140)={0x0, 0x3d, 0x2, @thr={&(0x7f0000000000)="a6065c991726dcf3166895e53846db309f6c605485650a4c6e9c06fc297b8ca81ab4f7a8e0e34646231a4c16e461fc098958ba5f33b26f2145c9ca2bc13295f33c7e291c5308f7f3bfb30a7ee7c61de88978d55518f80db3b0296ebce2858c749bee334cca2d1de261dcd715fe0234f28c570468de", &(0x7f0000000080)="3d6135cf269deada016109d611ed71c44d6d87e0de9ee0c80f657687851f4f936f47c79269289cb81d7550d04561e26bba3da05cfe347a22263ca7476774e877e3fe79128c56d2800a6e4c777369569db19a93805d9b85465b4859977ab9bf2f5bf990687a6e7cb65ec58282d5764ee43435f2e25707195d86b298cb88856913e8639862633b079ef089178e22"}}, &(0x7f0000000180)) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2402) mmap(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x3, 0x11, r0, 0x0) sched_getparam(0x0, &(0x7f000029a000)) 2018/04/12 18:28:08 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @random="e2701bb60689", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0xe0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}}}}}}, &(0x7f0000ea3000)) 2018/04/12 18:28:08 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f00000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000f8f000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f77fc8)={0x0, 0x0, &(0x7f00006ec000), 0x0, &(0x7f00005c8fd0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) writev(r1, &(0x7f0000376ff0)=[{&(0x7f00000d8ece)="15b0e0be203f09df4425333944b79497f675bc1ceb755264d28bb55850aacf65", 0x20}], 0x1) recvmmsg(r1, &(0x7f0000001480)=[{{&(0x7f0000000040)=@generic, 0x80, &(0x7f0000001300)=[{&(0x7f00000011c0)=""/178, 0xb2}], 0x1, &(0x7f00000014c0)=""/206, 0xce}}], 0x1, 0x0, &(0x7f00002d9000)) 2018/04/12 18:28:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000010ff4)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000019007fafb72d1cb2a4a280930af8011000a843dc91052369390009002f000000000000001900050000000000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000080)}, 0x0) 2018/04/12 18:28:08 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x686d}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000911000)={{&(0x7f0000822000/0x2000)=nil, 0x2000}, 0x1}) clone(0x0, &(0x7f0000000100), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f00000001c0)) read(r1, &(0x7f0000910000)=""/100, 0x64) 2018/04/12 18:28:08 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000007fc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000018df0)={0x18, 0x30, 0x3fd, 0x0, 0x0, {}, [@nested={0x4, 0x1}]}, 0x18}, 0x1}, 0x0) 2018/04/12 18:28:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000003ec0)=[{{&(0x7f0000001200)=@generic, 0x80, &(0x7f0000001440), 0x0, &(0x7f0000001480)=""/163, 0xa3}}, {{&(0x7f0000002ac0)=@l2, 0xe, &(0x7f0000003dc0), 0x0, &(0x7f0000003e00)=""/170, 0xaa}}], 0x2, 0x0, &(0x7f0000004000)={0x77359400}) sendmsg$unix(r1, &(0x7f0000d1d000)={&(0x7f0000b6b000)=@abs, 0x8, &(0x7f0000eeafb0), 0x0, &(0x7f0000072fd8)}, 0x0) sendmsg$unix(r0, &(0x7f000062e000)={&(0x7f0000690ff6)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f0000096fd8)}, 0x0) close(r1) 2018/04/12 18:28:08 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x20000000053, &(0x7f00000000c0)=""/16, &(0x7f0000000080)=0x10) 2018/04/12 18:28:08 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @random="e2701bb60689", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0xe0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}}}}}}, &(0x7f0000ea3000)) 2018/04/12 18:28:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001580)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="470f01c9440f0766b8ca000f00d8b9620b00000f322626660f38823b0f06c744240094000000c744240266950000c7442406000000000f011424b9600200000f3266b8e0008ee866baf80cb852ae7b83ef66bafc0cec", 0x56}], 0x1, 0x78, &(0x7f0000000280), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="f2f3"]]) r4 = dup2(r3, r0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/12 18:28:08 executing program 2: timer_create(0x7, &(0x7f0000000140)={0x0, 0x3d, 0x2, @thr={&(0x7f0000000000)="a6065c991726dcf3166895e53846db309f6c605485650a4c6e9c06fc297b8ca81ab4f7a8e0e34646231a4c16e461fc098958ba5f33b26f2145c9ca2bc13295f33c7e291c5308f7f3bfb30a7ee7c61de88978d55518f80db3b0296ebce2858c749bee334cca2d1de261dcd715fe0234f28c570468de", &(0x7f0000000080)="3d6135cf269deada016109d611ed71c44d6d87e0de9ee0c80f657687851f4f936f47c79269289cb81d7550d04561e26bba3da05cfe347a22263ca7476774e877e3fe79128c56d2800a6e4c777369569db19a93805d9b85465b4859977ab9bf2f5bf990687a6e7cb65ec58282d5764ee43435f2e25707195d86b298cb88856913e8639862633b079ef089178e22"}}, &(0x7f0000000180)) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2402) mmap(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x3, 0x11, r0, 0x0) sched_getparam(0x0, &(0x7f000029a000)) 2018/04/12 18:28:08 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x20000000053, &(0x7f00000000c0)=""/16, &(0x7f0000000080)=0x10) 2018/04/12 18:28:08 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x3, &(0x7f0000000040)=@framed={{0x18}, [], {0x95}}, &(0x7f0000000080)='GPL\x00', 0x100, 0xd6, &(0x7f00000001c0)=""/214}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) 2018/04/12 18:28:08 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_targets\x00') bind$alg(r0, &(0x7f0000466000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000a2effc), 0x400) 2018/04/12 18:28:09 executing program 2: timer_create(0x7, &(0x7f0000000140)={0x0, 0x3d, 0x2, @thr={&(0x7f0000000000)="a6065c991726dcf3166895e53846db309f6c605485650a4c6e9c06fc297b8ca81ab4f7a8e0e34646231a4c16e461fc098958ba5f33b26f2145c9ca2bc13295f33c7e291c5308f7f3bfb30a7ee7c61de88978d55518f80db3b0296ebce2858c749bee334cca2d1de261dcd715fe0234f28c570468de", &(0x7f0000000080)="3d6135cf269deada016109d611ed71c44d6d87e0de9ee0c80f657687851f4f936f47c79269289cb81d7550d04561e26bba3da05cfe347a22263ca7476774e877e3fe79128c56d2800a6e4c777369569db19a93805d9b85465b4859977ab9bf2f5bf990687a6e7cb65ec58282d5764ee43435f2e25707195d86b298cb88856913e8639862633b079ef089178e22"}}, &(0x7f0000000180)) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2402) mmap(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x3, 0x11, r0, 0x0) sched_getparam(0x0, &(0x7f000029a000)) 2018/04/12 18:28:09 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000340)=0x6, 0x4) sendto$inet6(r0, &(0x7f0000000040)="0401000000190998b009cb396da10000009054b932ce5b73832fdbaf6e22d8707324ed7508d79233fbe8e1fd24deabff42c6584662447eda2db2e72e977e149442627a0492f0425669acea5c826b5581e396e18192c77b0cc001def7437a509af949a5f1658baaa86c245cac7ce773c0bffc61f0e500518edab882bde219d98a85596af607ebfad07ffb42e61159d175bb0fcdfeb909dc244cebe87333a58c7eb3f6666cfd8546edb7bb9515f8ce2846318ddb8b5c9ea84b2fe1b366a8971bab02de75eb75db63b4a4428577cd52b73388b5c01e", 0xd4, 0x0, &(0x7f0000005fe4)={0xa, 0x800000894f, 0x4, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) 2018/04/12 18:28:09 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @random="e2701bb60689", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0xe0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}}}}}}, &(0x7f0000ea3000)) 2018/04/12 18:28:09 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_targets\x00') bind$alg(r0, &(0x7f0000466000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000a2effc), 0x400) 2018/04/12 18:28:09 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x3, &(0x7f0000000040)=@framed={{0x18}, [], {0x95}}, &(0x7f0000000080)='GPL\x00', 0x100, 0xd6, &(0x7f00000001c0)=""/214}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) 2018/04/12 18:28:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001580)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="470f01c9440f0766b8ca000f00d8b9620b00000f322626660f38823b0f06c744240094000000c744240266950000c7442406000000000f011424b9600200000f3266b8e0008ee866baf80cb852ae7b83ef66bafc0cec", 0x56}], 0x1, 0x78, &(0x7f0000000280), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="f2f3"]]) r4 = dup2(r3, r0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/12 18:28:09 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x686d}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000911000)={{&(0x7f0000822000/0x2000)=nil, 0x2000}, 0x1}) clone(0x0, &(0x7f0000000100), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f00000001c0)) read(r1, &(0x7f0000910000)=""/100, 0x64) 2018/04/12 18:28:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000003ec0)=[{{&(0x7f0000001200)=@generic, 0x80, &(0x7f0000001440), 0x0, &(0x7f0000001480)=""/163, 0xa3}}, {{&(0x7f0000002ac0)=@l2, 0xe, &(0x7f0000003dc0), 0x0, &(0x7f0000003e00)=""/170, 0xaa}}], 0x2, 0x0, &(0x7f0000004000)={0x77359400}) sendmsg$unix(r1, &(0x7f0000d1d000)={&(0x7f0000b6b000)=@abs, 0x8, &(0x7f0000eeafb0), 0x0, &(0x7f0000072fd8)}, 0x0) sendmsg$unix(r0, &(0x7f000062e000)={&(0x7f0000690ff6)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f0000096fd8)}, 0x0) close(r1) 2018/04/12 18:28:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001580)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="470f01c9440f0766b8ca000f00d8b9620b00000f322626660f38823b0f06c744240094000000c744240266950000c7442406000000000f011424b9600200000f3266b8e0008ee866baf80cb852ae7b83ef66bafc0cec", 0x56}], 0x1, 0x78, &(0x7f0000000280), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="f2f3"]]) r4 = dup2(r3, r0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/12 18:28:09 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @random="e2701bb60689", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0xe0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}}}}}}, &(0x7f0000ea3000)) 2018/04/12 18:28:09 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_targets\x00') bind$alg(r0, &(0x7f0000466000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000a2effc), 0x400) 2018/04/12 18:28:09 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000340)=0x6, 0x4) sendto$inet6(r0, &(0x7f0000000040)="0401000000190998b009cb396da10000009054b932ce5b73832fdbaf6e22d8707324ed7508d79233fbe8e1fd24deabff42c6584662447eda2db2e72e977e149442627a0492f0425669acea5c826b5581e396e18192c77b0cc001def7437a509af949a5f1658baaa86c245cac7ce773c0bffc61f0e500518edab882bde219d98a85596af607ebfad07ffb42e61159d175bb0fcdfeb909dc244cebe87333a58c7eb3f6666cfd8546edb7bb9515f8ce2846318ddb8b5c9ea84b2fe1b366a8971bab02de75eb75db63b4a4428577cd52b73388b5c01e", 0xd4, 0x0, &(0x7f0000005fe4)={0xa, 0x800000894f, 0x4, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) 2018/04/12 18:28:09 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x3, &(0x7f0000000040)=@framed={{0x18}, [], {0x95}}, &(0x7f0000000080)='GPL\x00', 0x100, 0xd6, &(0x7f00000001c0)=""/214}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) 2018/04/12 18:28:09 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_targets\x00') bind$alg(r0, &(0x7f0000466000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000a2effc), 0x400) 2018/04/12 18:28:09 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000340)=0x6, 0x4) sendto$inet6(r0, &(0x7f0000000040)="0401000000190998b009cb396da10000009054b932ce5b73832fdbaf6e22d8707324ed7508d79233fbe8e1fd24deabff42c6584662447eda2db2e72e977e149442627a0492f0425669acea5c826b5581e396e18192c77b0cc001def7437a509af949a5f1658baaa86c245cac7ce773c0bffc61f0e500518edab882bde219d98a85596af607ebfad07ffb42e61159d175bb0fcdfeb909dc244cebe87333a58c7eb3f6666cfd8546edb7bb9515f8ce2846318ddb8b5c9ea84b2fe1b366a8971bab02de75eb75db63b4a4428577cd52b73388b5c01e", 0xd4, 0x0, &(0x7f0000005fe4)={0xa, 0x800000894f, 0x4, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) 2018/04/12 18:28:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001580)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="470f01c9440f0766b8ca000f00d8b9620b00000f322626660f38823b0f06c744240094000000c744240266950000c7442406000000000f011424b9600200000f3266b8e0008ee866baf80cb852ae7b83ef66bafc0cec", 0x56}], 0x1, 0x78, &(0x7f0000000280), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="f2f3"]]) r4 = dup2(r3, r0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/12 18:28:09 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x3, &(0x7f0000000040)=@framed={{0x18}, [], {0x95}}, &(0x7f0000000080)='GPL\x00', 0x100, 0xd6, &(0x7f00000001c0)=""/214}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) 2018/04/12 18:28:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001580)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="470f01c9440f0766b8ca000f00d8b9620b00000f322626660f38823b0f06c744240094000000c744240266950000c7442406000000000f011424b9600200000f3266b8e0008ee866baf80cb852ae7b83ef66bafc0cec", 0x56}], 0x1, 0x78, &(0x7f0000000280), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="f2f3"]]) r4 = dup2(r3, r0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/12 18:28:10 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x3, &(0x7f0000000040)=@framed={{0x18}, [], {0x95}}, &(0x7f0000000080)='GPL\x00', 0x100, 0xd6, &(0x7f00000001c0)=""/214}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) 2018/04/12 18:28:10 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000340)=0x6, 0x4) sendto$inet6(r0, &(0x7f0000000040)="0401000000190998b009cb396da10000009054b932ce5b73832fdbaf6e22d8707324ed7508d79233fbe8e1fd24deabff42c6584662447eda2db2e72e977e149442627a0492f0425669acea5c826b5581e396e18192c77b0cc001def7437a509af949a5f1658baaa86c245cac7ce773c0bffc61f0e500518edab882bde219d98a85596af607ebfad07ffb42e61159d175bb0fcdfeb909dc244cebe87333a58c7eb3f6666cfd8546edb7bb9515f8ce2846318ddb8b5c9ea84b2fe1b366a8971bab02de75eb75db63b4a4428577cd52b73388b5c01e", 0xd4, 0x0, &(0x7f0000005fe4)={0xa, 0x800000894f, 0x4, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) 2018/04/12 18:28:10 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x3, &(0x7f0000000040)=@framed={{0x18}, [], {0x95}}, &(0x7f0000000080)='GPL\x00', 0x100, 0xd6, &(0x7f00000001c0)=""/214}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) 2018/04/12 18:28:10 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x3, &(0x7f0000000040)=@framed={{0x18}, [], {0x95}}, &(0x7f0000000080)='GPL\x00', 0x100, 0xd6, &(0x7f00000001c0)=""/214}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) 2018/04/12 18:28:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001580)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="470f01c9440f0766b8ca000f00d8b9620b00000f322626660f38823b0f06c744240094000000c744240266950000c7442406000000000f011424b9600200000f3266b8e0008ee866baf80cb852ae7b83ef66bafc0cec", 0x56}], 0x1, 0x78, &(0x7f0000000280), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="f2f3"]]) r4 = dup2(r3, r0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/12 18:28:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001580)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="470f01c9440f0766b8ca000f00d8b9620b00000f322626660f38823b0f06c744240094000000c744240266950000c7442406000000000f011424b9600200000f3266b8e0008ee866baf80cb852ae7b83ef66bafc0cec", 0x56}], 0x1, 0x78, &(0x7f0000000280), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="f2f3"]]) r4 = dup2(r3, r0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/12 18:28:10 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x686d}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000911000)={{&(0x7f0000822000/0x2000)=nil, 0x2000}, 0x1}) clone(0x0, &(0x7f0000000100), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f00000001c0)) read(r1, &(0x7f0000910000)=""/100, 0x64) 2018/04/12 18:28:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300094700bb61e1c3050000070010000200000045000000007f000019001a000d003f000000000300000000000000060400006700", 0x39}], 0x1) 2018/04/12 18:28:10 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000cf1ffc)) 2018/04/12 18:28:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300094700bb61e1c3050000070010000200000045000000007f000019001a000d003f000000000300000000000000060400006700", 0x39}], 0x1) 2018/04/12 18:28:10 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x3, &(0x7f0000000040)=@framed={{0x18}, [], {0x95}}, &(0x7f0000000080)='GPL\x00', 0x100, 0xd6, &(0x7f00000001c0)=""/214}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) 2018/04/12 18:28:10 executing program 7: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14}}, 0x10) listen(r0, 0xfc0000) r1 = accept4(r0, 0x0, &(0x7f0000002ffc), 0x0) sendmmsg(r1, &(0x7f0000009440)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002a80)='C', 0x1}], 0x1}}], 0x1, 0x0) 2018/04/12 18:28:10 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x3, &(0x7f0000000040)=@framed={{0x18}, [], {0x95}}, &(0x7f0000000080)='GPL\x00', 0x100, 0xd6, &(0x7f00000001c0)=""/214}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) 2018/04/12 18:28:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300094700bb61e1c3050000070010000200000045000000007f000019001a000d003f000000000300000000000000060400006700", 0x39}], 0x1) 2018/04/12 18:28:10 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuacct.usage\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='0', 0x1) 2018/04/12 18:28:11 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x3, &(0x7f0000000040)=@framed={{0x18}, [], {0x95}}, &(0x7f0000000080)='GPL\x00', 0x100, 0xd6, &(0x7f00000001c0)=""/214}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) 2018/04/12 18:28:11 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f0000307000)=&(0x7f0000989fff)) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af13, &(0x7f0000cef000)={0x0, 0x0, &(0x7f000062a000)=""/167, &(0x7f0000aac000)=""/21, &(0x7f00002fdf52)=""/174}) 2018/04/12 18:28:11 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, {{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}]}, 0x190) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f000016c000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) 2018/04/12 18:28:11 executing program 7: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14}}, 0x10) listen(r0, 0xfc0000) r1 = accept4(r0, 0x0, &(0x7f0000002ffc), 0x0) sendmmsg(r1, &(0x7f0000009440)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002a80)='C', 0x1}], 0x1}}], 0x1, 0x0) 2018/04/12 18:28:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300094700bb61e1c3050000070010000200000045000000007f000019001a000d003f000000000300000000000000060400006700", 0x39}], 0x1) 2018/04/12 18:28:11 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000cf1ffc)) 2018/04/12 18:28:11 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuacct.usage\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='0', 0x1) 2018/04/12 18:28:11 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuacct.usage\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='0', 0x1) 2018/04/12 18:28:11 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000cf1ffc)) 2018/04/12 18:28:11 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14}}, 0x10) listen(r0, 0xfc0000) r1 = accept4(r0, 0x0, &(0x7f0000002ffc), 0x0) sendmmsg(r1, &(0x7f0000009440)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002a80)='C', 0x1}], 0x1}}], 0x1, 0x0) 2018/04/12 18:28:11 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuacct.usage\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='0', 0x1) 2018/04/12 18:28:11 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f0000307000)=&(0x7f0000989fff)) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af13, &(0x7f0000cef000)={0x0, 0x0, &(0x7f000062a000)=""/167, &(0x7f0000aac000)=""/21, &(0x7f00002fdf52)=""/174}) 2018/04/12 18:28:11 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, {{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}]}, 0x190) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f000016c000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) 2018/04/12 18:28:11 executing program 7: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14}}, 0x10) listen(r0, 0xfc0000) r1 = accept4(r0, 0x0, &(0x7f0000002ffc), 0x0) sendmmsg(r1, &(0x7f0000009440)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002a80)='C', 0x1}], 0x1}}], 0x1, 0x0) 2018/04/12 18:28:11 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuacct.usage\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='0', 0x1) 2018/04/12 18:28:11 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000cf1ffc)) 2018/04/12 18:28:11 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuacct.usage\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='0', 0x1) 2018/04/12 18:28:11 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14}}, 0x10) listen(r0, 0xfc0000) r1 = accept4(r0, 0x0, &(0x7f0000002ffc), 0x0) sendmmsg(r1, &(0x7f0000009440)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002a80)='C', 0x1}], 0x1}}], 0x1, 0x0) 2018/04/12 18:28:11 executing program 7: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14}}, 0x10) listen(r0, 0xfc0000) r1 = accept4(r0, 0x0, &(0x7f0000002ffc), 0x0) sendmmsg(r1, &(0x7f0000009440)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002a80)='C', 0x1}], 0x1}}], 0x1, 0x0) 2018/04/12 18:28:11 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, {{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}]}, 0x190) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f000016c000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) 2018/04/12 18:28:11 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuacct.usage\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='0', 0x1) 2018/04/12 18:28:11 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f0000307000)=&(0x7f0000989fff)) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af13, &(0x7f0000cef000)={0x0, 0x0, &(0x7f000062a000)=""/167, &(0x7f0000aac000)=""/21, &(0x7f00002fdf52)=""/174}) 2018/04/12 18:28:11 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000cf1ffc)) 2018/04/12 18:28:11 executing program 7: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, {{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}]}, 0x190) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f000016c000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) 2018/04/12 18:28:11 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14}}, 0x10) listen(r0, 0xfc0000) r1 = accept4(r0, 0x0, &(0x7f0000002ffc), 0x0) sendmmsg(r1, &(0x7f0000009440)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002a80)='C', 0x1}], 0x1}}], 0x1, 0x0) 2018/04/12 18:28:11 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f0000307000)=&(0x7f0000989fff)) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af13, &(0x7f0000cef000)={0x0, 0x0, &(0x7f000062a000)=""/167, &(0x7f0000aac000)=""/21, &(0x7f00002fdf52)=""/174}) 2018/04/12 18:28:11 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000580)=""/4096, 0x1000, 0x0, &(0x7f00000015c0)=@hci={0x1f}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f000000c000)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f00000003c0)={0x18, 0x2e, 0x821, 0x0, 0x0, {0x2}, [@generic="cf"]}, 0x18}, 0x1}, 0x0) 2018/04/12 18:28:11 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000cf1ffc)) 2018/04/12 18:28:11 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, {{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}]}, 0x190) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f000016c000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) 2018/04/12 18:28:11 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f0000307000)=&(0x7f0000989fff)) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af13, &(0x7f0000cef000)={0x0, 0x0, &(0x7f000062a000)=""/167, &(0x7f0000aac000)=""/21, &(0x7f00002fdf52)=""/174}) 2018/04/12 18:28:11 executing program 7: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, {{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}]}, 0x190) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f000016c000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) 2018/04/12 18:28:11 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000580)=""/4096, 0x1000, 0x0, &(0x7f00000015c0)=@hci={0x1f}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f000000c000)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f00000003c0)={0x18, 0x2e, 0x821, 0x0, 0x0, {0x2}, [@generic="cf"]}, 0x18}, 0x1}, 0x0) 2018/04/12 18:28:11 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f0000307000)=&(0x7f0000989fff)) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af13, &(0x7f0000cef000)={0x0, 0x0, &(0x7f000062a000)=""/167, &(0x7f0000aac000)=""/21, &(0x7f00002fdf52)=""/174}) 2018/04/12 18:28:11 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000cf1ffc)) 2018/04/12 18:28:11 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) r1 = add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000000540)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000580)="8ab1c424a201004e8c18f151cef25766294564282d97e23fa5c4b635a5abeb51083e1bf72bb5390a5afc54531e002415ef85adbaaba003f166b158f08806adbbc429c4c53b6690a22fe07ff3d344", 0x4e, 0xfffffffffffffff8) r2 = request_key(&(0x7f0000000680)='ceph\x00', &(0x7f00000006c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000700)='vboxnet0keyring\x00', 0xfffffffffffffffc) keyctl$search(0xa, r1, &(0x7f0000000600)='.dead\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a, 0x0}, r2) keyctl$join(0x1, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'bridge0\x00', 0xce11}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge0\x00', 0x2001}) socket$inet6_dccp(0xa, 0x6, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0x1000000c4, 0x20000001, &(0x7f0000faafe4)={0xa}, 0x1c) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000300)=0x1) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000015c0)={0x0, 0x7fff, 0x0, 0x0, 0x75}, 0x14) r5 = gettid() sched_setattr(r5, &(0x7f0000000140)={0x30, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0xffffffff00000000}, 0x0) getsockname$netrom(0xffffffffffffffff, &(0x7f0000000440)=@full, &(0x7f00000004c0)=0x48) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[]}, 0x1}, 0x0) syz_fuse_mount(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/12 18:28:11 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="18", 0x1, r1) keyctl$unlink(0x9, r2, r1) 2018/04/12 18:28:11 executing program 4: sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f00007e0000)=[{&(0x7f0000007000)="fd20932fcc7cfaafcf960802e02348f8fba600069da7b753c31273", 0x1b}], 0x1, &(0x7f0000001100)}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x200000000065}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2018/04/12 18:28:11 executing program 7: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, {{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}]}, 0x190) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f000016c000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) 2018/04/12 18:28:11 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) r1 = add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000000540)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000580)="8ab1c424a201004e8c18f151cef25766294564282d97e23fa5c4b635a5abeb51083e1bf72bb5390a5afc54531e002415ef85adbaaba003f166b158f08806adbbc429c4c53b6690a22fe07ff3d344", 0x4e, 0xfffffffffffffff8) r2 = request_key(&(0x7f0000000680)='ceph\x00', &(0x7f00000006c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000700)='vboxnet0keyring\x00', 0xfffffffffffffffc) keyctl$search(0xa, r1, &(0x7f0000000600)='.dead\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a, 0x0}, r2) keyctl$join(0x1, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'bridge0\x00', 0xce11}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge0\x00', 0x2001}) socket$inet6_dccp(0xa, 0x6, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0x1000000c4, 0x20000001, &(0x7f0000faafe4)={0xa}, 0x1c) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000300)=0x1) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000015c0)={0x0, 0x7fff, 0x0, 0x0, 0x75}, 0x14) r5 = gettid() sched_setattr(r5, &(0x7f0000000140)={0x30, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0xffffffff00000000}, 0x0) getsockname$netrom(0xffffffffffffffff, &(0x7f0000000440)=@full, &(0x7f00000004c0)=0x48) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[]}, 0x1}, 0x0) syz_fuse_mount(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/12 18:28:11 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) r1 = add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000000540)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000580)="8ab1c424a201004e8c18f151cef25766294564282d97e23fa5c4b635a5abeb51083e1bf72bb5390a5afc54531e002415ef85adbaaba003f166b158f08806adbbc429c4c53b6690a22fe07ff3d344", 0x4e, 0xfffffffffffffff8) r2 = request_key(&(0x7f0000000680)='ceph\x00', &(0x7f00000006c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000700)='vboxnet0keyring\x00', 0xfffffffffffffffc) keyctl$search(0xa, r1, &(0x7f0000000600)='.dead\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a, 0x0}, r2) keyctl$join(0x1, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'bridge0\x00', 0xce11}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge0\x00', 0x2001}) socket$inet6_dccp(0xa, 0x6, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0x1000000c4, 0x20000001, &(0x7f0000faafe4)={0xa}, 0x1c) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000300)=0x1) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000015c0)={0x0, 0x7fff, 0x0, 0x0, 0x75}, 0x14) r5 = gettid() sched_setattr(r5, &(0x7f0000000140)={0x30, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0xffffffff00000000}, 0x0) getsockname$netrom(0xffffffffffffffff, &(0x7f0000000440)=@full, &(0x7f00000004c0)=0x48) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[]}, 0x1}, 0x0) syz_fuse_mount(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/12 18:28:11 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(aes-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x0, {0x9}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}]}, 0x18}, 0x1}, 0x0) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000100)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/106, 0x6a}], 0x1, &(0x7f0000000400)=""/203, 0xcb}, 0x0) 2018/04/12 18:28:11 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000580)=""/4096, 0x1000, 0x0, &(0x7f00000015c0)=@hci={0x1f}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f000000c000)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f00000003c0)={0x18, 0x2e, 0x821, 0x0, 0x0, {0x2}, [@generic="cf"]}, 0x18}, 0x1}, 0x0) 2018/04/12 18:28:11 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f0000307000)=&(0x7f0000989fff)) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af13, &(0x7f0000cef000)={0x0, 0x0, &(0x7f000062a000)=""/167, &(0x7f0000aac000)=""/21, &(0x7f00002fdf52)=""/174}) [ 317.483674] sd 0:0:1:0: [sg0] tag#4445 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 317.492495] sd 0:0:1:0: [sg0] tag#4445 CDB: Test Unit Ready [ 317.498314] sd 0:0:1:0: [sg0] tag#4445 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 fe ff ff [ 317.507227] sd 0:0:1:0: [sg0] tag#4445 CDB[10]: ff ff ff ff ff e4 8f 41 20 00 00 00 00 00 00 00 [ 317.516144] sd 0:0:1:0: [sg0] tag#4445 CDB[20]: 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 [ 317.525068] sd 0:0:1:0: [sg0] tag#4445 CDB[30]: 00 00 00 00 00 fe ff ff ff ff ff ff ff e5 8f 41 [ 317.533964] sd 0:0:1:0: [sg0] tag#4445 CDB[40]: 20 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 [ 317.542870] sd 0:0:1:0: [sg0] tag#4445 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 fe ff ff [ 317.551791] sd 0:0:1:0: [sg0] tag#4445 CDB[60]: ff ff ff ff ff 2018/04/12 18:28:11 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000fb1fee)='/dev/input/event#\x00', 0x20, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000240)=""/17) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) 2018/04/12 18:28:11 executing program 4: sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f00007e0000)=[{&(0x7f0000007000)="fd20932fcc7cfaafcf960802e02348f8fba600069da7b753c31273", 0x1b}], 0x1, &(0x7f0000001100)}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x200000000065}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2018/04/12 18:28:11 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000580)=""/4096, 0x1000, 0x0, &(0x7f00000015c0)=@hci={0x1f}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f000000c000)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f00000003c0)={0x18, 0x2e, 0x821, 0x0, 0x0, {0x2}, [@generic="cf"]}, 0x18}, 0x1}, 0x0) 2018/04/12 18:28:11 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r2, 0x40001) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000400)=0x4, 0x4) sendfile(r0, r2, &(0x7f0000000000), 0x4) 2018/04/12 18:28:11 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) r1 = add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000000540)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000580)="8ab1c424a201004e8c18f151cef25766294564282d97e23fa5c4b635a5abeb51083e1bf72bb5390a5afc54531e002415ef85adbaaba003f166b158f08806adbbc429c4c53b6690a22fe07ff3d344", 0x4e, 0xfffffffffffffff8) r2 = request_key(&(0x7f0000000680)='ceph\x00', &(0x7f00000006c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000700)='vboxnet0keyring\x00', 0xfffffffffffffffc) keyctl$search(0xa, r1, &(0x7f0000000600)='.dead\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a, 0x0}, r2) keyctl$join(0x1, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'bridge0\x00', 0xce11}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge0\x00', 0x2001}) socket$inet6_dccp(0xa, 0x6, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0x1000000c4, 0x20000001, &(0x7f0000faafe4)={0xa}, 0x1c) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000300)=0x1) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000015c0)={0x0, 0x7fff, 0x0, 0x0, 0x75}, 0x14) r5 = gettid() sched_setattr(r5, &(0x7f0000000140)={0x30, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0xffffffff00000000}, 0x0) getsockname$netrom(0xffffffffffffffff, &(0x7f0000000440)=@full, &(0x7f00000004c0)=0x48) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[]}, 0x1}, 0x0) syz_fuse_mount(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/12 18:28:11 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(aes-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x0, {0x9}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}]}, 0x18}, 0x1}, 0x0) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000100)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/106, 0x6a}], 0x1, &(0x7f0000000400)=""/203, 0xcb}, 0x0) 2018/04/12 18:28:12 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="18", 0x1, r1) keyctl$unlink(0x9, r2, r1) 2018/04/12 18:28:12 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) r1 = add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000000540)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000580)="8ab1c424a201004e8c18f151cef25766294564282d97e23fa5c4b635a5abeb51083e1bf72bb5390a5afc54531e002415ef85adbaaba003f166b158f08806adbbc429c4c53b6690a22fe07ff3d344", 0x4e, 0xfffffffffffffff8) r2 = request_key(&(0x7f0000000680)='ceph\x00', &(0x7f00000006c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000700)='vboxnet0keyring\x00', 0xfffffffffffffffc) keyctl$search(0xa, r1, &(0x7f0000000600)='.dead\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a, 0x0}, r2) keyctl$join(0x1, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'bridge0\x00', 0xce11}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge0\x00', 0x2001}) socket$inet6_dccp(0xa, 0x6, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0x1000000c4, 0x20000001, &(0x7f0000faafe4)={0xa}, 0x1c) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000300)=0x1) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000015c0)={0x0, 0x7fff, 0x0, 0x0, 0x75}, 0x14) r5 = gettid() sched_setattr(r5, &(0x7f0000000140)={0x30, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0xffffffff00000000}, 0x0) getsockname$netrom(0xffffffffffffffff, &(0x7f0000000440)=@full, &(0x7f00000004c0)=0x48) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[]}, 0x1}, 0x0) syz_fuse_mount(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 317.673186] sd 0:0:1:0: [sg0] tag#4446 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 317.681963] sd 0:0:1:0: [sg0] tag#4446 CDB: Test Unit Ready [ 317.687755] sd 0:0:1:0: [sg0] tag#4446 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 fe ff ff [ 317.696655] sd 0:0:1:0: [sg0] tag#4446 CDB[10]: ff ff ff ff ff e4 8f 41 20 00 00 00 00 00 00 00 [ 317.705561] sd 0:0:1:0: [sg0] tag#4446 CDB[20]: 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 [ 317.714480] sd 0:0:1:0: [sg0] tag#4446 CDB[30]: 00 00 00 00 00 fe ff ff ff ff ff ff ff e5 8f 41 [ 317.723388] sd 0:0:1:0: [sg0] tag#4446 CDB[40]: 20 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 [ 317.732360] sd 0:0:1:0: [sg0] tag#4446 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 fe ff ff [ 317.741266] sd 0:0:1:0: [sg0] tag#4446 CDB[60]: ff ff ff ff ff 2018/04/12 18:28:12 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000fb1fee)='/dev/input/event#\x00', 0x20, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000240)=""/17) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) 2018/04/12 18:28:12 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r2, 0x40001) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000400)=0x4, 0x4) sendfile(r0, r2, &(0x7f0000000000), 0x4) 2018/04/12 18:28:12 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(aes-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x0, {0x9}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}]}, 0x18}, 0x1}, 0x0) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000100)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/106, 0x6a}], 0x1, &(0x7f0000000400)=""/203, 0xcb}, 0x0) 2018/04/12 18:28:12 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="18", 0x1, r1) keyctl$unlink(0x9, r2, r1) 2018/04/12 18:28:12 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) r1 = add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000000540)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000580)="8ab1c424a201004e8c18f151cef25766294564282d97e23fa5c4b635a5abeb51083e1bf72bb5390a5afc54531e002415ef85adbaaba003f166b158f08806adbbc429c4c53b6690a22fe07ff3d344", 0x4e, 0xfffffffffffffff8) r2 = request_key(&(0x7f0000000680)='ceph\x00', &(0x7f00000006c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000700)='vboxnet0keyring\x00', 0xfffffffffffffffc) keyctl$search(0xa, r1, &(0x7f0000000600)='.dead\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a, 0x0}, r2) keyctl$join(0x1, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'bridge0\x00', 0xce11}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge0\x00', 0x2001}) socket$inet6_dccp(0xa, 0x6, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0x1000000c4, 0x20000001, &(0x7f0000faafe4)={0xa}, 0x1c) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000300)=0x1) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000015c0)={0x0, 0x7fff, 0x0, 0x0, 0x75}, 0x14) r5 = gettid() sched_setattr(r5, &(0x7f0000000140)={0x30, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0xffffffff00000000}, 0x0) getsockname$netrom(0xffffffffffffffff, &(0x7f0000000440)=@full, &(0x7f00000004c0)=0x48) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[]}, 0x1}, 0x0) syz_fuse_mount(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/12 18:28:12 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) r1 = add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000000540)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000580)="8ab1c424a201004e8c18f151cef25766294564282d97e23fa5c4b635a5abeb51083e1bf72bb5390a5afc54531e002415ef85adbaaba003f166b158f08806adbbc429c4c53b6690a22fe07ff3d344", 0x4e, 0xfffffffffffffff8) r2 = request_key(&(0x7f0000000680)='ceph\x00', &(0x7f00000006c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000700)='vboxnet0keyring\x00', 0xfffffffffffffffc) keyctl$search(0xa, r1, &(0x7f0000000600)='.dead\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a, 0x0}, r2) keyctl$join(0x1, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'bridge0\x00', 0xce11}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge0\x00', 0x2001}) socket$inet6_dccp(0xa, 0x6, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0x1000000c4, 0x20000001, &(0x7f0000faafe4)={0xa}, 0x1c) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000300)=0x1) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000015c0)={0x0, 0x7fff, 0x0, 0x0, 0x75}, 0x14) r5 = gettid() sched_setattr(r5, &(0x7f0000000140)={0x30, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0xffffffff00000000}, 0x0) getsockname$netrom(0xffffffffffffffff, &(0x7f0000000440)=@full, &(0x7f00000004c0)=0x48) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[]}, 0x1}, 0x0) syz_fuse_mount(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/12 18:28:12 executing program 4: sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f00007e0000)=[{&(0x7f0000007000)="fd20932fcc7cfaafcf960802e02348f8fba600069da7b753c31273", 0x1b}], 0x1, &(0x7f0000001100)}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x200000000065}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2018/04/12 18:28:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) fcntl$setstatus(r1, 0x4, 0x2800) 2018/04/12 18:28:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) fcntl$setstatus(r1, 0x4, 0x2800) [ 317.928021] sd 0:0:1:0: [sg0] tag#4445 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 317.936858] sd 0:0:1:0: [sg0] tag#4445 CDB: Test Unit Ready [ 317.942643] sd 0:0:1:0: [sg0] tag#4445 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 fe ff ff [ 317.951551] sd 0:0:1:0: [sg0] tag#4445 CDB[10]: ff ff ff ff ff e4 8f 41 20 00 00 00 00 00 00 00 [ 317.960453] sd 0:0:1:0: [sg0] tag#4445 CDB[20]: 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 [ 317.969335] sd 0:0:1:0: [sg0] tag#4445 CDB[30]: 00 00 00 00 00 fe ff ff ff ff ff ff ff e5 8f 41 [ 317.978244] sd 0:0:1:0: [sg0] tag#4445 CDB[40]: 20 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 [ 317.987134] sd 0:0:1:0: [sg0] tag#4445 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 fe ff ff [ 317.996059] sd 0:0:1:0: [sg0] tag#4445 CDB[60]: ff ff ff ff ff 2018/04/12 18:28:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) fcntl$setstatus(r1, 0x4, 0x2800) 2018/04/12 18:28:12 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(aes-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x0, {0x9}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}]}, 0x18}, 0x1}, 0x0) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000100)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/106, 0x6a}], 0x1, &(0x7f0000000400)=""/203, 0xcb}, 0x0) 2018/04/12 18:28:12 executing program 5: pipe2(&(0x7f0000edeff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0xfffffebc) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 2018/04/12 18:28:12 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000f3eff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000040)={0x0, 0x2000000000000080, 0x0, "7175655502310000476277d200000000f6ffffff00000000000000000000000000000000000400f93700000000000f5200000400"}) 2018/04/12 18:28:12 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="18", 0x1, r1) keyctl$unlink(0x9, r2, r1) 2018/04/12 18:28:12 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000fb1fee)='/dev/input/event#\x00', 0x20, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000240)=""/17) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) 2018/04/12 18:28:12 executing program 4: sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f00007e0000)=[{&(0x7f0000007000)="fd20932fcc7cfaafcf960802e02348f8fba600069da7b753c31273", 0x1b}], 0x1, &(0x7f0000001100)}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x200000000065}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2018/04/12 18:28:12 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r2, 0x40001) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000400)=0x4, 0x4) sendfile(r0, r2, &(0x7f0000000000), 0x4) [ 318.120147] sd 0:0:1:0: [sg0] tag#4446 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 318.128981] sd 0:0:1:0: [sg0] tag#4446 CDB: Test Unit Ready [ 318.134754] sd 0:0:1:0: [sg0] tag#4446 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 fe ff ff [ 318.143653] sd 0:0:1:0: [sg0] tag#4446 CDB[10]: ff ff ff ff ff e4 8f 41 20 00 00 00 00 00 00 00 [ 318.152543] sd 0:0:1:0: [sg0] tag#4446 CDB[20]: 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 [ 318.161417] sd 0:0:1:0: [sg0] tag#4446 CDB[30]: 00 00 00 00 00 fe ff ff ff ff ff ff ff e5 8f 41 2018/04/12 18:28:12 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000f3eff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000040)={0x0, 0x2000000000000080, 0x0, "7175655502310000476277d200000000f6ffffff00000000000000000000000000000000000400f93700000000000f5200000400"}) 2018/04/12 18:28:12 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r2, 0x40001) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000400)=0x4, 0x4) sendfile(r0, r2, &(0x7f0000000000), 0x4) 2018/04/12 18:28:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) fcntl$setstatus(r1, 0x4, 0x2800) 2018/04/12 18:28:12 executing program 6: clock_gettime(0xfffbefeffffffff2, &(0x7f00000000c0)) 2018/04/12 18:28:12 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000e91000)={0x0, 0x0, &(0x7f00001cd000), 0x0, &(0x7f0000298000)=[{0x18, 0x1, 0x1, "13"}], 0x18}, 0x0) recvmsg(r0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ipx, 0x80, &(0x7f0000000440)=[{&(0x7f0000000040)=""/11, 0xb}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000280)=""/18, 0x12}], 0x4, &(0x7f0000000140)=""/151, 0x97}, 0x0) 2018/04/12 18:28:12 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000fb1fee)='/dev/input/event#\x00', 0x20, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000240)=""/17) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) [ 318.170310] sd 0:0:1:0: [sg0] tag#4446 CDB[40]: 20 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 [ 318.179186] sd 0:0:1:0: [sg0] tag#4446 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 fe ff ff [ 318.188059] sd 0:0:1:0: [sg0] tag#4446 CDB[60]: ff ff ff ff ff 2018/04/12 18:28:12 executing program 6: clock_gettime(0xfffbefeffffffff2, &(0x7f00000000c0)) 2018/04/12 18:28:12 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000f3eff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000040)={0x0, 0x2000000000000080, 0x0, "7175655502310000476277d200000000f6ffffff00000000000000000000000000000000000400f93700000000000f5200000400"}) 2018/04/12 18:28:12 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'ip6_vti0\x00'}}, 0x1e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x40047452, &(0x7f0000000040)={0x18, 0x4, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 'ip_vti0\x00'}}) 2018/04/12 18:28:12 executing program 7: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="87f6fede71bd", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)={0x0, 0xfffffffffffffffc, [0x0, 0x9eb]}) 2018/04/12 18:28:13 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000f3eff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000040)={0x0, 0x2000000000000080, 0x0, "7175655502310000476277d200000000f6ffffff00000000000000000000000000000000000400f93700000000000f5200000400"}) 2018/04/12 18:28:13 executing program 6: clock_gettime(0xfffbefeffffffff2, &(0x7f00000000c0)) 2018/04/12 18:28:13 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x26, 0x1000000007ffff, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) 2018/04/12 18:28:13 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000a40)=@set_option={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000940)=[{0x2b}], r1, 0x1, 0x1, 0x48}}, 0x20) 2018/04/12 18:28:13 executing program 0: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000002c0)=ANY=[]) name_to_handle_at(r0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3700000000000000fd428b11fc1020adb8c62d8b0f55443cb2087ec75f802f9f24025a901dd3c33e34f2c01ea3f41dcf05ee2830df62955fc1"], &(0x7f0000000080), 0x400) truncate(&(0x7f0000000200)='./file0\x00', 0x9) lseek(r0, 0x0, 0x4) 2018/04/12 18:28:13 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'ip6_vti0\x00'}}, 0x1e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x40047452, &(0x7f0000000040)={0x18, 0x4, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 'ip_vti0\x00'}}) 2018/04/12 18:28:13 executing program 5: pipe2(&(0x7f0000edeff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0xfffffebc) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 2018/04/12 18:28:13 executing program 7: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="87f6fede71bd", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)={0x0, 0xfffffffffffffffc, [0x0, 0x9eb]}) 2018/04/12 18:28:13 executing program 6: clock_gettime(0xfffbefeffffffff2, &(0x7f00000000c0)) 2018/04/12 18:28:13 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'ip6_vti0\x00'}}, 0x1e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x40047452, &(0x7f0000000040)={0x18, 0x4, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 'ip_vti0\x00'}}) 2018/04/12 18:28:13 executing program 0: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000002c0)=ANY=[]) name_to_handle_at(r0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3700000000000000fd428b11fc1020adb8c62d8b0f55443cb2087ec75f802f9f24025a901dd3c33e34f2c01ea3f41dcf05ee2830df62955fc1"], &(0x7f0000000080), 0x400) truncate(&(0x7f0000000200)='./file0\x00', 0x9) lseek(r0, 0x0, 0x4) 2018/04/12 18:28:13 executing program 1: r0 = socket$inet6(0xa, 0x80803, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/12 18:28:13 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000a40)=@set_option={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000940)=[{0x2b}], r1, 0x1, 0x1, 0x48}}, 0x20) 2018/04/12 18:28:13 executing program 7: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="87f6fede71bd", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)={0x0, 0xfffffffffffffffc, [0x0, 0x9eb]}) 2018/04/12 18:28:13 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000017fdc)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002031f001cfffd946fa2830020200a000900030002e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) [ 319.111386] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 319.147523] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 319.158094] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. 2018/04/12 18:28:14 executing program 7: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="87f6fede71bd", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)={0x0, 0xfffffffffffffffc, [0x0, 0x9eb]}) 2018/04/12 18:28:14 executing program 0: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000002c0)=ANY=[]) name_to_handle_at(r0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3700000000000000fd428b11fc1020adb8c62d8b0f55443cb2087ec75f802f9f24025a901dd3c33e34f2c01ea3f41dcf05ee2830df62955fc1"], &(0x7f0000000080), 0x400) truncate(&(0x7f0000000200)='./file0\x00', 0x9) lseek(r0, 0x0, 0x4) 2018/04/12 18:28:14 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003f80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="c484b4a4eff66871b6a98a2275ba15fe", 0x10}], 0x1, &(0x7f00000014c0)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/12 18:28:14 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'ip6_vti0\x00'}}, 0x1e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x40047452, &(0x7f0000000040)={0x18, 0x4, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 'ip_vti0\x00'}}) 2018/04/12 18:28:14 executing program 6: r0 = socket$inet(0x2, 0x803, 0x81) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@nat={'nat\x00', 0x19, 0x2, 0x260, [0x200015c0, 0x0, 0x0, 0x200017c0, 0x200017f0], 0x0, &(0x7f0000001580), &(0x7f00000015c0)=ANY=[@ANYBLOB="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"]}, 0x2d8) 2018/04/12 18:28:14 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000a40)=@set_option={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000940)=[{0x2b}], r1, 0x1, 0x1, 0x48}}, 0x20) 2018/04/12 18:28:14 executing program 5: pipe2(&(0x7f0000edeff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0xfffffebc) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 2018/04/12 18:28:14 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000017fdc)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002031f001cfffd946fa2830020200a000900030002e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 2018/04/12 18:28:14 executing program 7: mkdir(&(0x7f0000639000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r0, &(0x7f0000000000)='L', 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) r2 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) dup2(r2, r0) [ 319.835964] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. 2018/04/12 18:28:14 executing program 0: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000002c0)=ANY=[]) name_to_handle_at(r0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3700000000000000fd428b11fc1020adb8c62d8b0f55443cb2087ec75f802f9f24025a901dd3c33e34f2c01ea3f41dcf05ee2830df62955fc1"], &(0x7f0000000080), 0x400) truncate(&(0x7f0000000200)='./file0\x00', 0x9) lseek(r0, 0x0, 0x4) 2018/04/12 18:28:14 executing program 6: r0 = socket$inet(0x2, 0x803, 0x81) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@nat={'nat\x00', 0x19, 0x2, 0x260, [0x200015c0, 0x0, 0x0, 0x200017c0, 0x200017f0], 0x0, &(0x7f0000001580), &(0x7f00000015c0)=ANY=[@ANYBLOB="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"]}, 0x2d8) 2018/04/12 18:28:14 executing program 3: r0 = memfd_create(&(0x7f0000000200)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x101802) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r2, &(0x7f0000048fe4)=[{0x0, 0x203, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x26) write$sndseq(r2, &(0x7f0000053000)=[{0x0, 0x1, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000055ffe)}}], 0xfffffd56) 2018/04/12 18:28:14 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000a40)=@set_option={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000940)=[{0x2b}], r1, 0x1, 0x1, 0x48}}, 0x20) [ 319.876369] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. 2018/04/12 18:28:14 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x2, &(0x7f0000000000)=@raw=[@alu], &(0x7f0000000200)='syzkaller\x00', 0x0, 0xbb, &(0x7f00000000c0)=""/187}, 0x48) 2018/04/12 18:28:14 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003f80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="c484b4a4eff66871b6a98a2275ba15fe", 0x10}], 0x1, &(0x7f00000014c0)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/12 18:28:14 executing program 4: mkdir(&(0x7f000022d000)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='tmpfs\x00', 0x0, &(0x7f0000ebcffe)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000480)='./file0/bus\x00', 0x0) rename(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='./file0/file0\x00') 2018/04/12 18:28:14 executing program 6: r0 = socket$inet(0x2, 0x803, 0x81) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@nat={'nat\x00', 0x19, 0x2, 0x260, [0x200015c0, 0x0, 0x0, 0x200017c0, 0x200017f0], 0x0, &(0x7f0000001580), &(0x7f00000015c0)=ANY=[@ANYBLOB="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"]}, 0x2d8) 2018/04/12 18:28:14 executing program 3: r0 = memfd_create(&(0x7f0000000200)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x101802) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r2, &(0x7f0000048fe4)=[{0x0, 0x203, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x26) write$sndseq(r2, &(0x7f0000053000)=[{0x0, 0x1, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000055ffe)}}], 0xfffffd56) 2018/04/12 18:28:14 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000017fdc)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002031f001cfffd946fa2830020200a000900030002e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 2018/04/12 18:28:14 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x2, &(0x7f0000000000)=@raw=[@alu], &(0x7f0000000200)='syzkaller\x00', 0x0, 0xbb, &(0x7f00000000c0)=""/187}, 0x48) [ 320.060786] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 320.097376] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. 2018/04/12 18:28:15 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003f80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="c484b4a4eff66871b6a98a2275ba15fe", 0x10}], 0x1, &(0x7f00000014c0)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/12 18:28:15 executing program 6: r0 = socket$inet(0x2, 0x803, 0x81) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@nat={'nat\x00', 0x19, 0x2, 0x260, [0x200015c0, 0x0, 0x0, 0x200017c0, 0x200017f0], 0x0, &(0x7f0000001580), &(0x7f00000015c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff02000000050000000000000008006c6f0000000000000000000000000000626f6e64300080000000200000000000697036746e6c3000000000000000000069703667726574617030000000000000aaaaaaaaaaaa000000000000ffffffffffff0000000000000000b8000000f00000002801000069700000000000000000000000000000000000000000000000000000000000002000000000000000ac141400ffffffff00000000000000000006300000010000000100fbad0000006172707265706c7900000000000000000000000000000000000000000000000010000000000000000180c2000000000000000000000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa000000000000000000001b000000000000000000736974300000000000000000000000007663616e3000000000000000000000006c6f0000000000000000000000000000726f73653000000000000000000000005703a99868490000000000000180c200000000000000000000007000000070000000a80000006162707265706c7900000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000"]}, 0x2d8) 2018/04/12 18:28:15 executing program 4: mkdir(&(0x7f000022d000)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='tmpfs\x00', 0x0, &(0x7f0000ebcffe)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000480)='./file0/bus\x00', 0x0) rename(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='./file0/file0\x00') 2018/04/12 18:28:15 executing program 3: r0 = memfd_create(&(0x7f0000000200)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x101802) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r2, &(0x7f0000048fe4)=[{0x0, 0x203, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x26) write$sndseq(r2, &(0x7f0000053000)=[{0x0, 0x1, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000055ffe)}}], 0xfffffd56) 2018/04/12 18:28:15 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x2, &(0x7f0000000000)=@raw=[@alu], &(0x7f0000000200)='syzkaller\x00', 0x0, 0xbb, &(0x7f00000000c0)=""/187}, 0x48) 2018/04/12 18:28:15 executing program 5: pipe2(&(0x7f0000edeff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0xfffffebc) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 2018/04/12 18:28:15 executing program 7: mkdir(&(0x7f0000639000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r0, &(0x7f0000000000)='L', 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) r2 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) dup2(r2, r0) 2018/04/12 18:28:15 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000017fdc)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002031f001cfffd946fa2830020200a000900030002e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 2018/04/12 18:28:15 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x2, &(0x7f0000000000)=@raw=[@alu], &(0x7f0000000200)='syzkaller\x00', 0x0, 0xbb, &(0x7f00000000c0)=""/187}, 0x48) 2018/04/12 18:28:15 executing program 4: mkdir(&(0x7f000022d000)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='tmpfs\x00', 0x0, &(0x7f0000ebcffe)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000480)='./file0/bus\x00', 0x0) rename(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='./file0/file0\x00') 2018/04/12 18:28:15 executing program 3: r0 = memfd_create(&(0x7f0000000200)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x101802) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r2, &(0x7f0000048fe4)=[{0x0, 0x203, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x26) write$sndseq(r2, &(0x7f0000053000)=[{0x0, 0x1, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000055ffe)}}], 0xfffffd56) [ 320.779502] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 320.797406] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. 2018/04/12 18:28:15 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = socket(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000003fd8)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000001000)={&(0x7f0000002000)={0x1d, r2}, 0x10, &(0x7f0000003ff0)={&(0x7f0000000000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "f41496dc508577edf3b14aad43127b5a913d53ed43573373f0cc72cb81bca4376e6ba2933accb787dcfde12f55461de6e2c675100cf71203aebcad2d7190fb2b"}, 0x10}, 0x1}, 0x0) 2018/04/12 18:28:15 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003f80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="c484b4a4eff66871b6a98a2275ba15fe", 0x10}], 0x1, &(0x7f00000014c0)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/12 18:28:15 executing program 2: open$dir(&(0x7f0000000040)='./file0\x00', 0x1fffe, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x5) 2018/04/12 18:28:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f000001cb24)={0x20, 0x18, 0x1, 0x0, 0x0, {0x5}, [@typed={0xc, 0x6, @ipv4=@broadcast=0xffffffff}]}, 0x20}, 0x1}, 0x0) 2018/04/12 18:28:15 executing program 4: mkdir(&(0x7f000022d000)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='tmpfs\x00', 0x0, &(0x7f0000ebcffe)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000480)='./file0/bus\x00', 0x0) rename(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='./file0/file0\x00') 2018/04/12 18:28:15 executing program 2: open$dir(&(0x7f0000000040)='./file0\x00', 0x1fffe, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x5) 2018/04/12 18:28:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f000001cb24)={0x20, 0x18, 0x1, 0x0, 0x0, {0x5}, [@typed={0xc, 0x6, @ipv4=@broadcast=0xffffffff}]}, 0x20}, 0x1}, 0x0) 2018/04/12 18:28:15 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}, 0x3) 2018/04/12 18:28:15 executing program 2: open$dir(&(0x7f0000000040)='./file0\x00', 0x1fffe, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x5) 2018/04/12 18:28:15 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00004b3fff), 0xfe31, 0x0, &(0x7f00002b4000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/12 18:28:15 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = socket(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000003fd8)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000001000)={&(0x7f0000002000)={0x1d, r2}, 0x10, &(0x7f0000003ff0)={&(0x7f0000000000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "f41496dc508577edf3b14aad43127b5a913d53ed43573373f0cc72cb81bca4376e6ba2933accb787dcfde12f55461de6e2c675100cf71203aebcad2d7190fb2b"}, 0x10}, 0x1}, 0x0) 2018/04/12 18:28:15 executing program 7: mkdir(&(0x7f0000639000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r0, &(0x7f0000000000)='L', 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) r2 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) dup2(r2, r0) 2018/04/12 18:28:15 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4003, 0x0, 0x0, 0x3, 0x0) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/04/12 18:28:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000040)={0x1c, 0x20000031, 0x201, 0x0, 0x0, {}, [@nested={0x8, 0x1, [@typed={0x4, 0x1, @binary}]}]}, 0x1c}, 0x1}, 0x0) 2018/04/12 18:28:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000040)={0x1c, 0x20000031, 0x201, 0x0, 0x0, {}, [@nested={0x8, 0x1, [@typed={0x4, 0x1, @binary}]}]}, 0x1c}, 0x1}, 0x0) 2018/04/12 18:28:16 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00004b3fff), 0xfe31, 0x0, &(0x7f00002b4000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/12 18:28:16 executing program 2: open$dir(&(0x7f0000000040)='./file0\x00', 0x1fffe, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x5) 2018/04/12 18:28:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f000001cb24)={0x20, 0x18, 0x1, 0x0, 0x0, {0x5}, [@typed={0xc, 0x6, @ipv4=@broadcast=0xffffffff}]}, 0x20}, 0x1}, 0x0) 2018/04/12 18:28:16 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}, 0x3) 2018/04/12 18:28:16 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = socket(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000003fd8)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000001000)={&(0x7f0000002000)={0x1d, r2}, 0x10, &(0x7f0000003ff0)={&(0x7f0000000000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "f41496dc508577edf3b14aad43127b5a913d53ed43573373f0cc72cb81bca4376e6ba2933accb787dcfde12f55461de6e2c675100cf71203aebcad2d7190fb2b"}, 0x10}, 0x1}, 0x0) 2018/04/12 18:28:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4003, 0x0, 0x0, 0x3, 0x0) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/04/12 18:28:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000040)={0x1c, 0x20000031, 0x201, 0x0, 0x0, {}, [@nested={0x8, 0x1, [@typed={0x4, 0x1, @binary}]}]}, 0x1c}, 0x1}, 0x0) 2018/04/12 18:28:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f000001cb24)={0x20, 0x18, 0x1, 0x0, 0x0, {0x5}, [@typed={0xc, 0x6, @ipv4=@broadcast=0xffffffff}]}, 0x20}, 0x1}, 0x0) [ 321.983687] bond0 (unregistering): Releasing backup interface bond_slave [ 321.995430] team0 (unregistering): Port device team_slave removed [ 322.009430] bond0 (unregistering): Released all slaves 2018/04/12 18:28:17 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00004b3fff), 0xfe31, 0x0, &(0x7f00002b4000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/12 18:28:17 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}, 0x3) 2018/04/12 18:28:17 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000d1cff8)={0x5, 0x100, 0x100, 0x2}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000269fb8)={0x1, 0x3, &(0x7f00000affc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000039cff6)='syzkaller\x00', 0x8, 0x1000, &(0x7f000039c000)=""/4096}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f000032a000)={r0, 0x246, &(0x7f000039efb0)}, 0x5) 2018/04/12 18:28:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000040)={0x1c, 0x20000031, 0x201, 0x0, 0x0, {}, [@nested={0x8, 0x1, [@typed={0x4, 0x1, @binary}]}]}, 0x1c}, 0x1}, 0x0) 2018/04/12 18:28:17 executing program 0: syz_emit_ethernet(0x14, &(0x7f00000c5fe8)={@dev={[0xaa, 0xaa, 0xaa, 0xaa]}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@generic={0x8863, "94a7030000e8"}}}, &(0x7f0000000000)={0x0, 0x2, [0x0, 0xffffffffffffffff]}) 2018/04/12 18:28:17 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4003, 0x0, 0x0, 0x3, 0x0) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/04/12 18:28:17 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = socket(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000003fd8)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000001000)={&(0x7f0000002000)={0x1d, r2}, 0x10, &(0x7f0000003ff0)={&(0x7f0000000000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "f41496dc508577edf3b14aad43127b5a913d53ed43573373f0cc72cb81bca4376e6ba2933accb787dcfde12f55461de6e2c675100cf71203aebcad2d7190fb2b"}, 0x10}, 0x1}, 0x0) 2018/04/12 18:28:17 executing program 7: mkdir(&(0x7f0000639000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r0, &(0x7f0000000000)='L', 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) r2 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) dup2(r2, r0) 2018/04/12 18:28:17 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}, 0x3) 2018/04/12 18:28:17 executing program 3: r0 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) dup3(r0, r1, 0x0) 2018/04/12 18:28:17 executing program 0: syz_emit_ethernet(0x14, &(0x7f00000c5fe8)={@dev={[0xaa, 0xaa, 0xaa, 0xaa]}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@generic={0x8863, "94a7030000e8"}}}, &(0x7f0000000000)={0x0, 0x2, [0x0, 0xffffffffffffffff]}) 2018/04/12 18:28:17 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00004b3fff), 0xfe31, 0x0, &(0x7f00002b4000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/12 18:28:17 executing program 6: io_setup(0xba, &(0x7f0000000000)=0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="0f0200000000000000610dc3c65ac45d809af44d", 0x14}]) 2018/04/12 18:28:17 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000d1cff8)={0x5, 0x100, 0x100, 0x2}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000269fb8)={0x1, 0x3, &(0x7f00000affc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000039cff6)='syzkaller\x00', 0x8, 0x1000, &(0x7f000039c000)=""/4096}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f000032a000)={r0, 0x246, &(0x7f000039efb0)}, 0x5) [ 323.048206] IPVS: ftp: loaded support on port[0] = 21 [ 323.559462] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 324.329060] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 324.335164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.412665] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 324.485396] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 324.491572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 324.499183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 324.568685] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 324.574810] 8021q: adding VLAN 0 to HW filter on device team0 2018/04/12 18:28:19 executing program 7: r0 = getpgrp(0xffffffffffffffff) getpriority(0x0, r0) 2018/04/12 18:28:19 executing program 0: syz_emit_ethernet(0x14, &(0x7f00000c5fe8)={@dev={[0xaa, 0xaa, 0xaa, 0xaa]}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@generic={0x8863, "94a7030000e8"}}}, &(0x7f0000000000)={0x0, 0x2, [0x0, 0xffffffffffffffff]}) 2018/04/12 18:28:19 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af20, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000ae5f44)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) 2018/04/12 18:28:19 executing program 3: r0 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) dup3(r0, r1, 0x0) 2018/04/12 18:28:19 executing program 6: io_setup(0xba, &(0x7f0000000000)=0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="0f0200000000000000610dc3c65ac45d809af44d", 0x14}]) 2018/04/12 18:28:19 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000d1cff8)={0x5, 0x100, 0x100, 0x2}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000269fb8)={0x1, 0x3, &(0x7f00000affc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000039cff6)='syzkaller\x00', 0x8, 0x1000, &(0x7f000039c000)=""/4096}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f000032a000)={r0, 0x246, &(0x7f000039efb0)}, 0x5) 2018/04/12 18:28:19 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4003, 0x0, 0x0, 0x3, 0x0) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/04/12 18:28:19 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x45}, [], {0x95}}, &(0x7f0000000000)='@pH \x00', 0x10000002, 0x35b, &(0x7f0000000000)=""/153}, 0x48) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040), 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x4, 0x4, 0x1934, 0x0, 0xffffffffffffffff, 0x0, [0x305f]}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r0, &(0x7f0000000300), &(0x7f0000000240)="06"}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000040)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x5, &(0x7f0000000100)=@framed={{0x18}, [@call={0x85, 0x0, 0x0, 0x6}], {0x95}}, &(0x7f0000000400)='syzk!ller\x00', 0xd1b, 0xe4, &(0x7f00000001c0)=""/228}, 0x48) socketpair(0x3, 0x7, 0x9, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000680)={&(0x7f0000000300)=@in={0x2, 0x4e22}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000440)="119ed7a3635449d68da567377b457edd86ce2ceaf7c0f5cf4e4fa930690bdd374895cf71d314503da3258d206bc377a6753e82cf8956b3070939216a7e5b7fecaefac94fc4ebce3c5ff957f305ba71bb220030e9c0def0a87f16b16115d1c293d90afbee8031ae852726eab52fd5e33fcf0afbde22160f4a7e836d6c55571e156c4971bd071b01f04cbd696839c836cfcc8e81dd1154f5b989fe421a30c8cdcb582c556aa1d237378b747d66969b673ebf8f839799", 0xb5}], 0x1, &(0x7f0000000540), 0x0, 0x4000}, 0x24044804) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='selinuxfs\x00', 0x1000, &(0x7f0000000100)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nsfs\x00', 0x10020, &(0x7f0000000240)) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000040)='cgroup\x00', 0x3a000, &(0x7f0000000080)) [ 324.620668] bond0: Enslaving bond_slave as an active interface with an up link [ 324.628563] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 324.654193] team0: Port device team_slave added [ 324.659499] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 324.738419] [ 324.740301] ********************************************************** [ 324.747021] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 324.753725] ** ** [ 324.761153] ** trace_printk() being used. Allocating extra memory. ** [ 324.767977] ** ** [ 324.774686] ** This means that this is a DEBUG kernel and it is ** [ 324.781384] ** unsafe for production use. ** 2018/04/12 18:28:19 executing program 0: syz_emit_ethernet(0x14, &(0x7f00000c5fe8)={@dev={[0xaa, 0xaa, 0xaa, 0xaa]}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@generic={0x8863, "94a7030000e8"}}}, &(0x7f0000000000)={0x0, 0x2, [0x0, 0xffffffffffffffff]}) 2018/04/12 18:28:19 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) bind$inet(r0, &(0x7f0000003ff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000013000)=[@in={0x2, 0x0, @broadcast=0xffffffff}], 0x10) sendto$inet(r0, &(0x7f000001d000)="a9", 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x7) accept4(r0, &(0x7f0000000140)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, &(0x7f00000001c0)=0x80, 0x0) 2018/04/12 18:28:19 executing program 3: r0 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) dup3(r0, r1, 0x0) 2018/04/12 18:28:19 executing program 6: io_setup(0xba, &(0x7f0000000000)=0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="0f0200000000000000610dc3c65ac45d809af44d", 0x14}]) 2018/04/12 18:28:19 executing program 7: r0 = getpgrp(0xffffffffffffffff) getpriority(0x0, r0) 2018/04/12 18:28:19 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000d1cff8)={0x5, 0x100, 0x100, 0x2}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000269fb8)={0x1, 0x3, &(0x7f00000affc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000039cff6)='syzkaller\x00', 0x8, 0x1000, &(0x7f000039c000)=""/4096}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f000032a000)={r0, 0x246, &(0x7f000039efb0)}, 0x5) [ 324.788098] ** ** [ 324.794794] ** If you see this message and you are not debugging ** [ 324.801504] ** the kernel, report this immediately to your vendor! ** [ 324.808193] ** ** [ 324.814929] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 324.821625] ********************************************************** 2018/04/12 18:28:19 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af20, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000ae5f44)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) 2018/04/12 18:28:19 executing program 7: r0 = getpgrp(0xffffffffffffffff) getpriority(0x0, r0) [ 449.998886] INFO: rcu_sched self-detected stall on CPU [ 450.004343] 1-...!: (124999 ticks this GP) idle=38a/1/4611686018427387906 softirq=93096/93096 fqs=10 [ 450.013998] (t=125000 jiffies g=50926 c=50925 q=111) [ 450.019290] rcu_sched kthread starved for 124957 jiffies! g50926 c50925 f0x0 RCU_GP_WAIT_FQS(3) ->state=0x0 ->cpu=0 [ 450.029848] RCU grace-period kthread stack dump: [ 450.034594] rcu_sched R running task 23224 9 2 0x80000000 [ 450.041793] Call Trace: [ 450.044388] __schedule+0x801/0x1e30 [ 450.048102] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 450.053120] ? __sched_text_start+0x8/0x8 [ 450.057271] ? add_timer_on+0xa50/0xa50 [ 450.061239] ? find_held_lock+0x36/0x1c0 [ 450.065307] ? lock_downgrade+0x8e0/0x8e0 [ 450.069463] schedule+0xef/0x430 [ 450.072829] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 450.077408] ? __schedule+0x1e30/0x1e30 [ 450.081383] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 450.086394] ? trace_hardirqs_on+0xd/0x10 [ 450.090540] ? prepare_to_swait+0x191/0x4f0 [ 450.094853] ? __lockdep_init_map+0x105/0x590 [ 450.099347] ? lockdep_init_map+0x9/0x10 [ 450.103406] ? init_timer_on_stack_key+0xb7/0xe0 [ 450.108161] schedule_timeout+0x138/0x240 [ 450.112308] ? usleep_range+0x180/0x180 [ 450.116278] ? __next_timer_interrupt+0x1a0/0x1a0 [ 450.121126] rcu_gp_kthread+0x6b5/0x1940 [ 450.125204] ? rcu_batches_completed_sched+0x10/0x10 [ 450.130303] ? sched_domains_numa_masks_set+0x121/0x230 [ 450.135667] ? pick_next_task_fair+0x973/0x1660 [ 450.140332] ? graph_lock+0x170/0x170 [ 450.144130] ? resched_curr+0x122/0x190 [ 450.148110] ? sched_domains_numa_masks_set+0x120/0x230 [ 450.153482] ? lock_downgrade+0x8e0/0x8e0 [ 450.157623] ? finish_task_switch+0x182/0x810 [ 450.162119] ? kasan_check_read+0x11/0x20 [ 450.166262] ? do_raw_spin_unlock+0x9e/0x2e0 [ 450.170666] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 450.175251] ? compat_start_thread+0x80/0x80 [ 450.179653] ? _raw_spin_unlock_irq+0x27/0x70 [ 450.184148] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 450.189165] ? kasan_check_write+0x14/0x20 [ 450.193396] ? finish_task_switch+0x28b/0x810 [ 450.197894] ? copy_overflow+0x20/0x20 [ 450.201783] ? lock_repin_lock+0x410/0x410 [ 450.206024] ? __schedule+0x809/0x1e30 [ 450.209919] ? graph_lock+0x170/0x170 [ 450.213719] ? find_held_lock+0x36/0x1c0 [ 450.217787] ? find_held_lock+0x36/0x1c0 [ 450.221874] ? __schedule+0x1e30/0x1e30 [ 450.225847] ? do_raw_spin_unlock+0x9e/0x2e0 [ 450.230254] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 450.234838] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 450.239863] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 450.245396] ? __kthread_parkme+0x1b7/0x280 [ 450.249716] kthread+0x345/0x410 [ 450.253078] ? rcu_batches_completed_sched+0x10/0x10 [ 450.258177] ? kthread_bind+0x40/0x40 [ 450.261976] ret_from_fork+0x3a/0x50 [ 450.265698] NMI backtrace for cpu 1 [ 450.269320] CPU: 1 PID: 4528 Comm: syz-executor6 Not tainted 4.16.0+ #1 [ 450.276063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.285406] Call Trace: [ 450.287982] [ 450.290131] dump_stack+0x1b9/0x294 [ 450.293758] ? dump_stack_print_info.cold.2+0x52/0x52 [ 450.298942] ? lock_release+0xa10/0xa10 [ 450.302924] nmi_cpu_backtrace.cold.4+0x19/0xce [ 450.307595] ? lapic_can_unplug_cpu.cold.26+0x3f/0x3f [ 450.312781] nmi_trigger_cpumask_backtrace+0x151/0x192 [ 450.318060] arch_trigger_cpumask_backtrace+0x14/0x20 [ 450.323245] rcu_dump_cpu_stacks+0x175/0x1c2 [ 450.327650] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 450.332673] check_cpu_stall.isra.61.cold.80+0x36c/0x59a [ 450.338128] ? print_other_cpu_stall+0x4a0/0x4a0 [ 450.342891] ? debug_check_no_locks_freed+0x310/0x310 [ 450.348074] ? find_held_lock+0x36/0x1c0 [ 450.352140] ? zap_class+0x720/0x720 [ 450.355855] ? perf_trace_lock+0xd6/0x900 [ 450.359993] ? zap_class+0x720/0x720 [ 450.363701] ? graph_lock+0x170/0x170 [ 450.367498] ? graph_lock+0x170/0x170 [ 450.371298] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.376831] ? pvclock_gtod_notify+0x2db/0x3c0 [ 450.381410] ? graph_lock+0x170/0x170 [ 450.385206] ? graph_lock+0x170/0x170 [ 450.389016] ? __lock_is_held+0xb5/0x140 [ 450.393088] rcu_check_callbacks+0x21b/0xad0 [ 450.397495] ? rcu_cpu_stall_reset+0x210/0x210 [ 450.402073] ? trace_hardirqs_off+0xd/0x10 [ 450.406316] ? raise_softirq+0x1b2/0x450 [ 450.410374] ? raise_softirq_irqoff+0x310/0x310 [ 450.415050] ? account_guest_time+0x3d0/0x3d0 [ 450.419541] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 450.425077] ? hrtimer_run_queues+0x70/0x300 [ 450.429486] ? run_local_timers+0x168/0x1d0 [ 450.433802] ? timer_clear_idle+0x50/0x50 [ 450.437951] ? account_system_time+0x7f/0xb0 [ 450.442356] ? account_process_tick+0x76/0x240 [ 450.446940] update_process_times+0x2d/0x70 [ 450.451257] tick_sched_handle+0x9f/0x180 [ 450.455402] tick_sched_timer+0x45/0x130 [ 450.459465] __hrtimer_run_queues+0x3e3/0x10a0 [ 450.464050] ? tick_sched_do_timer+0x1a0/0x1a0 [ 450.468634] ? hrtimer_start_range_ns+0xd10/0xd10 [ 450.473482] ? pvclock_read_flags+0x160/0x160 [ 450.477976] ? kvm_clock_read+0x25/0x30 [ 450.481954] ? kvm_clock_read+0x25/0x30 [ 450.485929] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 450.490941] ? ktime_get_update_offsets_now+0x3a6/0x570 [ 450.496304] ? do_timer+0x50/0x50 [ 450.499756] ? rcu_nmi_exit+0xd7/0x2b0 [ 450.503649] ? do_raw_spin_lock+0xc1/0x200 [ 450.507891] hrtimer_interrupt+0x286/0x650 [ 450.512139] smp_apic_timer_interrupt+0x15d/0x710 [ 450.516981] ? smp_call_function_single_interrupt+0x650/0x650 [ 450.522859] ? _raw_spin_lock+0x32/0x40 [ 450.526832] ? _raw_spin_unlock+0x22/0x30 [ 450.530979] ? handle_edge_irq+0x330/0x870 [ 450.535213] ? task_prio+0x50/0x50 [ 450.538757] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 450.543602] apic_timer_interrupt+0xf/0x20 [ 450.547832] [ 450.550067] RIP: 0010:lock_release+0x4ed/0xa10 [ 450.554637] RSP: 0018:ffff880197d67880 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 450.562342] RAX: dffffc0000000000 RBX: ffffed0032facf15 RCX: 1ffff10032fab1e5 [ 450.569604] RDX: 1ffffffff11630ed RSI: 0000000000000005 RDI: 0000000000000282 [ 450.576870] RBP: ffff880197d679b0 R08: 1ffff10032facf19 R09: ffff880197d67708 [ 450.584135] R10: 0000000000000003 R11: 0000000000000004 R12: ffff880197d58700 [ 450.591398] R13: ffff8801b232b238 R14: ffff880197d58700 R15: ffff880197d678c8 [ 450.598690] ? lock_downgrade+0x8e0/0x8e0 [ 450.602837] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.608373] ? select_collect+0x22a/0x5f0 [ 450.612523] ? d_shrink_del+0x3b0/0x3b0 [ 450.616585] ? kasan_check_write+0x14/0x20 [ 450.620813] ? do_raw_spin_lock+0xc1/0x200 [ 450.625051] _raw_spin_unlock+0x1a/0x30 [ 450.629021] d_walk+0x451/0xc80 [ 450.632303] ? d_shrink_del+0x3b0/0x3b0 [ 450.636275] ? dget_parent+0x680/0x680 [ 450.640162] ? shrink_dentry_list+0x5a8/0x7c0 [ 450.644660] ? is_subdir+0x480/0x480 [ 450.648376] ? d_walk+0x781/0xc80 [ 450.651832] shrink_dcache_parent+0x179/0x230 [ 450.656326] ? path_has_submounts+0x1a0/0x1a0 [ 450.660817] ? down_write+0x87/0x120 [ 450.664525] ? vfs_rmdir+0xe0/0x470 [ 450.668151] ? down_read+0x1b0/0x1b0 [ 450.671866] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.677398] ? security_inode_rmdir+0xf4/0x130 [ 450.681976] vfs_rmdir+0x202/0x470 [ 450.685513] do_rmdir+0x523/0x610 [ 450.688967] ? SyS_mkdir+0x30/0x30 [ 450.692504] ? exit_to_usermode_loop+0x87/0x310 [ 450.697177] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.702710] ? exit_to_usermode_loop+0x1ef/0x310 [ 450.707467] ? do_syscall_64+0xb7/0x9d0 [ 450.711434] ? do_rmdir+0x610/0x610 [ 450.715057] SyS_rmdir+0x1a/0x20 [ 450.718419] do_syscall_64+0x29e/0x9d0 [ 450.722301] ? vmalloc_sync_all+0x30/0x30 [ 450.726447] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 450.731285] ? syscall_return_slowpath+0x5c0/0x5c0 [ 450.736215] ? syscall_return_slowpath+0x30f/0x5c0 [ 450.741143] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 450.746509] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 450.751363] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 450.756545] RIP: 0033:0x454fe7 [ 450.759726] RSP: 002b:00007ffcd2c8f458 EFLAGS: 00000202 ORIG_RAX: 0000000000000054 [ 450.767431] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 0000000000454fe7 [ 450.774696] RDX: 0000000000000000 RSI: 00007ffcd2c91200 RDI: 00007ffcd2c91200 [ 450.781958] RBP: 00007ffcd2c91200 R08: 0000000000000000 R09: 0000000000000001 [ 450.789222] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000c63940 [ 450.796484] R13: 0000000000000000 R14: 00000000000005bc R15: 000000000004f52f