INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.36' (ECDSA) to the list of known hosts. 2018/04/13 14:58:07 fuzzer started 2018/04/13 14:58:08 dialing manager at 10.128.0.26:45267 syzkaller login: [ 41.177529] can: request_module (can-proto-0) failed. [ 41.187327] can: request_module (can-proto-0) failed. 2018/04/13 14:58:19 kcov=true, comps=true 2018/04/13 14:58:24 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 2018/04/13 14:58:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x1, 0x3401, 0x329}, 0x14}, 0x1}, 0x0) 2018/04/13 14:58:24 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000da9000)=ANY=[@ANYBLOB="020200091000000000000000000000000200130002000000000000000006000005000600000000000a000000000000000000005f49e32cb1000000000000000000000000000000000200010000000000000000020000000005000500000000000a00000000000000ff01000000000000000000aa386adb32815742ce838b0000"], 0x80}, 0x1}, 0x0) 2018/04/13 14:58:24 executing program 2: perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f00002ac000)='/dev/input/mice\x00', 0x0, 0x3e) r1 = syz_open_procfs(0x0, &(0x7f0000d7b000)='net/raw\x00') sendfile(r0, r1, &(0x7f00008d1000), 0x401) 2018/04/13 14:58:24 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='vegas\x00', 0x6) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) 2018/04/13 14:58:24 executing program 4: perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) 2018/04/13 14:58:24 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/13 14:58:24 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000880)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x200000000000005b, &(0x7f0000000040)=[{0x8}]}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000380)={'bridge0\x00', &(0x7f0000000040)=ANY=[]}) [ 47.584414] IPVS: ftp: loaded support on port[0] = 21 [ 47.601828] IPVS: ftp: loaded support on port[0] = 21 [ 47.622368] IPVS: ftp: loaded support on port[0] = 21 [ 47.653680] IPVS: ftp: loaded support on port[0] = 21 [ 47.655353] IPVS: ftp: loaded support on port[0] = 21 [ 47.709092] IPVS: ftp: loaded support on port[0] = 21 [ 47.722086] IPVS: ftp: loaded support on port[0] = 21 [ 47.734469] IPVS: ftp: loaded support on port[0] = 21 [ 48.458575] ip (4622) used greatest stack depth: 16296 bytes left [ 49.702733] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.709310] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.732618] device bridge_slave_0 entered promiscuous mode [ 49.761176] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.767620] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.783576] device bridge_slave_0 entered promiscuous mode [ 49.811309] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.817726] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.842848] device bridge_slave_0 entered promiscuous mode [ 49.861973] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.868405] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.888649] device bridge_slave_0 entered promiscuous mode [ 49.902269] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.908709] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.917623] device bridge_slave_1 entered promiscuous mode [ 49.925167] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.931721] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.940261] device bridge_slave_0 entered promiscuous mode [ 49.980594] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.987111] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.996296] device bridge_slave_1 entered promiscuous mode [ 50.012578] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.018986] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.039572] device bridge_slave_1 entered promiscuous mode [ 50.050934] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.060846] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.069591] device bridge_slave_0 entered promiscuous mode [ 50.078839] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.096734] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.103876] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.116593] device bridge_slave_1 entered promiscuous mode [ 50.125565] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.131960] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.141088] device bridge_slave_0 entered promiscuous mode [ 50.148816] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.155221] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.163577] device bridge_slave_1 entered promiscuous mode [ 50.172550] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.178973] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.186733] device bridge_slave_0 entered promiscuous mode [ 50.197011] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.206498] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.214770] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.221144] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.250907] device bridge_slave_1 entered promiscuous mode [ 50.264113] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.271396] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.280280] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.286771] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.310301] device bridge_slave_1 entered promiscuous mode [ 50.323551] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.329983] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.344770] device bridge_slave_1 entered promiscuous mode [ 50.352821] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.361411] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.368682] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.380534] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.389190] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.411841] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.492844] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.531077] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.539701] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.547321] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.618611] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.671117] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.781790] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.791216] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.827859] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.844672] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.889542] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.905164] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.954598] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.971334] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.980455] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.999183] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.016650] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.050420] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.101905] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.111062] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.118445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.136266] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.146980] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.164354] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.171335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.183338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.206643] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.215669] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.225403] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.236162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.255279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.278841] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.285889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.303693] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.312310] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.325982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.349430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.368668] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.378947] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.385844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.398489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.414735] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.428889] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.437000] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.443886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.457980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.473533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.518171] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.525136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.651980] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.674857] team0: Port device team_slave_0 added [ 51.736091] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.756691] team0: Port device team_slave_0 added [ 51.771337] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.781072] team0: Port device team_slave_0 added [ 51.804402] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.817396] team0: Port device team_slave_0 added [ 51.825264] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.834634] team0: Port device team_slave_1 added [ 51.852006] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.862735] team0: Port device team_slave_0 added [ 51.874113] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.889833] team0: Port device team_slave_1 added [ 51.898382] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.909421] team0: Port device team_slave_0 added [ 51.919119] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.942178] team0: Port device team_slave_0 added [ 51.961505] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.970640] team0: Port device team_slave_1 added [ 51.981359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.998376] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.006496] team0: Port device team_slave_1 added [ 52.015790] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.030868] team0: Port device team_slave_1 added [ 52.040214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.057850] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.065698] team0: Port device team_slave_0 added [ 52.075858] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.090237] team0: Port device team_slave_1 added [ 52.113162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.139667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.166448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.176567] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.183490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.191954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.201374] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.208727] team0: Port device team_slave_1 added [ 52.215777] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.224510] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.233204] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.240085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.263917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.281572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.296744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.309275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.316932] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.327927] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.336616] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.345413] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.354405] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.363347] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.370417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.383777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.409968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.424639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.439699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.447514] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.454973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.462920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.470722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.478466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.486258] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.493418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.501868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.509962] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.516947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.529087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.540476] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.550893] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.559953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.571675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.580661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.588718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.602610] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.613125] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.623853] team0: Port device team_slave_1 added [ 52.638687] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.646630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.658945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.688579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.701641] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.711156] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.719146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.728643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.736938] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.747085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.756919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.776404] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.787136] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.796232] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.803393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.841683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.861610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.874225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.882361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.891169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.899184] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.906390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.915324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.923620] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.930941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.940255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.958796] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.968355] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.983617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.003639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.035204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.058637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.075802] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.083299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.091774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.116140] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.128815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.162756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.263702] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.270889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.285739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.023168] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.029694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.036613] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.042996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.056552] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.135692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.189273] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.195706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.202395] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.208778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.222646] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.292795] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.299231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.305941] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.312328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.347466] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.364509] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.370933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.377641] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.384055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.441884] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.452073] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.458474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.465153] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.471527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.478937] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.487238] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.493634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.500297] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.506682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.514980] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.667829] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.674277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.680957] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.687324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.742727] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.782951] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.789374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.796089] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.802479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.853734] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.199490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.213773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.230914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.246868] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.254091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.261432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.268981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.075486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.207806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.397934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.425319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.438664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.484895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.595338] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.672859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.712768] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.830210] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.872912] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.890332] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.949842] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.060951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.089860] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.105119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.123126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.164767] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.171253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.184501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.215827] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.323842] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.334308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.349173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.365007] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.373634] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.379880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.387888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.408200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.421087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.554142] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.565872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.577675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.662847] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.684639] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.690989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.700674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.727316] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.740505] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.824481] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.888993] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.912430] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.092320] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.112737] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.122183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.139927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.212134] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.530988] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.669936] bridge0: port 3(team_slave_0) entered blocking state [ 63.676289] bridge0: port 3(team_slave_0) entered disabled state 2018/04/13 14:58:41 executing program 3: [ 63.777201] bridge0: port 3(team_slave_0) entered blocking state [ 63.783562] bridge0: port 3(team_slave_0) entered disabled state 2018/04/13 14:58:41 executing program 0: 2018/04/13 14:58:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0x42, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000501000)=""/95, &(0x7f0000f12000)=0x5f) 2018/04/13 14:58:41 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/13 14:58:41 executing program 4: perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) 2018/04/13 14:58:41 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000200)="5800000014001900f8ff4b41040d875602ff03000000e076489643d818fe58a2bc4a0381001dfffffff8ee11ed9e246cff0000000006007fffdd1000174100005bffff001ce1ed900000080082a4000000060200231be86e", 0x58}], 0x1) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000019c0)={@dev={0xfe, 0x80}}, 0x14) 2018/04/13 14:58:41 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(anubis)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x5c, &(0x7f0000000000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/13 14:58:41 executing program 7: 2018/04/13 14:58:41 executing program 6: r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_xfrm(r0, &(0x7f00009d3000)={&(0x7f0000c15000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000abdefc)=ANY=[@ANYBLOB="4c0000001200db4d0000000000110000000100000000000000000000000000000000000000000000240008001d0008000000150069cc8910cf7a5164ef891111a0edabf37c1fd93a0d000000"], 0x1}, 0x1}, 0x0) [ 64.138462] bridge0: port 3(team_slave_0) entered blocking state [ 64.144736] bridge0: port 3(team_slave_0) entered disabled state 2018/04/13 14:58:41 executing program 0: 2018/04/13 14:58:41 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000200)="5800000014001900f8ff4b41040d875602ff03000000e076489643d818fe58a2bc4a0381001dfffffff8ee11ed9e246cff0000000006007fffdd1000174100005bffff001ce1ed900000080082a4000000060200231be86e", 0x58}], 0x1) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000019c0)={@dev={0xfe, 0x80}}, 0x14) 2018/04/13 14:58:41 executing program 7: 2018/04/13 14:58:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000140), 0x5, 0x1, &(0x7f0000000000), &(0x7f0000000180), 0xfffffffffffffffb) 2018/04/13 14:58:41 executing program 3: r0 = socket$inet6(0xa, 0x40000080001, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x80}, 0x20008000) sendmsg(r0, &(0x7f0000009fc8)={&(0x7f0000020fe4)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0xac, &(0x7f0000000000), 0x0, &(0x7f00000000c0)}, 0x20004840) [ 64.283560] futex_wake_op: syz-executor4 tries to shift op by -1; fix this program 2018/04/13 14:58:41 executing program 6: 2018/04/13 14:58:41 executing program 2: r0 = socket$inet(0x2, 0x80001, 0x84) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@ethernet={0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000400)}, 0x0) bind$inet(r0, &(0x7f0000022ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x80, &(0x7f0000007f80)=[{&(0x7f000000a000)='\f', 0x1}], 0x1}, 0x0) 2018/04/13 14:58:41 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/13 14:58:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000501000)=""/95, &(0x7f0000f12000)=0x5f) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000100)=""/136) 2018/04/13 14:58:41 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x800000000004, 0x4, 0x9}, 0x2c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20) 2018/04/13 14:58:41 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f7c000)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) sendmsg$alg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) 2018/04/13 14:58:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000180), 0x0, &(0x7f00000001c0), 0x8) 2018/04/13 14:58:41 executing program 1: r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)}, 0x4c804) 2018/04/13 14:58:41 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x29d) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) [ 64.433228] bridge0: port 3(team_slave_0) entered blocking state [ 64.439606] bridge0: port 3(team_slave_0) entered disabled state 2018/04/13 14:58:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002800)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000027c0)={&(0x7f0000000080)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80}, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}}}, 0xb8}, 0x1}, 0x0) 2018/04/13 14:58:42 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='vegas\x00', 0x6) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendmsg(r0, &(0x7f0000001700)={&(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000fc0)="03", 0x1}], 0x1}, 0x0) 2018/04/13 14:58:42 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/13 14:58:42 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x800000000004, 0x4, 0x9}, 0x2c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r0, &(0x7f0000000140)}, 0x10) 2018/04/13 14:58:42 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(anubis)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write(r1, &(0x7f0000000140)="791f7dfde0815c48c13197fc2e324deacd", 0x11) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x5c, &(0x7f0000000000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/13 14:58:42 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1e, &(0x7f00000000c0)=""/188, &(0x7f0000000000)=0xbc) 2018/04/13 14:58:42 executing program 6: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000140), 0x5, 0x1, &(0x7f0000000000), &(0x7f0000000180)=0xffffffffffffffff, 0xfffffffffffffffb) 2018/04/13 14:58:42 executing program 2: 2018/04/13 14:58:42 executing program 3: [ 64.631109] bridge0: port 3(team_slave_0) entered blocking state [ 64.637383] bridge0: port 3(team_slave_0) entered disabled state 2018/04/13 14:58:42 executing program 2: [ 64.759545] futex_wake_op: syz-executor6 tries to shift op by -1; fix this program 2018/04/13 14:58:42 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(anubis)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write(r1, &(0x7f0000000140)="791f7dfde0815c48c13197fc2e324deacdee8360e87bd43086d67d777a025e309b4949b81f3600000000000001000000", 0x30) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x5c, &(0x7f0000000000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/13 14:58:42 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x800000000004, 0x4, 0x9}, 0x2c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r0, &(0x7f0000000140)}, 0x10) 2018/04/13 14:58:42 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00'}) 2018/04/13 14:58:42 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x800000000004, 0x4, 0x9}, 0x2c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r0, &(0x7f0000000140)}, 0x10) 2018/04/13 14:58:42 executing program 3: 2018/04/13 14:58:42 executing program 1: 2018/04/13 14:58:42 executing program 2: 2018/04/13 14:58:42 executing program 6: 2018/04/13 14:58:42 executing program 6: 2018/04/13 14:58:42 executing program 1: 2018/04/13 14:58:42 executing program 3: 2018/04/13 14:58:42 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00'}) 2018/04/13 14:58:42 executing program 7: 2018/04/13 14:58:42 executing program 0: 2018/04/13 14:58:42 executing program 2: 2018/04/13 14:58:42 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x800000000004, 0x4, 0x9}, 0x2c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r0, &(0x7f0000000140)}, 0x10) 2018/04/13 14:58:42 executing program 6: 2018/04/13 14:58:42 executing program 1: 2018/04/13 14:58:42 executing program 7: 2018/04/13 14:58:42 executing program 0: 2018/04/13 14:58:42 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00'}) 2018/04/13 14:58:42 executing program 3: 2018/04/13 14:58:42 executing program 2: 2018/04/13 14:58:42 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x800000000004, 0x4, 0x9}, 0x2c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r0, &(0x7f0000000140)}, 0x10) 2018/04/13 14:58:42 executing program 1: 2018/04/13 14:58:42 executing program 6: 2018/04/13 14:58:42 executing program 7: 2018/04/13 14:58:42 executing program 0: 2018/04/13 14:58:42 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r0}) 2018/04/13 14:58:42 executing program 3: 2018/04/13 14:58:42 executing program 2: 2018/04/13 14:58:42 executing program 7: 2018/04/13 14:58:42 executing program 6: 2018/04/13 14:58:42 executing program 1: 2018/04/13 14:58:43 executing program 0: 2018/04/13 14:58:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e13000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00001d3000)=0x1, 0x4) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {0x8}}, 0x14}, 0x1}, 0x0) sendmmsg(r0, &(0x7f0000006b80)=[{{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f0000004900)="a9", 0x1}], 0x1, &(0x7f0000004a00)}}], 0x1, 0x4004000) sendto(r0, &(0x7f0000000080)="af", 0x1, 0x0, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x80) 2018/04/13 14:58:43 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r0}) 2018/04/13 14:58:43 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x800000000004, 0x4, 0x9}, 0x2c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20) 2018/04/13 14:58:43 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="b9", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00001afff8)={0x0, 0x1}, 0x8) 2018/04/13 14:58:43 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000040)=0x2d7, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000b78ff0), 0x0) sendmsg$nfc_llcp(r1, &(0x7f0000001600)={&(0x7f0000000200)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "bed2521aa3b77b65591eb96217aa9d7751e785d342c379ea1f7a6d99edc9165203030c4568c85e989d811b8a637cbe8b5e43d9692a20f15197df200454935b"}, 0x60, &(0x7f0000001580), 0x0, &(0x7f0000000500)={0x18, 0x89, 0xffffffffffff8001, "43acbf"}, 0x18, 0x4040000}, 0x8000) recvmsg$netrom(r1, &(0x7f0000000380)={&(0x7f0000000080)=@ax25={0x3, {"86aec43c0f3df5"}, 0x1}, 0x10, &(0x7f0000000340), 0x0, &(0x7f0000001640)=[{0xb0, 0x113, 0x8, "6b1e37d03176489ed444dac7407f9c73592c0409fee08e8d688fff38828514cd1185e2088318c228f14d03137a0be248a990407c557431e22fd3abea225171f66d5d4c355d673f4baaf0300291bcc366af1bef16d3636da7cb95903ad20c56f6ce5282e0cc3513b9fb74fa34996c64c51df536e75fa27a36d1c9eb34aab67c88e80cdd0c0181306f21594fa30e7451e5b732fac9e755c0718b7a370e3b"}], 0xb0, 0x80}, 0x23) 2018/04/13 14:58:43 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001600)="bf", 0x1}], 0x1, &(0x7f0000001700)}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000775000)) sendmsg(r0, &(0x7f0000001100)={&(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @host=0x2}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000f00)='N', 0x1}], 0x1, &(0x7f0000000fc0)}, 0x0) 2018/04/13 14:58:43 executing program 6: perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) 2018/04/13 14:58:43 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r0}) 2018/04/13 14:58:43 executing program 0: syz_emit_ethernet(0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f0000000080)) 2018/04/13 14:58:43 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='lp\x00', 0x3) sendmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)=']', 0x1}], 0x1, &(0x7f0000002e40)}, 0x0) 2018/04/13 14:58:43 executing program 3: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x2, 0x398, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x0, &(0x7f0000000240), &(0x7f0000000900)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'bond0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xa0, 0x138, 0x188, [@pkttype={'pkttype\x00', 0x8}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x10000, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x5, 0x21, 0x86dd, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x130, 0x130, 0x180, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, @limit={'limit\x00', 0x20}]}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x410) 2018/04/13 14:58:43 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x8001, 0x0) mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x0, 0x32, r0, 0x0) mlock2(&(0x7f00009bf000/0x400000)=nil, 0x400000, 0x0) 2018/04/13 14:58:43 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000000)="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", 0x5a1, 0x80048000, &(0x7f00000005c0)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000000640)="42cd454f8169b0bf5d476439", 0xc, 0x0, &(0x7f000075a000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) pipe2(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000680)) 2018/04/13 14:58:43 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x800000000004, 0x4, 0x9}, 0x2c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20) 2018/04/13 14:58:44 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x80, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'bcsh0\x00', 0x2}) ioctl$TUNSETTXFILTER(r1, 0x800454df, &(0x7f0000000180)) read(r0, &(0x7f0000000180)=""/206, 0xce) openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000040)={0xffffffffffffffff}) init_module(&(0x7f0000000080)='/dev/snd/timer\x00', 0xf, &(0x7f00000000c0)='\x00') 2018/04/13 14:58:44 executing program 7: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) shutdown(r0, 0x400000000001) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0xc0) 2018/04/13 14:58:44 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/13 14:58:44 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x143101) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f0000000100), 0x8) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x9) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa15d223678c2cdec6c0da0000000000000000cbdb1421877b8a922ad648e209863d20bc3ceb33b479337eeb", @ANYPTR=&(0x7f0000000b40)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="00000000000000e6"], 0x20) 2018/04/13 14:58:44 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x800000000004, 0x4, 0x9}, 0x2c) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x20) 2018/04/13 14:58:44 executing program 0: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f00000000c0)="1f000000160007f2000094ffa4000800000000000000000000000000f30004", 0x1f) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000080)={0x98225dc5af6b865d, 0x12000}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x40082) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000100)=""/158) 2018/04/13 14:58:44 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="b9", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00001afff8)={0x0, 0x1}, 0x8) 2018/04/13 14:58:44 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') readv(r0, &(0x7f00009a5f80)=[{&(0x7f0000214000)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000d3bff0)=[{&(0x7f00003ce000)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000002140)=[{&(0x7f0000000140)=""/180}, {&(0x7f0000005340)=""/4096, 0xffffffffffffffc4}, {&(0x7f0000003340)=""/4096, 0x1000}], 0x1ee) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000001100)='tls\x00', 0x4) readv(r0, &(0x7f0000002180)=[{&(0x7f0000002340)=""/4096, 0x1000}], 0x1) bind$pptp(r0, &(0x7f0000000100)={0x18, 0x2, {0x1, @multicast1=0xe0000001}}, 0x1e) 2018/04/13 14:58:44 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/13 14:58:44 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x4000000000000001) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup3(r0, r0, 0x0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000140)={0xa51, 0x3}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'ip6_vti0\x00', 0x800}) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8) quotactl(0x6, &(0x7f00000000c0)='./file0\x00', r3, &(0x7f00000003c0)="37009a18e730f060622fe4bdb0459dfd556ad9d860157fe8b234d1ae74b233cf1556b9bdc4ea35af5c9c2378ab63ac296c3934bdd920ddd89ef7404b8ea95842c3743dd7bdc35ce4719dfd552dc11f9c344a7fdefac9f3f88e127029cafdaaed5c96c814e4f52a22e13c032509ea3eb0296e47b4e172d918218037de0437262730871271f20650bba3f7dce8f85832f08fdcb1a0") connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f0000000180)={0xa}, 0x1c) 2018/04/13 14:58:44 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000400)='/dev/snd/midiC#D#\x00', 0x4, 0x40) fchmodat(r0, &(0x7f0000000340)='./file0\x00', 0x9a) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000001c0)={0x0, 0x1c, "399d5d2f1fd1bb4dcb8356e505ea28a5d7fbd55560224526bf341995"}, &(0x7f0000000200)=0x24) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)={r1, 0x0, 0x5, [0x6, 0x10000, 0x6, 0x2, 0x2]}, &(0x7f00000002c0)=0x12) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40800000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 2018/04/13 14:58:44 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x800000000004, 0x4, 0x9}, 0x2c) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x20) 2018/04/13 14:58:44 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x800000000004, 0x4, 0x9}, 0x2c) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x20) 2018/04/13 14:58:44 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = dup2(r0, r0) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xfa, 0x0, 0x9, 0x5, 0x8001, 0x11}, 0x3}, 0xa) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040)=0x43, 0x4) 2018/04/13 14:58:44 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/13 14:58:44 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x800000000004, 0x4, 0x9}, 0x2c) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x20) 2018/04/13 14:58:44 executing program 6: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x80, 0x802) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000100)=""/172) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x90) 2018/04/13 14:58:44 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(chacha20-generic,poly1305)\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f8dfc8)={0x0, 0x0, &(0x7f0000f92f80)=[{&(0x7f00007db000)="6ad64a6eab0cc54ec21b3a933b7680fdbf", 0x11}], 0x1, &(0x7f0000655000)}, 0x0) recvmsg(r1, &(0x7f00000a6000)={&(0x7f0000074000)=@alg, 0x80, &(0x7f0000eecfc0)=[{&(0x7f000065efd2)=""/46, 0x2e}], 0x1, &(0x7f0000f7ffca)=""/87, 0x57}, 0x0) 2018/04/13 14:58:44 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x11, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) r2 = socket$kcm(0xa, 0x1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x21e}, 0x35e) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, 0x17, 0x2, 0x70bd28, 0x25dfdbfb, {0x1a}, [@typed={0xc, 0x92, @u64=0x603e}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r3, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x16, 0x6, 0x30, &(0x7f0000000180)) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000002c0)=0x68) 2018/04/13 14:58:45 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23}, 0x1c) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x424000, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000400)='/dev/input/mouse#\x00', 0x4, 0x280) sendmsg$kcm(r2, &(0x7f0000003600)={&(0x7f0000000440)=@nfc={0x27, 0x0, 0x0, 0x6}, 0x80, &(0x7f0000003580)=[{&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000024c0)="98dc62d04c22a25215cb0a885bcdbc21a00ab0be882d2a586f14d68fd04c3fb707046f2165ffad6fa05c1536baf9208e30371f04badbbf54039cacc02e8202f748e4318d1d163b7c7d8449fc02040fb08a56f80a7d379a693e30ca9dd81a3b6636e47b97388377d7552dfe6e571374b237dbe91013aca2bd621c7cadb358790865a92c3896d687c8461b6c0aad050b9c1a6df71634fc7645f88dc1bfcbfaa93ae3ede0b3040ba40685ca8fed322a1e91db6659ab59be8fd396dbd2a1b94722ad3d6232db273c25e723f00e0a511e0f925f9455051a3e4dbf2e306e80d63351f366672d077b0301eab8f6b54843f3fc5b65529fb92a07722faefd8203567192924f394c434f622c642ddba8a869ee8ee5bdfd478bc7f01d19da29e08bb21c5a0ef0680ef2e7c9815f4f378508b5437027dd8226b21a463977b2972ae44fa67b88ce7bcc09c6a604eaf8d622d5518ee1de1a9f414ff984991cb1650bc196475b7b345767adde4fcda557f0e1598dc7f5bf569b0b6ca4b78ef246fe3856ed9eb7b9cfea83709b37fc8192b4a7105f2f891c5ca66afce3e13e9c74892f6d400b740d76cb1c54e3e643a883917a2a17e8f197a9ff22ba1b48aa9563983f1fd050e82dc3bb885fdc09cd41cf1b05a778c0d2ac7ccde2b1e46718c4f7bdd307e85b39dde37ec349010f07fb47c8af2cc530adbefa59ece9859b5ba97873fecc521062f1542fe0e8fb1f7f9ed7990e5c17599b61e4b4f1e9577a1735f61dd8a36f5fb2f8c03bf788f5a6b47f5b4bb0c19aea41e215189d0719db11d14e9461aeda1295b7b3c35be8e3c817349febb45db9d3a3b5d02a183b4d672d681c517c2e36b0d179bb7d6f8e719bd7afe8bcee668f5369fc86e515f0da09a73dba2e80b1a6cd7ffcc4c6bd716c52272e4e5c34f2500e2de7f1eeef3d4c5b8cff1e3f75d6926127d2008d3488131e5ebc20bd85317250bcff646fd5998b7e5082d84e2f5345524e277b25965b3e922000c26207963245032009accc9b0b7fc62f5e4cc8b900f1c83755a80679876b2f5edf63c8810df4f7534adb95f8467754008808877a276f6a90acdb0df1f52aa1e173076131f671a23d57aeda3aa78bf31579a93ac8a43906d9c3169019257c613a26052829c27ef2128c164112c74265e2b0cacc87f4ebdea8494320180b1ac6c9c704dda4a1d66efb0a537d85ef55f7c53222ee0acf4c65f3ef1d6d679d7acc5a43c4f9e61cc5968f770208377e8eb4b1d8c847a083ea62596494d7fdb95b68f774403635f416f45d7eea79d8b7a5c9d9c679408399cb97fb63bdf8b6e4514584d54014c6647440427142dc2d0cac3b10222b7e1c79ceccf056cc1cb4e85923a872baa8bc1b3a12a4c287913a13cd8467fefbb8f434e9fed30a8d1d67d2070059e4055c27e9890e24ddc0a5e95bc607a3e80fd1098c81026e1e662f79df8a20d89203339e621807138fcf95283a9fbf0579b2263181df9e65f9e00db74374cdc3307e51b38876e582a7a6c774803e4159f8f90c1185fb5cd690505f4221cf3dadaa5ff791b7a2aad901362ca6b467c43e3dc6d02fb503c7c22aeb3c79a56ff4ce5f407f05636aad49a8e106c5e2b4afc2781c686845cfbe56ca6e8bfedd330e10fc8989e28bc4cc7772019cf1d9cb2db78bd5ee10478acea821dad25da0cfd968c47ad7f9563d8167267bf8451d11b961d5526e4b7736eefbbfe1d14ec8e35b23cc10910e70e2ca52d56cbcf6be9096ded6f26b4e8a9a36d66b80f8fd8c3afcd3c332ee080262d1efc1faca6ac35e071f9859dcef89105c0fb21148b808ba8327616e414359488166def400bbf72f0cf927c15678f1b03f8338262bd3bb5b9f82688149597685ffa812c57b193609a32b0ff93851a551ae3b2aae204fdfb09c20bcc07b19057d4fa7b22648a6b975d0c6b631d91e01223257b40f2821d0564838469ef7c6a057411e710525e30599846d789a09233e6944715f38fa2c4244efd6c8a0452ae738e24b6c0b8052414315bedbc8117ecd6a6c16ba931aa70c9f94f4bc687a8fe6b585d9fb9e5fc2b398940b8bb385a645bc30718494e396bfe96bfd26cf388b100dc565fec81850dc7d9534ec13b115f9d23c2fe7ad6a765227870a1e0c2860657ef7b5c1e458b0a35613c24d03b588d4995d34adbab0afbb08e3dd60ad204163c952cd528f3f556543caa553e08bba112539d733faa9e9141bd87fb3cf7e71b20355020aca603ea040c29d7d20757e4374580a352f2d4e21376288316c2121dbb4758cfbcf977b16e654852f8dc9079b07ec6e0de19f2730da4e62c9e9d03b370835c226493762c18f5bc2eb6ccf79a63fbc3aff7fbc6857d25cb5ebc94d919a24ebeb1827ac7b6a839de8cfd4b2cb26430e739bcc4da1227ff1bf1ed25ac92078436e4ce739ce0ed1ded1bb8c972f92ae78b0c437180531a766f34c0ab9e811f306d8538b5ac54b6face31a8e387e5bce648fd389c6f683eb8d92be75f63ddac54aaf31839f43417fde12e00c1c6feb3326188f9441f97f7dbfd83d24fd0cc5560184b0a6ffcec0756ab92fcff8977751c512af23dd0838c16797b6e5eefb9ddc780f44eff16779aaf9ae721e1e080ce9dac08302c8ed799c1486d06c2978e014641a040099f0ad2856fbe10e5baa3138c3289e4488a036990eb5f470d123501c6eca620e9d96573cd375242062c2ec768b6ee8521df3be6011c44334c546ffa5e7ce007a98f271fbfe6cae231bf2e24860169939768b2c07a359a84beeb74875eac099e4720717f246a7f1f7f15ceb53d0f77d740809245709246fb2533786d4cde9b6e91b1d9eb614df8d562ef852556566104db79c093b45748460b91fb73d19d09a54dc083a98aa695acff4c3a746dc04424b2babe3d6749a7b5a9b0324700c21b7ef57f49113894a8bc3ca43c9f6c88519933cbfb72c739089685a08a53cb6c3dac773ba85cef653ab67fae7ceda0b5fbdae65448e01b517ba9a7f8386049f9ca5dbb36b448c5f618985f4fe123e4911d4b4af54f99105b7a8024fbf74840515b8dd99ede3013f62957f2be3498af4a1c50cf8b1b12fbc8645a29215c6417996384990bd3381fe8fe4b8b309bb57af1cfe2dc9b92ad4842fd8cf45f7a758d45ce631b48d72818dd3e772538abf34e3f8a2380ba2e165550f91c13328652015f641b5d7ca998019f5903f2cf977420fcc69725173f0fa6b00a8dbe7c81c3e417e8dbcc92220a7231549372bdf63c6b0b59de8f5fe872b57c83bb598143ceab528eb7b19397cc1a8302712892eb29d21d059d0f4889bf807d65445abdb36cfce1b107358882f640f8d1fc1e7b6d709cb8a4ca1bef7a61360b4c9a1a5d4ad18893ce25cf1a7c46d149524d70a6ab6ad1c2e30e6d532e803659d858692ba5513c2f9b7d4836fca634a3586a099c6103a96b53995e5d2ae4b98f547847bc9bfc19a3891b773725cabdd2ea563ab9effa002fc9901370a5a4707cefb0e31931d1f72b41d971e77e280d0663e337a762f6a8172a06ed1eb2681378144b896a4a72efe46073fce63dfb4da7930f3841f9ff18ffd495ea8952aab445d2a56852b9f5e110f470265c36eee671a23c4ceca117d54dab70448f529c301cb6038ee73554e8649990ff00df1cdd349c02c1284680ce2339df4853d9186e618e27b4a0f037f87d7ba75ed923fafd7952c823dfe319c36de68c81062c374d994edd8e09ef3f1d966de28a9f88f507cbb84bd654c1b891dcb870d08d57d39088ff0c0da2fdbc3cfd41e87db6646714df16050c95cb01d99dc8cf4933a9b3df4d39ee1a93e03c7fd717dad506aa0a59e445d416c49a3cb2157e7f6fb027311c398c824e632a29e3da7d84c6d7b96baa99154f00d43d167314769ccec1708e83778688df3effb34803950395cb5ec65e3cd016f9bdf2e9bcfc452fff180939b3b1f1cc2084a611887c847da1cdc17293a2915dd6040834f7b0f3d11bc8f98f21e3fe968bb7523e6d93b0c6c92bb76b797e83eb3c2aea839472981a5b2d17246dd640bf35477a57d0323e975be1fbdaa7c76570f75c252124bf04a0ce8de8dabaf8070134a593c721bc49b31ea3009e68a22cb19b74464a3a6764fd4273124e719b7711dd2a237d1b20847a1478596256930a279ee8cccfd9429a41210765f4e47a1360c2c002c7e38a950e57cc39fabca139585978148cf524a123ba4f67d005968e5021619612c0704b4d89ec06f87a7e76fd38f9ddfbfcd6d8ead7e557efc572e17e7aa62579460e81bec3cb67b531ebe190154032992eabacf350b0a00845b2b517c385ba1c9d4617bc6714d2c71c9e083c86107eb641520c97ee477231ef7363847707e60f60398a75b889e1068585c7364dfeadfa45879a9dd57b83dad38dba1d45769dca77f4e69500891864dc00e578f13f369347b4c82910be9ca0207a6cddd3a1420632193f2afcf57cdf4c5d3453ede5cd7914dd2c9e42714f40ab2eb5bba8c0d92ebed40863fe218fff730d9e483a13aae190450fdccded80b7c3d4cabed89f20c53d44e9e92a5502637e37323730b5e9d625da17160473f377840b8eb75248a7222363173bc343447fabcde264b4f31a37ef88f12bcae1bf9781797a74a026a60af94ebf56914c4c7cbedb87fe1435a7ff070edddaf27d8f46f27bc9fc34057cb260367671fa0acb09fc9b96cbdc6db26c320bb5876c9e55fef09920469fa04a6280ced6d36f97a31ccaf4c26458b41e5913d6d659372908748e1c1ea6653db1f60dda8b30593431e207b394a3db48604ac6bd24e5ad19c2dc16dddd060d9740cf0fcc2279e6e2213052b1d832d1dbe649c725ea4af3f6849ec34af3c00b30142b0cc593e5ba09dcb8bf3f09e1d693546d9146fe53811545fdc5b3bcd39fb46b8b23dedc5bceb9c8387f3955b20afdb0457441e5a867133fbd6b754876ecd47d0b826f9d35c915126c29b0cd1a3ba882e199985059aed581c61b12dfbf8ed860256873f305941454162a8b91096d7ce67f4d839fe06e074120f6c23c5ace26fd9b89ac1d25a72c683be82bc42364489261d7115a30c151ead0907afbc83d727082ec7d594f636386d06d779659306dac473969a9beb8c777789fbc733d1a7e2d6457a5959a14aeee3a506fac23e6a7c6d091aacdebf1093c87a4cccb68398564fd90de699c0a8fe0df7a2f0a53268c4d92211c6400b1592400b3b6365f4ab7db4683519ba2c4d50d0a249a7131cea93a59b2a76379614dd4b036695c5f68745dcc6287dc0eeca98a220eab3cbe02d647b33ffc07fd0a6b69f8b2ec1729635d03e26eb37ce2add3e28c0aafc9266cba4d81e8bf0defa70855cd8adf7c65eb04c731c5a1fc5e8b3ec504d3a96b19d339ca007a6850b0f324dc27eae53a69a88e3223c4276cba35606abf6839096d10a80d1375a0b211a99aa3fc4776e3266c1b7ab5c4ee4d2d7415d1869e72dfa0bb47ba600bed99142112fb1849e7fc368fe6789595e8c03b0b0544364427ba9772b27d34733570880793e5d0b61a6bd039635a3707082cb7e6bc0329134b98a7c5ebf197094665d62a507ee168aa65aa0370eede5107ffd3a86475ff05762a9f036910ff1d59aad2dbdd498b263330e66f70af38343dd7bcada33fec63db1d27a7d8cf2489876d8928af85a10fdbb14a455395578f6265eedf2b9bbcaa8b2ef8f54996cb1858fe60e92272b5c6fe6fd46680d54a578c94b7e983b114fc94c143094f726888b4058d73d12c9ab8808cface4ec4fddf46c42f7abb5d5b613097455758d3b665b9d", 0x1000}, {&(0x7f00000034c0)="d751dd634a0bff6418db38f8302d67b36cc06cdbd04912eceef0d144e2547ebf305dbeca97e326e892b7d12e3fee32d3875292593daf169a36665b61", 0x3c}, {&(0x7f0000003500)="92e424c364b08808278ce605e06d0805b17b47fdfde0c7a3dc028dbd531586138ee19c19ca3940f03c62a467eee045285c949b120ec690f03a617afc82837fac6a89b2fdd05bb88b3350d20cd7894a2e3bf71ba1799fac267278e364", 0x5c}], 0x5, 0x0, 0x0, 0x4004000}, 0x40000c0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000140)=0x9, 0x4) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}, 0x5}}}, &(0x7f0000000280)=0x84) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000380)={0x0, 0x7, 0x4e90}) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e22, @rand_addr=0x1}}, 0x7ff, 0x4}, 0x90) ioctl$TIOCNXCL(r1, 0x540d) sendto$inet6(r0, &(0x7f0000000180)='\v', 0x1, 0x0, &(0x7f00000003c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x38, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xd}, @in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}]}, &(0x7f00000000c0)=0x10) 2018/04/13 14:58:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000a75ff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800000000002) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003fd0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e630c40"], 0xe2, 0x0, &(0x7f0000000200)="a8b8ae57ff40ba1be628fbbccfd05855280803a923d13b4077ee1bc1ccc4d7bfb2eb793bfa74ef669f5856ae869c46f91004b37f11b7cb345dfa6756c3934fa86dc7669e400c419b06098c030d9f1f816136f643de930b5ebd922993a76e6880f03887511e710770ca8146ad4e09361c0626145f9390bc588204c8653d4a40378fb399131def5b259b288b46f679e93b5364a1ad086194613e62f1c5bbbdde33a2e6030f0672a4ccce25d65d6aaf2322d25789c98c4434c3ab939e8d45c59c3ab90e05c119b6233977eaf21656684db8690d3fc4933d0b6e36fc8a94a9ba50471e3f"}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x180, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000fed000)={0x8, 0x0, &(0x7f00006f0f64)=[@release={0x40046306}], 0x0, 0x0, &(0x7f00000e0f29)}) 2018/04/13 14:58:45 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) [ 67.771308] binder: 6928:6931 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 68.615850] syz-executor3 (6934) used greatest stack depth: 10840 bytes left 2018/04/13 14:58:46 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="b9", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00001afff8)={0x0, 0x1}, 0x8) 2018/04/13 14:58:46 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/13 14:58:46 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x4000) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f00000000c0)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000001c0)={{0xfffffffffffffffd}, 'port1\x00', 0x0, 0x121820, 0x100000001, 0xffffffffffffff01}) r1 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0xffffffffe76cb707, 0x8000) getsockname$inet(r1, &(0x7f0000000400)={0x0, 0x0, @remote}, &(0x7f0000000440)=0x10) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000280)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x20240, 0x0) connect$llc(r2, &(0x7f0000000380)={0x1a, 0x200, 0x6, 0xfff, 0x2, 0x5}, 0x10) clock_gettime(0x1, &(0x7f0000000180)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/13 14:58:46 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.mems\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000080), 0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) 2018/04/13 14:58:46 executing program 6: r0 = syz_open_dev$midi(&(0x7f0000000640)='/dev/midi#\x00', 0x8, 0x8000) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000680)={[], 0x7fc5, 0xfffffffffffffffa, 0x834, 0x0, 0x10001, 0x6, 0x16001, [], 0x1}) syz_emit_ethernet(0x3e, &(0x7f0000d3fbdd)=ANY=[@ANYBLOB="0180c2000000f3aa20259cdb0000000000000000000000800000000000000000000000000000ff028d610000000000000000000000010000000000089078"], &(0x7f0000168ff4)) r1 = dup(r0) recvmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000080)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/151, 0x97}, {&(0x7f00000001c0)=""/218, 0xda}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/9, 0x9}, {&(0x7f0000000380)=""/27, 0x1b}, {&(0x7f00000003c0)=""/16, 0x10}, {&(0x7f0000000400)=""/175, 0xaf}], 0x9, &(0x7f0000000580)=""/107, 0x6b, 0x6}, 0x1) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000880)={0xfffffffffffffff7, 0xa8d, 0x9, 0x3}) 2018/04/13 14:58:46 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x800000000004, 0x4, 0x9}, 0x2c) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20) 2018/04/13 14:58:46 executing program 7: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000400)={@ax25={0x3, {"71a67352d03e32"}}, {&(0x7f0000000080)=""/110, 0x35f1df8e6db1dfa0}, &(0x7f0000000180)}, 0xa0) getpeername$packet(0xffffffffffffff9c, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000001780)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000017c0)={'gre0\x00', r1}) 2018/04/13 14:58:46 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @rand_addr, @remote}, &(0x7f00000000c0)=0x2) write$rdma_cm(r0, &(0x7f0000000080)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106}}, 0x20) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000180)={0x2, 0xffffffff7fffffff, 0x4, 0x100000000, 0x5, [{0x9, 0x6, 0x8001, 0x0, 0x0, 0x200}, {0x3, 0x5e07, 0x2}, {0x0, 0x2, 0x1000, 0x0, 0x0, 0x804}, {0x0, 0x3, 0x9}, {0xfff, 0x6, 0x101, 0x0, 0x0, 0x1}]}) write(r0, &(0x7f00000000c0), 0xfec9) creat(&(0x7f0000000100)='./file0\x00', 0x80) [ 68.670870] binder: BINDER_SET_CONTEXT_MGR already set [ 68.676418] binder: 6928:6937 ioctl 40046207 0 returned -16 [ 68.676484] binder: 6928:6942 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 68.708989] random: crng init done 2018/04/13 14:58:46 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/13 14:58:46 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20) 2018/04/13 14:58:46 executing program 7: r0 = dup(0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@mcast1={0xff, 0x1, [], 0x1}, 0x34, r1}) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) getpeername$ipx(r0, &(0x7f0000000000), &(0x7f00000001c0)=0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) pread64(r2, &(0x7f0000000080)=""/138, 0x8a, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000002280)=""/4096) 2018/04/13 14:58:46 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getegid() stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x400400, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) shutdown(r0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x400000000000119, 0x42, 0x0) getsockopt$ipx_IPX_TYPE(r2, 0x100, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000080)={'vlan0\x00', 0xffffffffffff9838}) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000000400)=""/4096) 2018/04/13 14:58:46 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400100, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000040)={0x1, 0x6}) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000100), 0x4) 2018/04/13 14:58:46 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000280110011772afefffff600611858"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) fallocate(r0, 0x1, 0x1, 0x8) pipe(&(0x7f0000000000)={0xffffffffffffffff}) openat$cgroup(r1, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x483, &(0x7f00000000c0)=""/187}, 0x48) 2018/04/13 14:58:46 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000), 0xff7e) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000040)={0x3, r0, 0x1}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000380)={0xf000, 0xd000, 0x4, 0xa61d, 0x4}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000080)=0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000340)={r3, 0x80000, r1}) fcntl$setstatus(r1, 0x4, 0x800) tee(r0, r1, 0x200, 0x9) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f00000001c0)=""/137, &(0x7f0000000280)=0x89) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x3, 0x3, 0x6, 0x1, 0x7f}}) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f00000002c0)=0x403) 2018/04/13 14:58:46 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00'}) 2018/04/13 14:58:47 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="b9", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00001afff8)={0x0, 0x1}, 0x8) 2018/04/13 14:58:47 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20) 2018/04/13 14:58:47 executing program 6: pipe(&(0x7f0000055000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) vmsplice(r1, &(0x7f00007d3000)=[{&(0x7f0000fe3000)="d6", 0x1}], 0x1, 0x0) vmsplice(r1, &(0x7f0000000440)=[{&(0x7f0000000380)}], 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="f84a998426e7902ee846e63d6c9d37031c004b38f31b4961f9ed550ec4f054954a9381ba311a48c89df1ac8c7c3af772a0853b986b8c5c8362c202c61c61388322f8b8cc60d4330af3576942990a8ec644f4f103b511258afe343ac84880c72065224d909f443a45ffd1604e3764533c9b4f03ad679866ca6629411360fcc8a498f7d8443a76d2e6cbc1cd716899fee237a463cd688c5686af533f8e1b4963bbbfd974c7acf553c85b2d773074a0231b60efacb4aa4b65cc431900dd1bb12015d780c4f226893ab932293b648f57ec7b9ca2", 0xff60}], 0x52, 0x1) 2018/04/13 14:58:47 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x9) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x7, 0x30}, &(0x7f0000000140)=0xc) mkdir(&(0x7f0000000000)='./file1\x00', 0x9) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x8, 0x6, 0x9, 0x3, 0x10001, 0xcd6, 0xfffffffffffffe01, 0xfff, r1}, 0x20) ioctl$VT_RELDISP(r0, 0x5605) 2018/04/13 14:58:47 executing program 7: r0 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00002d2000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x7016) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) poll(&(0x7f0000000040), 0x0, 0xffffffffffffffff) epoll_pwait(r1, &(0x7f0000c58000)=[{}], 0x1, 0x8000000000000071, &(0x7f0000654ff8), 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/04/13 14:58:47 executing program 0: r0 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x0, r1+30000000}}, &(0x7f00000000c0)) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000240)=""/82, &(0x7f00000002c0)=0x52) r3 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x4000) modify_ldt$read_default(0x2, &(0x7f0000000300)=""/4, 0x4) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f00000005c0)={0x19, 0x6, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f0000000100)={0x6, 0x6, 0x1, 'queue1\x00', 0x1}) timerfd_settime(r0, 0x1, &(0x7f0000005000)={{0x77359400}}, &(0x7f0000004000)) sendmsg$nl_netfilter(r3, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100020}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x30c}, 0x1, 0x0, 0x0, 0x40841}, 0x40000) close(r0) 2018/04/13 14:58:47 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00'}) 2018/04/13 14:58:47 executing program 1: r0 = socket$inet(0x2, 0x4000000000000005, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000540)=0x3, 0x4) sendto$inet(r0, &(0x7f0000000000)="ea", 0x1, 0x0, &(0x7f0000e68000)={0x2}, 0x10) 2018/04/13 14:58:47 executing program 3: r0 = socket(0x11, 0x4000000000080003, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00001fb000)={'vcan0\x00', 0x0}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x20900, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80605414, &(0x7f0000000100)=""/184) sendto$packet(r0, &(0x7f0000485fb8), 0x0, 0x0, &(0x7f00000b3000)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x14) 2018/04/13 14:58:47 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00'}) 2018/04/13 14:58:47 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x80140, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x2d, 'rdma', 0x20}, {0x2b, 'cpu', 0x20}, {0x2f, 'pids', 0x20}]}, 0x11) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) epoll_create(0xebe) fanotify_init(0x4, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000001100)={&(0x7f0000000ec0)={0x10}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f00)={0x20, r3, 0x3a28ac07e73eb23d, 0x0, 0x0, {0xa}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x100000001}]}]}, 0x20}, 0x1}, 0x0) 2018/04/13 14:58:47 executing program 1: capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f00000000c0)={0x5, 0x81, 0x2, 0xfffffffffffffff8, 0x8, 0xffffffff}) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8001, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x0) inotify_init() r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x60, &(0x7f0000000000), 0x0) 2018/04/13 14:58:47 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20) 2018/04/13 14:58:47 executing program 5 (fault-call:2 fault-nth:0): r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/13 14:58:47 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20) 2018/04/13 14:58:47 executing program 3: r0 = socket$inet(0x10, 0x7, 0x3) r1 = pkey_alloc(0x0, 0x3) pkey_free(r1) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1b0000001c000317070000000000010001eee6d87986c497271d85", 0x1b}], 0x1}, 0x0) socket$key(0xf, 0x3, 0x2) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x2bfc21f9, 0x242000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000000c0)={{0xffffffffffffffff, 0x0, 0x400, 0x2}, 0x2, 0x5, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0xffffffff7fffffff, 0x5, 0x400}) [ 69.858765] capability: warning: `syz-executor1' uses 32-bit capabilities (legacy support in use) [ 69.939794] FAULT_INJECTION: forcing a failure. [ 69.939794] name failslab, interval 1, probability 0, space 0, times 1 [ 69.951222] CPU: 0 PID: 7048 Comm: syz-executor5 Not tainted 4.16.0+ #2 [ 69.957987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.967345] Call Trace: [ 69.969951] dump_stack+0x1b9/0x294 [ 69.973600] ? dump_stack_print_info.cold.2+0x52/0x52 [ 69.978802] ? perf_trace_lock_acquire+0xe3/0x980 [ 69.983652] ? print_usage_bug+0xc0/0xc0 [ 69.987729] should_fail.cold.4+0xa/0x1a [ 69.991807] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 69.996931] ? graph_lock+0x170/0x170 [ 70.000750] ? find_held_lock+0x36/0x1c0 [ 70.004828] ? __lock_is_held+0xb5/0x140 [ 70.008922] ? check_same_owner+0x320/0x320 [ 70.013262] ? rcu_note_context_switch+0x710/0x710 [ 70.018212] __should_failslab+0x124/0x180 [ 70.022525] should_failslab+0x9/0x14 [ 70.026339] kmem_cache_alloc_trace+0x2cb/0x780 [ 70.031030] ? perf_trace_lock+0x900/0x900 [ 70.035282] ? debug_check_no_locks_freed+0x310/0x310 [ 70.040487] br_add_if+0x402/0x19e0 [ 70.044120] ? perf_event_sync_stat+0x5f0/0x5f0 [ 70.048779] ? cap_capable+0x1f9/0x260 [ 70.055348] ? br_features_recompute+0x220/0x220 [ 70.060590] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 70.066118] ? security_capable+0x99/0xc0 [ 70.070269] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 70.075817] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 70.080829] ? __dev_get_by_index+0x169/0x1c0 [ 70.085315] add_del_if+0x10f/0x140 [ 70.088942] br_dev_ioctl+0xbf/0xe0 [ 70.092573] ? br_ioctl_deviceless_stub+0xad0/0xad0 [ 70.097579] dev_ifsioc+0x43e/0xb90 [ 70.101206] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 70.106409] ? register_gifconf+0x70/0x70 [ 70.110552] dev_ioctl+0x1b5/0xcc0 [ 70.114092] sock_do_ioctl+0x1d3/0x3e0 [ 70.117978] ? compat_ifr_data_ioctl+0x170/0x170 [ 70.122722] ? lock_downgrade+0x8e0/0x8e0 [ 70.126871] ? kasan_check_read+0x11/0x20 [ 70.131007] ? rcu_is_watching+0x85/0x140 [ 70.135263] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 70.140441] sock_ioctl+0x30d/0x680 [ 70.144055] ? dlci_ioctl_set+0x40/0x40 [ 70.148023] ? expand_files.part.8+0x9a0/0x9a0 [ 70.152597] ? kasan_check_write+0x14/0x20 [ 70.156833] ? wait_for_completion+0x870/0x870 [ 70.161432] ? dlci_ioctl_set+0x40/0x40 [ 70.165412] do_vfs_ioctl+0x1cf/0x1650 [ 70.169299] ? ioctl_preallocate+0x2e0/0x2e0 [ 70.173713] ? fget_raw+0x20/0x20 [ 70.177172] ? __sb_end_write+0xac/0xe0 [ 70.181142] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 70.186673] ? exit_to_usermode_loop+0x87/0x310 [ 70.191362] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 70.196907] ? security_file_ioctl+0x94/0xc0 [ 70.201314] ksys_ioctl+0xa9/0xd0 [ 70.204775] SyS_ioctl+0x24/0x30 [ 70.208139] ? ksys_ioctl+0xd0/0xd0 [ 70.211753] do_syscall_64+0x29e/0x9d0 [ 70.215632] ? vmalloc_sync_all+0x30/0x30 [ 70.219778] ? _raw_spin_unlock_irq+0x27/0x70 [ 70.224274] ? finish_task_switch+0x1ca/0x810 [ 70.228764] ? syscall_return_slowpath+0x5c0/0x5c0 [ 70.233681] ? syscall_return_slowpath+0x30f/0x5c0 [ 70.238611] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 70.243976] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 70.248825] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 70.254003] RIP: 0033:0x455319 [ 70.257187] RSP: 002b:00007fe922755c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.264901] RAX: ffffffffffffffda RBX: 00007fe9227566d4 RCX: 0000000000455319 [ 70.272163] RDX: 0000000020000000 RSI: 00000000000089a2 RDI: 0000000000000013 [ 70.279420] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 70.286676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 70.293935] R13: 000000000000036a R14: 00000000006f8290 R15: 0000000000000000 2018/04/13 14:58:48 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x800000001, 0x0) write$fuse(r0, &(0x7f0000000080)={0x18, 0x6, 0x0, @fuse_bmap_out}, 0x18) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 2018/04/13 14:58:48 executing program 6: io_setup(0x2, &(0x7f000092fffc)) mprotect(&(0x7f000077f000/0x600000)=nil, 0x600000, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x40300) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040), 0x2) sched_yield() mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000527ff8), 0x2, 0x3) linkat(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x1000) 2018/04/13 14:58:48 executing program 7: r0 = socket$inet6(0xa, 0x80003, 0x4000000000000001) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) socket$inet6(0xa, 0xa, 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f0000000180)={0xa}, 0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x9ae4}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x4, 0x2, 0x4, 0x4, r2}, &(0x7f0000000140)=0x10) 2018/04/13 14:58:48 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20) 2018/04/13 14:58:48 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)="2e2f6367726f75702e6370750086298d", 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_migrate\x00', 0x2, 0x0) epoll_create(0x6) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x42, 0x100) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000040)={0x5, 0x1, 0x8}) 2018/04/13 14:58:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfffffffffffffd90, 0x20020003, &(0x7f0000385ff0)={0x2, 0x20000000004e21, @loopback=0x7f000001}, 0x10) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x8000, 0x101040) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000300)={0x7, 0x4, 0x9, 0x6, &(0x7f0000000200)=[{}, {}, {}, {}]}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x400) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000040)=0xff, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) recvfrom$inet(r0, &(0x7f0000000140)=""/149, 0x95, 0x40, 0x0, 0x55) 2018/04/13 14:58:48 executing program 5 (fault-call:2 fault-nth:1): r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/13 14:58:48 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="b9", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) [ 70.843667] FAULT_INJECTION: forcing a failure. [ 70.843667] name failslab, interval 1, probability 0, space 0, times 0 [ 70.855066] CPU: 0 PID: 7077 Comm: syz-executor5 Not tainted 4.16.0+ #2 [ 70.861833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.871198] Call Trace: [ 70.873806] dump_stack+0x1b9/0x294 [ 70.877459] ? dump_stack_print_info.cold.2+0x52/0x52 [ 70.882670] ? perf_trace_lock_acquire+0xe3/0x980 [ 70.887526] ? kernel_text_address+0x79/0xf0 [ 70.891952] should_fail.cold.4+0xa/0x1a [ 70.896036] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 70.901155] ? graph_lock+0x170/0x170 [ 70.904949] ? save_stack+0x43/0xd0 [ 70.908565] ? __kasan_slab_free+0x11a/0x170 [ 70.912963] ? kfree+0xd9/0x260 [ 70.916235] ? find_held_lock+0x36/0x1c0 [ 70.920290] ? __lock_is_held+0xb5/0x140 [ 70.924359] ? check_same_owner+0x320/0x320 [ 70.928670] ? debug_check_no_obj_freed+0x2ff/0x584 [ 70.933678] ? rcu_note_context_switch+0x710/0x710 [ 70.938621] __should_failslab+0x124/0x180 [ 70.942881] should_failslab+0x9/0x14 [ 70.946673] kmem_cache_alloc_trace+0x2cb/0x780 [ 70.951339] ? br_add_if+0x4f2/0x19e0 [ 70.955132] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 70.960137] ? trace_hardirqs_on+0xd/0x10 [ 70.964277] br_add_if+0x567/0x19e0 [ 70.967926] ? graph_lock+0x170/0x170 [ 70.971717] ? lock_acquire+0x1dc/0x520 [ 70.975690] ? br_features_recompute+0x220/0x220 [ 70.980444] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 70.985972] ? security_capable+0x99/0xc0 [ 70.990113] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 70.995640] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 71.000661] ? __dev_get_by_index+0x169/0x1c0 [ 71.005150] add_del_if+0x10f/0x140 [ 71.008769] br_dev_ioctl+0xbf/0xe0 [ 71.012388] ? br_ioctl_deviceless_stub+0xad0/0xad0 [ 71.017397] dev_ifsioc+0x43e/0xb90 [ 71.021020] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 71.026204] ? register_gifconf+0x70/0x70 [ 71.030350] dev_ioctl+0x1b5/0xcc0 [ 71.033884] sock_do_ioctl+0x1d3/0x3e0 [ 71.037764] ? compat_ifr_data_ioctl+0x170/0x170 [ 71.042510] ? lock_downgrade+0x8e0/0x8e0 [ 71.046652] ? rcu_is_watching+0x85/0x140 [ 71.050800] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 71.056246] sock_ioctl+0x30d/0x680 [ 71.059866] ? dlci_ioctl_set+0x40/0x40 [ 71.063836] ? expand_files.part.8+0x9a0/0x9a0 [ 71.068409] ? kasan_check_write+0x14/0x20 [ 71.072633] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 71.077554] ? wait_for_completion+0x870/0x870 [ 71.082139] ? dlci_ioctl_set+0x40/0x40 [ 71.086105] do_vfs_ioctl+0x1cf/0x1650 [ 71.089987] ? ioctl_preallocate+0x2e0/0x2e0 [ 71.094390] ? fget_raw+0x20/0x20 [ 71.097836] ? __sb_end_write+0xac/0xe0 [ 71.101804] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 71.107328] ? fput+0x130/0x1a0 [ 71.110599] ? ksys_write+0x1a6/0x250 [ 71.114394] ? security_file_ioctl+0x94/0xc0 [ 71.118796] ksys_ioctl+0xa9/0xd0 [ 71.122244] SyS_ioctl+0x24/0x30 [ 71.125598] ? ksys_ioctl+0xd0/0xd0 [ 71.129216] do_syscall_64+0x29e/0x9d0 [ 71.133091] ? vmalloc_sync_all+0x30/0x30 [ 71.137237] ? _raw_spin_unlock_irq+0x27/0x70 [ 71.141722] ? finish_task_switch+0x1ca/0x810 [ 71.146207] ? syscall_return_slowpath+0x5c0/0x5c0 [ 71.151214] ? syscall_return_slowpath+0x30f/0x5c0 [ 71.156136] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 71.161493] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 71.166366] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 71.171545] RIP: 0033:0x455319 [ 71.174719] RSP: 002b:00007fe922755c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.182417] RAX: ffffffffffffffda RBX: 00007fe9227566d4 RCX: 0000000000455319 2018/04/13 14:58:48 executing program 4: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20) [ 71.189672] RDX: 0000000020000000 RSI: 00000000000089a2 RDI: 0000000000000013 [ 71.196925] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 71.204181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 71.211437] R13: 000000000000036a R14: 00000000006f8290 R15: 0000000000000001 2018/04/13 14:58:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000505000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000cdc000)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000140)=""/251, &(0x7f0000000000)=0xfb) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x27d) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000100)={0x0, @dev, @multicast2}, &(0x7f0000000240)=0xc) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000280)={r5, @broadcast=0xffffffff, @multicast2=0xe0000002}, 0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000de9000)=[@textreal={0x8, &(0x7f00000004c0)="66b8008000000f23d80f21f86635800000e00f23f836e30f66b8a93064e90f23c80f21f866350000d0000f23f83ecbc6f80a660f3841c40f01d10f3566b9520900000f32260f70e2d9", 0x49}], 0xaaaaaaaaaaaacd6, 0x0, &(0x7f0000000540), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/13 14:58:49 executing program 4: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20) 2018/04/13 14:58:49 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x2, 0x400000) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000140)=0x1000000000000000, 0x4) sendmsg$nl_netfilter(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000010000000000000000000000040dd0004000000"], 0x1c}, 0x1}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000180)={0x2, 'bond0\x00'}, 0x18) 2018/04/13 14:58:49 executing program 5 (fault-call:2 fault-nth:2): r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/13 14:58:49 executing program 7: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x20011, r0, 0x56) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000040)={0x800, 0x3, 0x8}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)}}}], 0x0, 0x0, &(0x7f00000005c0)}) 2018/04/13 14:58:49 executing program 6: syz_open_dev$sndseq(&(0x7f000092e000)='/dev/snd/seq\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @loopback=0x7f000001}}}, &(0x7f00000000c0)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x8bf, 0x8, 0x202, 0x100, 0x7fffffff, 0x4, 0x6, 0x84, r0}, &(0x7f0000000140)=0x20) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000a6af74)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000180)=0x81) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000280)) 2018/04/13 14:58:49 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@ipv4={[], [], @rand_addr}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, r1}, 0xc) 2018/04/13 14:58:49 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="b9", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) [ 71.948712] binder: 7116:7120 ioctl c0105303 20000040 returned -22 [ 71.948731] FAULT_INJECTION: forcing a failure. [ 71.948731] name failslab, interval 1, probability 0, space 0, times 0 [ 71.966441] CPU: 1 PID: 7115 Comm: syz-executor5 Not tainted 4.16.0+ #2 [ 71.973196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.982555] Call Trace: [ 71.985162] dump_stack+0x1b9/0x294 [ 71.988713] binder: 7116:7120 got reply transaction with no transaction stack 2018/04/13 14:58:49 executing program 4: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20) [ 71.988807] ? dump_stack_print_info.cold.2+0x52/0x52 [ 71.996180] binder: 7116:7120 transaction failed 29201/-71, size 0-0 line 2763 [ 72.001297] should_fail.cold.4+0xa/0x1a [ 72.001323] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 72.001343] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 72.001360] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 72.028233] ? is_bpf_text_address+0xd7/0x170 [ 72.032750] ? kernel_text_address+0x79/0xf0 [ 72.037176] ? __unwind_start+0x166/0x330 [ 72.038675] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 72.041331] ? __kernel_text_address+0xd/0x40 [ 72.041352] ? unwind_get_return_address+0x61/0xa0 [ 72.041372] ? __save_stack_trace+0x7e/0xd0 [ 72.041400] ? save_stack+0xa9/0xd0 [ 72.041418] ? save_stack+0x43/0xd0 [ 72.070758] ? kasan_kmalloc+0xc4/0xe0 [ 72.074654] ? kmem_cache_alloc_trace+0x152/0x780 [ 72.078655] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 72.079493] ? br_add_if+0x567/0x19e0 [ 72.079508] ? add_del_if+0x10f/0x140 [ 72.079521] ? br_dev_ioctl+0xbf/0xe0 [ 72.079537] ? dev_ifsioc+0x43e/0xb90 [ 72.079550] ? dev_ioctl+0x1b5/0xcc0 [ 72.079571] __should_failslab+0x124/0x180 [ 72.112204] should_failslab+0x9/0x14 [ 72.116011] kmem_cache_alloc_trace+0x4b/0x780 [ 72.120871] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 72.122897] binder: BINDER_SET_CONTEXT_MGR already set [ 72.126414] ? rtnl_is_locked+0xae/0xe0 [ 72.126429] ? rtnl_trylock+0x20/0x20 [ 72.126456] switchdev_port_attr_set+0x145/0x3e0 [ 72.126474] ? switchdev_port_attr_set_deferred+0x110/0x110 [ 72.126491] ? __ethtool_get_link_ksettings+0x142/0x2e0 [ 72.126511] ? convert_legacy_settings_to_link_ksettings+0x5e0/0x5e0 [ 72.126535] br_set_state+0x1d9/0x2d0 [ 72.126553] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 72.126571] ? br_designated_port_selection+0x620/0x620 [ 72.172615] binder: 7116:7128 ioctl c0105303 20000040 returned -22 [ 72.176795] br_init_port+0xc5/0x260 [ 72.176815] br_add_if+0x6bb/0x19e0 [ 72.176830] ? graph_lock+0x170/0x170 [ 72.176844] ? lock_acquire+0x1dc/0x520 [ 72.176865] ? br_features_recompute+0x220/0x220 [ 72.176884] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 72.176902] ? security_capable+0x99/0xc0 [ 72.213147] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 72.218676] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 72.223771] ? __dev_get_by_index+0x169/0x1c0 [ 72.228353] add_del_if+0x10f/0x140 [ 72.231972] br_dev_ioctl+0xbf/0xe0 [ 72.235589] ? br_ioctl_deviceless_stub+0xad0/0xad0 [ 72.240594] dev_ifsioc+0x43e/0xb90 [ 72.244212] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 72.249392] ? register_gifconf+0x70/0x70 [ 72.253541] dev_ioctl+0x1b5/0xcc0 [ 72.257080] sock_do_ioctl+0x1d3/0x3e0 [ 72.260959] ? compat_ifr_data_ioctl+0x170/0x170 [ 72.265706] ? lock_downgrade+0x8e0/0x8e0 [ 72.269848] ? rcu_is_watching+0x85/0x140 [ 72.274010] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 72.279200] sock_ioctl+0x30d/0x680 [ 72.282818] ? dlci_ioctl_set+0x40/0x40 [ 72.286784] ? expand_files.part.8+0x9a0/0x9a0 [ 72.291363] ? kasan_check_write+0x14/0x20 [ 72.295588] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 72.300509] ? wait_for_completion+0x870/0x870 [ 72.305086] ? dlci_ioctl_set+0x40/0x40 [ 72.309054] do_vfs_ioctl+0x1cf/0x1650 [ 72.312937] ? ioctl_preallocate+0x2e0/0x2e0 [ 72.317335] ? fget_raw+0x20/0x20 [ 72.320956] ? __sb_end_write+0xac/0xe0 [ 72.324937] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 72.330461] ? fput+0x130/0x1a0 [ 72.333733] ? ksys_write+0x1a6/0x250 [ 72.337528] ? security_file_ioctl+0x94/0xc0 [ 72.341928] ksys_ioctl+0xa9/0xd0 [ 72.345374] SyS_ioctl+0x24/0x30 [ 72.348727] ? ksys_ioctl+0xd0/0xd0 [ 72.352345] do_syscall_64+0x29e/0x9d0 [ 72.356222] ? vmalloc_sync_all+0x30/0x30 [ 72.360358] ? _raw_spin_unlock_irq+0x27/0x70 [ 72.364845] ? finish_task_switch+0x1ca/0x810 [ 72.369331] ? syscall_return_slowpath+0x5c0/0x5c0 [ 72.374254] ? syscall_return_slowpath+0x30f/0x5c0 [ 72.379177] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 72.384547] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 72.389385] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 72.394572] RIP: 0033:0x455319 [ 72.397751] RSP: 002b:00007fe922755c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.405460] RAX: ffffffffffffffda RBX: 00007fe9227566d4 RCX: 0000000000455319 [ 72.412717] RDX: 0000000020000000 RSI: 00000000000089a2 RDI: 0000000000000013 [ 72.419971] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 72.427227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 72.434484] R13: 000000000000036a R14: 00000000006f8290 R15: 0000000000000002 [ 72.442207] bridge0: error setting offload STP state on port 3(team_slave_0) 2018/04/13 14:58:49 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x2, 0x400000) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000140)=0x1000000000000000, 0x4) sendmsg$nl_netfilter(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000010000000000000000000000040dd0004000000"], 0x1c}, 0x1}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000180)={0x2, 'bond0\x00'}, 0x18) 2018/04/13 14:58:49 executing program 6: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000e51ff8)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) close(r2) r3 = memfd_create(&(0x7f0000002000)="6372706c6f7d1985", 0x0) bind$llc(r3, &(0x7f00000000c0)={0x1a, 0x33e, 0x2, 0xbd5a, 0x0, 0x7, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1f}}, 0x10) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="caf4beccf103007e587278afb8db5540031a26eb7c32d5e530206356d6e0958de53e7cfb1d7520675917346a4afa2973ac4ededc4c982215eb26e1699b26bcd1c32d10e75c8a03f79f081e19c69d38f440700900000000000000a34af684733f", 0x60}], 0x1000000000000096, 0x0) write(r2, &(0x7f000014d000), 0x0) lseek(r3, 0x0, 0x3) close(r1) [ 72.449467] bridge0: port 3(team_slave_0) entered disabled state [ 72.455918] binder: 7116:7120 ioctl 40046207 0 returned -16 2018/04/13 14:58:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") writev(r0, &(0x7f0000002b80)=[{&(0x7f0000000380)="6d71a3cdd336538b0124923de9f40e494dc6a2df5169c4c3cacc1ee455e1e2bf21d9f18958fc25c6bcf392971cd4f1b3a9c9bcdd82e9954e79e10bda001376eeb16353b4ca721a37b747be0e2090bedb5da9e49d29744d0619af519144d27758e21116865a1f3060acd519499b8393e5b65e10c05132498a2650d4a8178fb4611939f36d4d863fedca8046cf9c5682ddb00ce976116b1d0f199378cc48975eb42871f7e6ca782454a0a869d5f8998ce666ebe65945edf2b4749d3dfcfa0f0ce88bad54f103cf6cdbad7b1a9e302cac5b450c72d3550cfe6843a5a68d8e3af14b579482595c797583933807cfc4940a59f462b5370fcc57e8f313eb", 0xfb}], 0x1) r1 = getpid() ptrace$getregset(0x4204, r1, 0x0, &(0x7f0000000480)={&(0x7f0000000780)=""/221, 0xdd}) fcntl$setstatus(r0, 0x4, 0x6000) pread64(r0, &(0x7f0000003c00)=""/4096, 0xffffff72, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000540)={0x8}, 0x4) request_key(&(0x7f0000000680)='dns_resolver\x00', &(0x7f0000000700)={0x73, 0x79, 0x7a}, &(0x7f00000006c0)="7b2d23776c616e3076626f786e657431766d6e657430142400", 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffff39}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r2, 0x6}, 0x8) fcntl$setlease(r0, 0x400, 0x1) request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000140)='vboxnet1\x00', 0x0) syncfs(r0) recvfrom$inet(r0, &(0x7f0000002c00)=""/74, 0x4a, 0x100, &(0x7f0000000600)={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x3ff, 0x1, &(0x7f0000003040)=[{&(0x7f0000002d40)="68059f598568a5eca43c6164cba05c427fcb3096237647c0a7362c2ce459fc2908210f2bb3b61cdfda95d51fdc8c4aae822325f31388e1d8764f3c2caf45b851b14f1ee52ccc3bbd2de49526b9c396d9d8e1a924b4dd04c17d045bc23eeeb18f32d5954a929a5eeb3ab0dda90ae6ff2a54ba3ee587987f1c5e566985264aee3c74a4e81f40d6315f2cc4aded2cd4632f0e1e673fda263e95fc41da95de9b3d92a283da978b1999cafac61700e416", 0xae, 0x100000001}], 0x4, &(0x7f00000030c0)=ANY=[]) syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) 2018/04/13 14:58:50 executing program 5 (fault-call:2 fault-nth:3): r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/13 14:58:50 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20) 2018/04/13 14:58:50 executing program 7: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x200400, 0x0) fanotify_mark(r0, 0x484, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') [ 72.561169] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 72.574754] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/13 14:58:50 executing program 6: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c90027000f800ffe100000000000000000000000000", 0x17}], 0x1, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f00000005c0)='./file0/file0\x00', 0x3fffa, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write(r0, &(0x7f0000001200)="f8", 0x1) [ 72.749458] FAT-fs (loop6): bogus number of reserved sectors [ 72.750349] EXT4-fs (loop3): unable to read superblock [ 72.755590] FAT-fs (loop6): Can't find a valid FAT filesystem [ 72.814824] bridge0: port 3(team_slave_0) entered blocking state [ 72.821147] FAULT_INJECTION: forcing a failure. [ 72.821147] name failslab, interval 1, probability 0, space 0, times 0 [ 72.832415] CPU: 0 PID: 7153 Comm: syz-executor5 Not tainted 4.16.0+ #2 [ 72.839174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.848520] Call Trace: [ 72.851106] dump_stack+0x1b9/0x294 [ 72.854723] ? dump_stack_print_info.cold.2+0x52/0x52 [ 72.859917] ? console_unlock+0xb37/0x1100 [ 72.864146] should_fail.cold.4+0xa/0x1a [ 72.868202] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 72.873291] ? mark_held_locks+0xc9/0x160 [ 72.877426] ? vprintk_emit+0x694/0xdd0 [ 72.881389] ? vprintk_emit+0x694/0xdd0 [ 72.885363] ? __down_trylock_console_sem+0x155/0x200 [ 72.890567] ? vprintk_emit+0x3e5/0xdd0 [ 72.894533] ? console_unlock+0x1100/0x1100 [ 72.898847] ? lock_downgrade+0x8e0/0x8e0 [ 72.902991] __should_failslab+0x124/0x180 [ 72.907224] should_failslab+0x9/0x14 [ 72.911019] kmem_cache_alloc_trace+0x4b/0x780 [ 72.915590] ? vprintk_default+0x28/0x30 [ 72.919642] ? vprintk_func+0x81/0xe7 [ 72.923448] switchdev_port_attr_set+0x145/0x3e0 [ 72.928193] ? switchdev_port_attr_set_deferred+0x110/0x110 [ 72.933891] ? convert_legacy_settings_to_link_ksettings+0x5e0/0x5e0 [ 72.940376] __set_ageing_time+0x198/0x260 [ 72.944597] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 72.949771] ? br_set_max_age+0x100/0x100 [ 72.953914] br_init_port+0x194/0x260 [ 72.957702] br_add_if+0x6bb/0x19e0 [ 72.961327] ? graph_lock+0x170/0x170 [ 72.965124] ? lock_acquire+0x1dc/0x520 [ 72.969096] ? br_features_recompute+0x220/0x220 [ 72.973842] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 72.979377] ? security_capable+0x99/0xc0 [ 72.983514] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 72.989039] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 72.994043] ? __dev_get_by_index+0x169/0x1c0 [ 72.998527] add_del_if+0x10f/0x140 [ 73.002144] br_dev_ioctl+0xbf/0xe0 [ 73.005757] ? br_ioctl_deviceless_stub+0xad0/0xad0 [ 73.010779] dev_ifsioc+0x43e/0xb90 [ 73.014391] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 73.019574] ? register_gifconf+0x70/0x70 [ 73.023712] dev_ioctl+0x1b5/0xcc0 [ 73.027242] sock_do_ioctl+0x1d3/0x3e0 [ 73.031122] ? compat_ifr_data_ioctl+0x170/0x170 [ 73.035868] ? lock_downgrade+0x8e0/0x8e0 [ 73.040007] ? kasan_check_read+0x11/0x20 [ 73.044149] ? rcu_is_watching+0x85/0x140 [ 73.048296] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 73.055177] sock_ioctl+0x30d/0x680 [ 73.058796] ? dlci_ioctl_set+0x40/0x40 [ 73.063193] ? expand_files.part.8+0x9a0/0x9a0 [ 73.067772] ? kasan_check_write+0x14/0x20 [ 73.071994] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 73.076920] ? wait_for_completion+0x870/0x870 [ 73.081492] ? dlci_ioctl_set+0x40/0x40 [ 73.085465] do_vfs_ioctl+0x1cf/0x1650 [ 73.089342] ? ioctl_preallocate+0x2e0/0x2e0 [ 73.093737] ? fget_raw+0x20/0x20 [ 73.097176] ? __sb_end_write+0xac/0xe0 [ 73.101143] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 73.106664] ? fput+0x130/0x1a0 [ 73.109932] ? ksys_write+0x1a6/0x250 [ 73.113723] ? security_file_ioctl+0x94/0xc0 [ 73.118125] ksys_ioctl+0xa9/0xd0 [ 73.121567] SyS_ioctl+0x24/0x30 [ 73.124917] ? ksys_ioctl+0xd0/0xd0 [ 73.128536] do_syscall_64+0x29e/0x9d0 [ 73.132410] ? vmalloc_sync_all+0x30/0x30 [ 73.136546] ? _raw_spin_unlock_irq+0x27/0x70 [ 73.141031] ? finish_task_switch+0x1ca/0x810 [ 73.145525] ? syscall_return_slowpath+0x5c0/0x5c0 [ 73.150440] ? syscall_return_slowpath+0x30f/0x5c0 [ 73.155359] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 73.160722] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 73.165553] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 73.170725] RIP: 0033:0x455319 [ 73.173899] RSP: 002b:00007fe922755c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.181592] RAX: ffffffffffffffda RBX: 00007fe9227566d4 RCX: 0000000000455319 [ 73.188847] RDX: 0000000020000000 RSI: 00000000000089a2 RDI: 0000000000000013 [ 73.196104] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 73.203358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 2018/04/13 14:58:50 executing program 0: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x40000) r0 = socket$inet6(0xa, 0x100000000000002, 0x0) mmap(&(0x7f0000481000/0x11000)=nil, 0x11000, 0x0, 0x132, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000003500)={{{@in=@loopback, @in6=@loopback}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f0000003600)=0xe8) fremovexattr(r0, &(0x7f0000000040)=@random={'system.', '/dev/input/mouse#\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x400, 0x10000) sendmsg$nl_netfilter(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, 0x0, 0xb, 0x600, 0x70bd2a, 0x25dfdbff, {0xb, 0x0, 0x8}, [@generic="cf2c653ddb6a0865c0eaa14a89cf4af15a6f3d6359faa38e3c22c35ec21f2d49f48a2f663d21b639ece1b7ec46d7a0a917928da3448388679a9d30e334895752bcf1250eb8806e323ed0c0cfc6349dfb888da4cd827b30c908f9ec6f29cdd12b40eeb51ed5"]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004045}, 0x40000) 2018/04/13 14:58:50 executing program 7: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x4001, 0x0) fallocate(r0, 0x0, 0x0, 0x1fffff) open(&(0x7f0000000380)='./file0/file1\x00', 0x0, 0x0) 2018/04/13 14:58:50 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20) 2018/04/13 14:58:50 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x2, 0x400000) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000140)=0x1000000000000000, 0x4) sendmsg$nl_netfilter(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000010000000000000000000000040dd0004000000"], 0x1c}, 0x1}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000180)={0x2, 'bond0\x00'}, 0x18) [ 73.210611] R13: 000000000000036a R14: 00000000006f8290 R15: 0000000000000003 [ 73.218577] team_slave_0: failed to offload ageing time [ 73.224049] bridge0: port 3(team_slave_0) entered disabled state [ 73.262447] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 73.305423] EXT4-fs (loop3): unable to read superblock [ 73.354402] FAT-fs (loop6): bogus number of reserved sectors [ 73.360417] FAT-fs (loop6): Can't find a valid FAT filesystem [ 73.392918] FAT-fs (loop7): Directory bread(block 112) failed [ 73.458120] FAT-fs (loop7): Directory bread(block 112) failed [ 73.466707] FAT-fs (loop7): Directory bread(block 112) failed 2018/04/13 14:58:51 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="b9", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) 2018/04/13 14:58:51 executing program 7: r0 = socket(0x10, 0x3, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000040)={0x1, 0x8}) write(r0, &(0x7f00000000c0)="2400000058001f0014b2f407000904000200071008000100ffffffff0800020001000000", 0x24) 2018/04/13 14:58:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") writev(r0, &(0x7f0000002b80)=[{&(0x7f0000000380)="6d71a3cdd336538b0124923de9f40e494dc6a2df5169c4c3cacc1ee455e1e2bf21d9f18958fc25c6bcf392971cd4f1b3a9c9bcdd82e9954e79e10bda001376eeb16353b4ca721a37b747be0e2090bedb5da9e49d29744d0619af519144d27758e21116865a1f3060acd519499b8393e5b65e10c05132498a2650d4a8178fb4611939f36d4d863fedca8046cf9c5682ddb00ce976116b1d0f199378cc48975eb42871f7e6ca782454a0a869d5f8998ce666ebe65945edf2b4749d3dfcfa0f0ce88bad54f103cf6cdbad7b1a9e302cac5b450c72d3550cfe6843a5a68d8e3af14b579482595c797583933807cfc4940a59f462b5370fcc57e8f313eb", 0xfb}], 0x1) r1 = getpid() ptrace$getregset(0x4204, r1, 0x0, &(0x7f0000000480)={&(0x7f0000000780)=""/221, 0xdd}) fcntl$setstatus(r0, 0x4, 0x6000) pread64(r0, &(0x7f0000003c00)=""/4096, 0xffffff72, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000540)={0x8}, 0x4) request_key(&(0x7f0000000680)='dns_resolver\x00', &(0x7f0000000700)={0x73, 0x79, 0x7a}, &(0x7f00000006c0)="7b2d23776c616e3076626f786e657431766d6e657430142400", 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffff39}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r2, 0x6}, 0x8) fcntl$setlease(r0, 0x400, 0x1) request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000140)='vboxnet1\x00', 0x0) syncfs(r0) recvfrom$inet(r0, &(0x7f0000002c00)=""/74, 0x4a, 0x100, &(0x7f0000000600)={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x3ff, 0x1, &(0x7f0000003040)=[{&(0x7f0000002d40)="68059f598568a5eca43c6164cba05c427fcb3096237647c0a7362c2ce459fc2908210f2bb3b61cdfda95d51fdc8c4aae822325f31388e1d8764f3c2caf45b851b14f1ee52ccc3bbd2de49526b9c396d9d8e1a924b4dd04c17d045bc23eeeb18f32d5954a929a5eeb3ab0dda90ae6ff2a54ba3ee587987f1c5e566985264aee3c74a4e81f40d6315f2cc4aded2cd4632f0e1e673fda263e95fc41da95de9b3d92a283da978b1999cafac61700e416", 0xae, 0x100000001}], 0x4, &(0x7f00000030c0)=ANY=[]) syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) 2018/04/13 14:58:51 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20) 2018/04/13 14:58:51 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x2, 0x400000) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000140)=0x1000000000000000, 0x4) sendmsg$nl_netfilter(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000010000000000000000000000040dd0004000000"], 0x1c}, 0x1}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000180)={0x2, 'bond0\x00'}, 0x18) 2018/04/13 14:58:51 executing program 5 (fault-call:2 fault-nth:4): r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/13 14:58:51 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x7ffffff7fe, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040), 0xfffffe3f) 2018/04/13 14:58:51 executing program 6: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x200, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000440)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback={0x0, 0x1}, @in=@multicast2=0xe0000002, 0x4e20, 0x6, 0x4e20, 0x0, 0xa, 0x0, 0xa0, 0x3d, r1, r2}, {0x3, 0x607c, 0x3, 0x2, 0xb0, 0xca3, 0xc8}, {0x7ff, 0x7, 0x20, 0x8001}, 0x1, 0x6e6bb9, 0x2, 0x0, 0x1, 0x3}, {{@in6=@loopback={0x0, 0x1}, 0x4d3, 0xff}, 0xa, @in=@multicast2=0xe0000002, 0x10001, 0x3, 0x0, 0xfffffffffffffff9, 0xfffffffffffff1d8, 0x8001, 0x1ff}}, 0xe8) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) acct(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r3, 0x27b, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x2, 0x2285, 0x400000, &(0x7f00000001c0)) [ 73.538114] FAT-fs (loop7): Directory bread(block 112) failed [ 73.576527] attempt to access beyond end of device [ 73.581688] loop7: rw=1, want=246, limit=112 [ 73.586377] Buffer I/O error on dev loop7, logical block 245, lost async page write [ 73.629217] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 73.629915] bridge0: port 3(team_slave_0) entered blocking state [ 73.643986] FAULT_INJECTION: forcing a failure. [ 73.643986] name failslab, interval 1, probability 0, space 0, times 0 [ 73.655240] CPU: 1 PID: 7214 Comm: syz-executor5 Not tainted 4.16.0+ #2 [ 73.661999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.671357] Call Trace: [ 73.673962] dump_stack+0x1b9/0x294 [ 73.677609] ? dump_stack_print_info.cold.2+0x52/0x52 [ 73.682820] should_fail.cold.4+0xa/0x1a [ 73.686898] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 73.692011] ? perf_trace_lock+0x900/0x900 [ 73.695906] attempt to access beyond end of device [ 73.696249] ? add_del_if+0x10f/0x140 [ 73.696267] ? dev_ifsioc+0x43e/0xb90 [ 73.696283] ? dev_ioctl+0x1b5/0xcc0 [ 73.701271] loop7: rw=1, want=247, limit=112 [ 73.704993] ? sock_ioctl+0x30d/0x680 [ 73.705010] ? do_vfs_ioctl+0x1cf/0x1650 [ 73.705026] ? graph_lock+0x170/0x170 [ 73.705039] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 73.705057] ? vprintk_emit+0xbc7/0xdd0 [ 73.708864] Buffer I/O error on dev loop7, logical block 246, lost async page write [ 73.712534] ? print_usage_bug+0xc0/0xc0 [ 73.712554] ? print_usage_bug+0xc0/0xc0 [ 73.712573] ? find_held_lock+0x36/0x1c0 [ 73.757753] ? lock_downgrade+0x8e0/0x8e0 [ 73.761905] __should_failslab+0x124/0x180 [ 73.766134] should_failslab+0x9/0x14 [ 73.769925] kmem_cache_alloc_trace+0x4b/0x780 [ 73.774493] ? trace_hardirqs_on+0xd/0x10 [ 73.778632] ? queue_work_on+0x12c/0x1e0 [ 73.782692] switchdev_port_attr_set+0x145/0x3e0 [ 73.787436] ? switchdev_port_attr_set_deferred+0x110/0x110 [ 73.793142] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 73.798672] br_set_state+0x1d9/0x2d0 [ 73.802462] ? br_designated_port_selection+0x620/0x620 [ 73.807829] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 73.813358] br_add_if+0x6c5/0x19e0 [ 73.816974] ? graph_lock+0x170/0x170 [ 73.820763] ? lock_acquire+0x1dc/0x520 [ 73.824733] ? br_features_recompute+0x220/0x220 [ 73.829480] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 73.835010] ? security_capable+0x99/0xc0 [ 73.839156] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 73.844681] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 73.849688] ? __dev_get_by_index+0x169/0x1c0 [ 73.854179] add_del_if+0x10f/0x140 [ 73.857796] br_dev_ioctl+0xbf/0xe0 [ 73.861412] ? br_ioctl_deviceless_stub+0xad0/0xad0 [ 73.866429] dev_ifsioc+0x43e/0xb90 [ 73.870051] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 73.875232] ? register_gifconf+0x70/0x70 [ 73.879377] dev_ioctl+0x1b5/0xcc0 [ 73.882912] sock_do_ioctl+0x1d3/0x3e0 [ 73.886790] ? compat_ifr_data_ioctl+0x170/0x170 [ 73.891534] ? lock_downgrade+0x8e0/0x8e0 [ 73.895679] ? rcu_is_watching+0x85/0x140 [ 73.899827] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 73.905013] sock_ioctl+0x30d/0x680 [ 73.908638] ? dlci_ioctl_set+0x40/0x40 [ 73.912605] ? expand_files.part.8+0x9a0/0x9a0 [ 73.917177] ? kasan_check_write+0x14/0x20 [ 73.921579] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 73.926501] ? wait_for_completion+0x870/0x870 [ 73.931076] ? dlci_ioctl_set+0x40/0x40 [ 73.935045] do_vfs_ioctl+0x1cf/0x1650 [ 73.938928] ? ioctl_preallocate+0x2e0/0x2e0 [ 73.943326] ? fget_raw+0x20/0x20 [ 73.946769] ? __sb_end_write+0xac/0xe0 [ 73.950737] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 73.956260] ? fput+0x130/0x1a0 [ 73.959531] ? ksys_write+0x1a6/0x250 [ 73.963327] ? security_file_ioctl+0x94/0xc0 [ 73.967729] ksys_ioctl+0xa9/0xd0 [ 73.971177] SyS_ioctl+0x24/0x30 [ 73.974531] ? ksys_ioctl+0xd0/0xd0 [ 73.978154] do_syscall_64+0x29e/0x9d0 [ 73.982037] ? vmalloc_sync_all+0x30/0x30 [ 73.986192] ? kasan_check_write+0x14/0x20 [ 73.990420] ? syscall_return_slowpath+0x5c0/0x5c0 [ 73.995341] ? syscall_return_slowpath+0x30f/0x5c0 [ 74.000278] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 74.005635] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 74.010566] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 74.015743] RIP: 0033:0x455319 [ 74.018919] RSP: 002b:00007fe922755c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.026618] RAX: ffffffffffffffda RBX: 00007fe9227566d4 RCX: 0000000000455319 [ 74.033877] RDX: 0000000020000000 RSI: 00000000000089a2 RDI: 0000000000000013 [ 74.041136] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 74.048396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 74.055666] R13: 000000000000036a R14: 00000000006f8290 R15: 0000000000000004 [ 74.063662] bridge0: error setting offload STP state on port 3(team_slave_0) [ 74.083580] attempt to access beyond end of device [ 74.088699] loop7: rw=1, want=248, limit=112 [ 74.093182] Buffer I/O error on dev loop7, logical block 247, lost async page write [ 74.115672] EXT4-fs (loop3): unable to read superblock [ 74.134487] attempt to access beyond end of device [ 74.139541] loop7: rw=1, want=249, limit=112 [ 74.144047] Buffer I/O error on dev loop7, logical block 248, lost async page write [ 74.154818] attempt to access beyond end of device [ 74.160409] loop7: rw=1, want=262, limit=112 [ 74.164919] Buffer I/O error on dev loop7, logical block 261, lost async page write [ 74.173174] attempt to access beyond end of device [ 74.178155] loop7: rw=1, want=263, limit=112 [ 74.182618] Buffer I/O error on dev loop7, logical block 262, lost async page write [ 74.191762] attempt to access beyond end of device [ 74.196889] loop7: rw=1, want=264, limit=112 [ 74.201350] Buffer I/O error on dev loop7, logical block 263, lost async page write [ 74.217423] attempt to access beyond end of device [ 74.222458] loop7: rw=1, want=265, limit=112 [ 74.226930] Buffer I/O error on dev loop7, logical block 264, lost async page write [ 74.238994] attempt to access beyond end of device [ 74.244070] loop7: rw=1, want=2153, limit=112 2018/04/13 14:58:52 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20) 2018/04/13 14:58:52 executing program 6: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_setup(0x8000000008, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000001, 0x0, r0, &(0x7f0000000a00), 0x32c, 0xd1}]) gettid() 2018/04/13 14:58:52 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000340)='/dev/snd/pcmC#D#c\x00', 0x4, 0x80000) connect$nfc_llcp(r0, &(0x7f0000000380)={0x27, 0x0, 0x2, 0x6, 0x0, 0x5, "c67b0cb3b9a976e648d77d65e34520eb7965bb45a2e8e901ab5003e96b873f2241b62af1f7731953d45983dbd4126d9e34be1a676eeb0a2e15121c50144c70", 0x30}, 0x60) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000032e000)) chdir(&(0x7f0000f95000)='./file0\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) io_setup(0x8, &(0x7f0000000280)=0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000680)=@nat={'nat\x00', 0x1b, 0x5, 0x640, 0x168, 0x0, 0xffffffff, 0x0, 0x2d8, 0x570, 0x570, 0xffffffff, 0x570, 0x570, 0x5, &(0x7f0000000440), {[{{@uncond, 0x0, 0x120, 0x168, 0x0, {}, [@common=@mh={0x28, 'mh\x00', 0x0, {0x1, 0x70d9, 0x1}}, @common=@frag={0x30, 'frag\x00', 0x0, {0x4, 0xcbed, 0xffffffff7fffffff, 0x20, 0x2}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xc, @ipv6=@loopback={0x0, 0x1}, @ipv4=@remote={0xac, 0x14, 0x14, 0xbb}, @port=0x4e23, @port=0x4e20}}}, {{@uncond, 0x0, 0x128, 0x170, 0x0, {}, [@common=@srh={0x30, 'srh\x00', 0x0, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x6, 0x0, 0x10}}, @common=@inet=@ipcomp={0x30, 'ipcomp\x00', 0x0, {0x4d4, 0x4d6, 0x1}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x9, @ipv6=@remote={0xfe, 0x80, [], 0xbb}, @ipv4=@rand_addr=0x5, @icmp_id=0x67, @port=0x4e21}}}, {{@ipv6={@loopback={0x0, 0x1}, @dev={0xfe, 0x80, [], 0x1f}, [0xff, 0x0, 0xff0000ff, 0xffffffff], [0xff0000ff, 0x0, 0xff, 0xffffffff], 'dummy0\x00', 'veth1\x00', {}, {0xff}, 0x2f, 0x5, 0x2, 0x6}, 0x0, 0x140, 0x188, 0x0, {}, [@common=@frag={0x30, 'frag\x00', 0x0, {0x2, 0x9, 0x80000001, 0x0, 0x1}}, @common=@dst={0x48, 'dst\x00', 0x0, {0x0, 0x4, 0x1, [0x7f, 0x4, 0x6, 0x1, 0x0, 0x10000, 0x5, 0x40, 0x6, 0xd18, 0x9, 0x4, 0x5cb, 0xd690, 0xfffffffffffffe83, 0x80000000], 0xd}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x89dc}}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, [0xff000000, 0xff, 0xffffffff, 0xffffffff], [0xff, 0xffffffff, 0x0, 0xffffff00], 'team0\x00', 'lo\x00', {0xff}, {}, 0x3b, 0x8, 0x2, 0xc}, 0x0, 0xc8, 0x110}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@remote={0xfe, 0x80, [], 0xbb}, @ipv6=@mcast1={0xff, 0x1, [], 0x1}, @icmp_id=0x65, @gre_key=0x3}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x6a0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x1, 0x8}, &(0x7f0000000200)=0x8) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000300)='bcsf0\x00') getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={r3, 0x100}, &(0x7f00000002c0)=0x8) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000180)={0x5, 0xb5c, &(0x7f0000000040)="13bb9f5ab92379960eb105c95d9d4ad6e3efceb8903e1d9fb78a8c1a35dda3ac78e96571ea8d6c8f4c869f", &(0x7f0000000080)="9606719e029e34019778055b9a1f98341a8a7059093e0ef74ebb51db06cd65b9cb55f5084097a4bc10cfa8cd2b7ad7db9ead60463be4cfc1d974f088bc5aff72ffc603b070e39c1c15c28e8e488fa6fca10c7cbb2634943a2beba9b1c41355765b056d8e543727bf8a1a45aa8a6feea0f93b32d409b5984185cd53ab0ab69029aa258b182eedc88f456db62ce8f1d50f8eaaf36aa119a54e79272a744387832f5bc6cdb6d8b07de23096d01ee2bc5f0b41d89f804ebe1e9e261b4c17ef77b5864b9c4cbc853c21d95b5ffd1b186f86b0e5a8ac12fd448986f7c7f3f444f79793589342a6e2cce848fe7105bf0fcf12e637", 0x2b, 0xf1}) io_submit(r2, 0x1, &(0x7f0000000640)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000300)}]) 2018/04/13 14:58:52 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x2, 0x400000) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000140)=0x1000000000000000, 0x4) sendmsg$nl_netfilter(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000010000000000000000000000040dd0004000000"], 0x1c}, 0x1}, 0x0) 2018/04/13 14:58:52 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x1f, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x2c) r1 = msgget$private(0x0, 0x104) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000440)=""/167) r2 = accept(0xffffffffffffff9c, &(0x7f0000000200)=@un=@abs, &(0x7f0000000080)=0x80) r3 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000700)="971e1967ace1da5a3bdcfd9838e93bf290238d9be925893387f5e6ddf3ed66914ba892954bc57e3440ee4808d4a7899312160617e015bafa652c4844c72133e63d21e71b6c0642239450ddfcbcca3ea83a7a336d740568e58c3e4bd6d5f6390f4e576d2e33a605813a7af8efe293f43cb3c7401d6bb5eabb4f3e0ae2a4dd53240c900798f5197fd792d32e", 0x8b, 0xfffffffffffffffb) keyctl$invalidate(0x15, r3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000003c0)={r4, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) r5 = getuid() inotify_init() setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@ipv4={[], [0xff, 0xff], @rand_addr=0x4}, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x4e21, 0xfff, 0x4e22, 0x1f, 0xa, 0x20, 0xa0, 0x2, 0x0, r5}, {0xa69, 0x7fff, 0x1, 0x8, 0x1, 0x0, 0x742f, 0x5}, {0x5, 0x4, 0x68b6d142, 0x10000}, 0x5, 0x6e6bb7, 0x2, 0x1, 0x2, 0x1}, {{@in=@broadcast=0xffffffff, 0x4d3, 0x32}, 0xa, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x34ff, 0x1, 0x1, 0x1, 0x4, 0x100000000, 0x6f5b}}, 0xe8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000000)="8fb81554a4ad362966241ede6317e7a8c167272d089952ca3b929753b7a6fb6ce741c13e453e8b5251982ae608f37be0a1a1938c8530def47f75a8a86d88c026f0dfa496b484f01cf4a5ca310000000000000000000000", &(0x7f0000000100)=""/228}, 0x18) 2018/04/13 14:58:52 executing program 5 (fault-call:2 fault-nth:5): r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/13 14:58:52 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="b9", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) 2018/04/13 14:58:52 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f00000000c0)={0x8, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0xa171) ioctl$TCXONC(r2, 0x540a, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) [ 74.581241] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 74.590237] bridge0: port 3(team_slave_0) entered blocking state [ 74.596677] bridge0: port 3(team_slave_0) entered disabled state [ 74.602948] FAULT_INJECTION: forcing a failure. [ 74.602948] name failslab, interval 1, probability 0, space 0, times 0 [ 74.614232] CPU: 0 PID: 7241 Comm: syz-executor5 Not tainted 4.16.0+ #2 [ 74.620994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.630352] Call Trace: [ 74.632958] dump_stack+0x1b9/0x294 [ 74.636611] ? dump_stack_print_info.cold.2+0x52/0x52 [ 74.641812] ? print_usage_bug+0xc0/0xc0 [ 74.645894] should_fail.cold.4+0xa/0x1a [ 74.649980] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 74.655109] ? mark_held_locks+0xc9/0x160 [ 74.659279] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 74.663886] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 74.669012] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 74.674041] ? trace_hardirqs_on+0xd/0x10 [ 74.678204] ? __debug_object_init+0x57f/0x12c0 [ 74.682890] ? debug_object_free+0x5f0/0x5f0 [ 74.687314] ? console_unlock+0x1100/0x1100 [ 74.691664] __should_failslab+0x124/0x180 [ 74.695916] should_failslab+0x9/0x14 [ 74.699727] kmem_cache_alloc_trace+0x4b/0x780 [ 74.704339] switchdev_port_attr_set+0x145/0x3e0 [ 74.709106] ? switchdev_port_attr_set_deferred+0x110/0x110 [ 74.714823] ? __lockdep_init_map+0x105/0x590 [ 74.719343] br_mc_disabled_update+0x193/0x250 [ 74.723942] ? br_multicast_port_query_expired+0x190/0x190 [ 74.729583] ? br_multicast_router_expired+0xf0/0xf0 [ 74.734725] br_multicast_add_port+0x142/0x2a0 [ 74.739331] br_add_if+0x6d5/0x19e0 [ 74.742972] ? graph_lock+0x170/0x170 [ 74.746786] ? lock_acquire+0x1dc/0x520 [ 74.750776] ? br_features_recompute+0x220/0x220 [ 74.755551] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 74.761101] ? security_capable+0x99/0xc0 [ 74.765270] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 74.770819] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 74.775844] ? __dev_get_by_index+0x169/0x1c0 [ 74.780350] add_del_if+0x10f/0x140 [ 74.783991] br_dev_ioctl+0xbf/0xe0 [ 74.787626] ? br_ioctl_deviceless_stub+0xad0/0xad0 [ 74.792651] dev_ifsioc+0x43e/0xb90 [ 74.796290] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 74.801493] ? register_gifconf+0x70/0x70 [ 74.805664] dev_ioctl+0x1b5/0xcc0 [ 74.809222] sock_do_ioctl+0x1d3/0x3e0 [ 74.813120] ? compat_ifr_data_ioctl+0x170/0x170 [ 74.817885] ? lock_downgrade+0x8e0/0x8e0 [ 74.822051] ? rcu_is_watching+0x85/0x140 [ 74.826224] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 74.831429] sock_ioctl+0x30d/0x680 [ 74.835071] ? dlci_ioctl_set+0x40/0x40 [ 74.839063] ? expand_files.part.8+0x9a0/0x9a0 [ 74.843658] ? kasan_check_write+0x14/0x20 [ 74.847905] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 74.852853] ? wait_for_completion+0x870/0x870 [ 74.857460] ? dlci_ioctl_set+0x40/0x40 [ 74.861444] do_vfs_ioctl+0x1cf/0x1650 [ 74.865349] ? ioctl_preallocate+0x2e0/0x2e0 [ 74.869770] ? fget_raw+0x20/0x20 [ 74.873236] ? __sb_end_write+0xac/0xe0 [ 74.877225] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 2018/04/13 14:58:52 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0xfffffffffffffe26) getsockopt$inet6_tcp_int(r0, 0x6, 0x1f, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = shmget(0x0, 0x2000, 0x30, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000200)=""/4096) 2018/04/13 14:58:52 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20) 2018/04/13 14:58:52 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20) 2018/04/13 14:58:52 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000040), 0x2) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 2018/04/13 14:58:52 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20) [ 74.882767] ? fput+0x130/0x1a0 [ 74.886058] ? ksys_write+0x1a6/0x250 [ 74.889874] ? security_file_ioctl+0x94/0xc0 [ 74.894299] ksys_ioctl+0xa9/0xd0 [ 74.897767] SyS_ioctl+0x24/0x30 [ 74.901141] ? ksys_ioctl+0xd0/0xd0 [ 74.904796] do_syscall_64+0x29e/0x9d0 [ 74.908692] ? vmalloc_sync_all+0x30/0x30 [ 74.912846] ? _raw_spin_unlock_irq+0x27/0x70 [ 74.917349] ? finish_task_switch+0x1ca/0x810 [ 74.921856] ? syscall_return_slowpath+0x5c0/0x5c0 [ 74.926795] ? syscall_return_slowpath+0x30f/0x5c0 [ 74.931740] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 74.937120] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 74.942016] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 74.947205] RIP: 0033:0x455319 [ 74.950382] RSP: 002b:00007fe922755c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.958084] RAX: ffffffffffffffda RBX: 00007fe9227566d4 RCX: 0000000000455319 [ 74.965348] RDX: 0000000020000000 RSI: 00000000000089a2 RDI: 0000000000000013 [ 74.972605] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 74.979862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 74.987123] R13: 000000000000036a R14: 00000000006f8290 R15: 0000000000000005 2018/04/13 14:58:53 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x1000000000008f, 0x0, [0x3]}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x20963d8a, 0x400) getsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f0000000300)=""/217, &(0x7f00000002c0)=0xd9) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000480)={0x0, 0x8f, "76cd2792a5dc8d679260d6774c9ce49a2aefdba7948ec1a2dde0351d30ccedab2649485eaa4a31c355205eaeb3101e81c4bdcb409e483be241eeb0ec04b407062bc69532e12ccfb89647ece1ea2decaf5263df813ee1e86dcdb2e718b2a0137b4d34724e54f0803284f1922f7ca1a24b79ce4e2c9a292a7dbd68cb6f938852e83498077cebba371c92982396da0f52"}, &(0x7f0000000540)=0x97) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000580)={r4, 0x2, 0x20, 0xb9b, 0x8}, &(0x7f00000005c0)=0x18) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000400), &(0x7f0000000440)=0x8) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getgid() fchownat(r2, &(0x7f00000001c0)='./file0\x00', r5, r6, 0x1000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f1f4000b8010000000f01c18fe858eccb02b9940a00000f32440f20c03504000000440f22c0ea030000000b00c4c155551c2c0f01c966ba2000b052ee660f3881a8eb000000", 0x46}], 0x1, 0x0, &(0x7f0000000180), 0x0) 2018/04/13 14:58:53 executing program 4 (fault-call:2 fault-nth:0): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20) 2018/04/13 14:58:53 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x2, 0x400000) sendmsg$nl_netfilter(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000010000000000000000000000040dd0004000000"], 0x1c}, 0x1}, 0x0) 2018/04/13 14:58:53 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffffc, 0xa0013, r0, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x48040, 0x37) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000080)="f82c590ba5d735e63f5d426cd6d615c26dcda0fec0d1013511ffc916f82737dfde178b8ce81d3d249abfc0dfc374441522a889ec87907d6b9b12f2f10585a04b2b3e6e776b354312e4d56f94b775f25882eb7a9a04c29a6fcea0ceff7535ae893240ec0e1ef1274ed5b6259d06de1377cd510cfd54150a9ccedf0d372bca7f86824410689263ac5040b4219ae3c55b76b321e3280a82c2130143bae2ba91daf2d87e954937236f0cef21208beca37ea6cb05030a5c7df4d3f8f1") openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x80, 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='system.sockprotoname\x00') ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) 2018/04/13 14:58:53 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'bridge_slave_0\x00', {0x2, 0x4e24, @multicast1=0xe0000001}}) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x80045439, 0x6f2000, &(0x7f00000003c0)) 2018/04/13 14:58:53 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000380)={r1}) fcntl$notify(0xffffffffffffffff, 0x402, 0x28) close(r0) r2 = syz_open_dev$tun(&(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000040)=""/254, &(0x7f0000000140)=""/119, &(0x7f00000001c0)=""/150}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000780)={'yam0\x00', 0x10}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x1, r1}) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59fb, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x3, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x1}, 0x0) mknod(&(0x7f0000b75ff8)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5402, &(0x7f00009dc000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}) syz_open_pts(0xffffffffffffffff, 0x200000000) r3 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000540)="4d84333445eca8a951986a846c5c47b685ce9ea05c41720355959e784903d6fce785e33be7c12ba8fda1307fecc9f8c7791333cef05561e77184f6920469125dd6534188635f0fd4ff36c33c473ebdfc2e8724e4149292718a5206d3457ed46367fc6bc14aa01c63e0ae", 0x6a, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0x297, &(0x7f0000013ff1)={&(0x7f0000000140)={0x30, 0x18, 0x1, 0x0, 0x0, {0x1}, [@typed={0xc, 0x1, @u64}, @nested={0x10, 0x6, [@typed={0xc, 0x0, @u64}]}]}, 0x30}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000400)={0x80, 0x8200, 0x7}, &(0x7f0000000440)=0x10) keyctl$unlink(0x9, r4, 0x0) socket$key(0xf, 0x3, 0x2) 2018/04/13 14:58:53 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) shutdown(r0, 0x1) 2018/04/13 14:58:53 executing program 5 (fault-call:2 fault-nth:6): r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) [ 75.555955] bridge0: port 3(team_slave_0) entered blocking state [ 75.562245] bridge0: port 3(team_slave_0) entered disabled state [ 75.568732] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 75.586324] FAULT_INJECTION: forcing a failure. [ 75.586324] name failslab, interval 1, probability 0, space 0, times 0 [ 75.597680] CPU: 0 PID: 7281 Comm: syz-executor5 Not tainted 4.16.0+ #2 [ 75.604437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.613788] Call Trace: [ 75.616380] dump_stack+0x1b9/0x294 [ 75.620030] ? dump_stack_print_info.cold.2+0x52/0x52 [ 75.625218] ? perf_trace_lock_acquire+0xe3/0x980 [ 75.630060] should_fail.cold.4+0xa/0x1a [ 75.634118] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 75.639212] ? debug_check_no_locks_freed+0x310/0x310 [ 75.644391] ? print_usage_bug+0xc0/0xc0 [ 75.648437] ? perf_trace_lock_acquire+0xe3/0x980 [ 75.653267] ? graph_lock+0x170/0x170 [ 75.657058] ? perf_trace_lock+0xd6/0x900 [ 75.661199] ? find_held_lock+0x36/0x1c0 [ 75.665251] ? __lock_is_held+0xb5/0x140 [ 75.669312] ? check_same_owner+0x320/0x320 [ 75.673626] ? rcu_note_context_switch+0x710/0x710 [ 75.678553] ? debug_check_no_locks_freed+0x310/0x310 [ 75.683738] ? print_usage_bug+0xc0/0xc0 [ 75.687794] __should_failslab+0x124/0x180 [ 75.692036] should_failslab+0x9/0x14 [ 75.695823] kmem_cache_alloc+0x2af/0x760 [ 75.699961] ? lock_downgrade+0x8e0/0x8e0 [ 75.704097] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 75.709110] __kernfs_new_node+0xe7/0x580 [ 75.713251] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 75.717993] ? zap_class+0x720/0x720 [ 75.721700] ? perf_trace_lock+0x900/0x900 [ 75.725927] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 75.731454] ? refcount_inc_not_zero+0x1dd/0x2d0 [ 75.736210] ? refcount_add_not_zero+0x320/0x320 [ 75.740962] kernfs_new_node+0x80/0xf0 [ 75.744841] kernfs_create_dir_ns+0x3d/0x140 [ 75.749242] sysfs_create_dir_ns+0xbe/0x1d0 [ 75.753556] kobject_add_internal+0x353/0xba0 [ 75.758053] ? kobj_ns_type_registered+0x60/0x60 [ 75.762799] ? kfree_const+0x59/0x70 [ 75.766503] ? rcu_read_lock_sched_held+0x108/0x120 [ 75.771506] ? kfree+0x1e9/0x260 [ 75.774861] ? kfree_const+0x5e/0x70 [ 75.778571] kobject_init_and_add+0xed/0x130 [ 75.782969] ? kobject_add_internal+0xba0/0xba0 [ 75.787627] ? _raw_spin_unlock_bh+0x30/0x40 [ 75.792033] ? __dev_set_allmulti+0x1e1/0x310 [ 75.796539] br_add_if+0x76a/0x19e0 [ 75.800154] ? graph_lock+0x170/0x170 [ 75.803941] ? lock_acquire+0x1dc/0x520 [ 75.807907] ? br_features_recompute+0x220/0x220 [ 75.812656] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 75.818177] ? security_capable+0x99/0xc0 [ 75.822316] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 75.827842] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 75.832868] ? __dev_get_by_index+0x169/0x1c0 [ 75.837351] add_del_if+0x10f/0x140 [ 75.840970] br_dev_ioctl+0xbf/0xe0 [ 75.844597] ? br_ioctl_deviceless_stub+0xad0/0xad0 [ 75.849599] dev_ifsioc+0x43e/0xb90 [ 75.853214] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 75.858391] ? register_gifconf+0x70/0x70 [ 75.862546] dev_ioctl+0x1b5/0xcc0 [ 75.866078] sock_do_ioctl+0x1d3/0x3e0 [ 75.869958] ? compat_ifr_data_ioctl+0x170/0x170 [ 75.874699] ? lock_downgrade+0x8e0/0x8e0 [ 75.878839] ? rcu_is_watching+0x85/0x140 [ 75.882987] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 75.888172] sock_ioctl+0x30d/0x680 [ 75.891790] ? dlci_ioctl_set+0x40/0x40 [ 75.895756] ? expand_files.part.8+0x9a0/0x9a0 [ 75.900328] ? kasan_check_write+0x14/0x20 [ 75.904563] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 75.909483] ? wait_for_completion+0x870/0x870 [ 75.914055] ? dlci_ioctl_set+0x40/0x40 [ 75.918023] do_vfs_ioctl+0x1cf/0x1650 [ 75.921907] ? ioctl_preallocate+0x2e0/0x2e0 [ 75.926304] ? fget_raw+0x20/0x20 [ 75.929756] ? __sb_end_write+0xac/0xe0 [ 75.933720] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 75.939242] ? fput+0x130/0x1a0 [ 75.942511] ? ksys_write+0x1a6/0x250 [ 75.946318] ? security_file_ioctl+0x94/0xc0 [ 75.950726] ksys_ioctl+0xa9/0xd0 [ 75.954169] SyS_ioctl+0x24/0x30 [ 75.957522] ? ksys_ioctl+0xd0/0xd0 [ 75.961140] do_syscall_64+0x29e/0x9d0 [ 75.965018] ? vmalloc_sync_all+0x30/0x30 [ 75.969160] ? _raw_spin_unlock_irq+0x27/0x70 [ 75.973644] ? finish_task_switch+0x1ca/0x810 [ 75.978130] ? syscall_return_slowpath+0x5c0/0x5c0 [ 75.983049] ? syscall_return_slowpath+0x30f/0x5c0 [ 75.987980] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 75.993336] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 75.998171] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 76.003345] RIP: 0033:0x455319 [ 76.006518] RSP: 002b:00007fe922755c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.014214] RAX: ffffffffffffffda RBX: 00007fe9227566d4 RCX: 0000000000455319 [ 76.021469] RDX: 0000000020000000 RSI: 00000000000089a2 RDI: 0000000000000013 [ 76.028765] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 76.036025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 76.043286] R13: 000000000000036a R14: 00000000006f8290 R15: 0000000000000006 [ 76.051709] ------------[ cut here ]------------ 2018/04/13 14:58:53 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000080), 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='mime_type^wlan1mime_type\x00') [ 76.056518] kobject_add_internal failed for brport (error: -12 parent: team_slave_0) [ 76.067500] WARNING: CPU: 0 PID: 7281 at lib/kobject.c:242 kobject_add_internal+0x42c/0xba0 [ 76.076007] Kernel panic - not syncing: panic_on_warn set ... [ 76.076007] [ 76.084041] CPU: 0 PID: 7281 Comm: syz-executor5 Not tainted 4.16.0+ #2 [ 76.090784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 76.100125] Call Trace: [ 76.102707] dump_stack+0x1b9/0x294 [ 76.106328] ? dump_stack_print_info.cold.2+0x52/0x52 [ 76.111515] ? kobject_add_internal+0x3d0/0xba0 [ 76.116174] panic+0x22f/0x4de [ 76.119355] ? add_taint.cold.5+0x16/0x16 [ 76.123500] ? __warn.cold.8+0x148/0x1b3 [ 76.127553] ? kobject_add_internal+0x42c/0xba0 [ 76.132213] __warn.cold.8+0x163/0x1b3 [ 76.136103] ? kobject_add_internal+0x42c/0xba0 [ 76.140764] report_bug+0x252/0x2d0 [ 76.144386] do_error_trap+0x1de/0x490 [ 76.148276] ? math_error+0x420/0x420 [ 76.152070] ? vprintk_default+0x28/0x30 [ 76.156120] ? vprintk_func+0x81/0xe7 [ 76.159922] ? printk+0x9e/0xba [ 76.163201] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 76.168043] do_invalid_op+0x1b/0x20 [ 76.171765] invalid_op+0x1b/0x40 [ 76.175210] RIP: 0010:kobject_add_internal+0x42c/0xba0 [ 76.180473] RSP: 0018:ffff88018a9cf560 EFLAGS: 00010282 [ 76.185833] RAX: 0000000000000048 RBX: ffff8801ce9c6178 RCX: ffffc900064db000 [ 76.193102] RDX: 0000000000040000 RSI: ffffffff815fab11 RDI: ffff88018a9cf0c0 [ 76.200358] RBP: ffff88018a9cf658 R08: ffff88018a9c4540 R09: 0000000000000006 [ 76.207614] R10: ffff88018a9c4540 R11: 0000000000000000 R12: 00000000fffffff4 [ 76.214871] R13: ffff8801a96b8828 R14: ffff8801d9912440 R15: ffff8801a96b8828 [ 76.222151] ? vprintk_func+0x81/0xe7 [ 76.225950] ? kobj_ns_type_registered+0x60/0x60 [ 76.230696] ? kfree_const+0x59/0x70 [ 76.234398] ? rcu_read_lock_sched_held+0x108/0x120 [ 76.239404] ? kfree+0x1e9/0x260 [ 76.242760] ? kfree_const+0x5e/0x70 [ 76.246467] kobject_init_and_add+0xed/0x130 [ 76.250869] ? kobject_add_internal+0xba0/0xba0 [ 76.255525] ? _raw_spin_unlock_bh+0x30/0x40 [ 76.259928] ? __dev_set_allmulti+0x1e1/0x310 [ 76.264423] br_add_if+0x76a/0x19e0 [ 76.268043] ? graph_lock+0x170/0x170 [ 76.271836] ? lock_acquire+0x1dc/0x520 [ 76.275806] ? br_features_recompute+0x220/0x220 [ 76.280561] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 76.286088] ? security_capable+0x99/0xc0 [ 76.290231] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 76.295771] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 76.300779] ? __dev_get_by_index+0x169/0x1c0 [ 76.305268] add_del_if+0x10f/0x140 [ 76.308885] br_dev_ioctl+0xbf/0xe0 [ 76.312501] ? br_ioctl_deviceless_stub+0xad0/0xad0 [ 76.317504] dev_ifsioc+0x43e/0xb90 [ 76.321122] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 76.326302] ? register_gifconf+0x70/0x70 [ 76.330450] dev_ioctl+0x1b5/0xcc0 [ 76.333985] sock_do_ioctl+0x1d3/0x3e0 [ 76.337869] ? compat_ifr_data_ioctl+0x170/0x170 [ 76.342616] ? lock_downgrade+0x8e0/0x8e0 [ 76.346758] ? rcu_is_watching+0x85/0x140 [ 76.350906] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 76.356176] sock_ioctl+0x30d/0x680 [ 76.359799] ? dlci_ioctl_set+0x40/0x40 [ 76.363771] ? expand_files.part.8+0x9a0/0x9a0 [ 76.368343] ? kasan_check_write+0x14/0x20 [ 76.372567] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 76.377488] ? wait_for_completion+0x870/0x870 [ 76.382076] ? dlci_ioctl_set+0x40/0x40 [ 76.386043] do_vfs_ioctl+0x1cf/0x1650 [ 76.389928] ? ioctl_preallocate+0x2e0/0x2e0 [ 76.394328] ? fget_raw+0x20/0x20 [ 76.397785] ? __sb_end_write+0xac/0xe0 [ 76.401767] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 76.407292] ? fput+0x130/0x1a0 [ 76.410563] ? ksys_write+0x1a6/0x250 [ 76.414356] ? security_file_ioctl+0x94/0xc0 [ 76.418758] ksys_ioctl+0xa9/0xd0 [ 76.422205] SyS_ioctl+0x24/0x30 [ 76.425559] ? ksys_ioctl+0xd0/0xd0 [ 76.429176] do_syscall_64+0x29e/0x9d0 [ 76.433054] ? vmalloc_sync_all+0x30/0x30 [ 76.437190] ? _raw_spin_unlock_irq+0x27/0x70 [ 76.441674] ? finish_task_switch+0x1ca/0x810 [ 76.446159] ? syscall_return_slowpath+0x5c0/0x5c0 [ 76.451080] ? syscall_return_slowpath+0x30f/0x5c0 [ 76.456006] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 76.461368] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 76.466206] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 76.471394] RIP: 0033:0x455319 [ 76.474569] RSP: 002b:00007fe922755c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.482267] RAX: ffffffffffffffda RBX: 00007fe9227566d4 RCX: 0000000000455319 [ 76.489524] RDX: 0000000020000000 RSI: 00000000000089a2 RDI: 0000000000000013 [ 76.496781] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 76.504054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 76.511312] R13: 000000000000036a R14: 00000000006f8290 R15: 0000000000000006 [ 76.519450] Dumping ftrace buffer: [ 76.523187] (ftrace buffer empty) [ 76.526881] Kernel Offset: disabled [ 76.530499] Rebooting in 86400 seconds..