[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 19.197290] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 22.908509] random: sshd: uninitialized urandom read (32 bytes read) [ 23.303597] random: sshd: uninitialized urandom read (32 bytes read) [ 24.159759] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.33' (ECDSA) to the list of known hosts. [ 29.600620] random: sshd: uninitialized urandom read (32 bytes read) 2018/05/18 20:49:30 fuzzer started 2018/05/18 20:49:31 dialing manager at 10.128.0.26:44209 [ 57.641820] can: request_module (can-proto-0) failed. [ 57.651056] can: request_module (can-proto-0) failed. 2018/05/18 20:50:00 kcov=true, comps=true 2018/05/18 20:50:06 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x7, &(0x7f00000005c0), 0x0) 2018/05/18 20:50:06 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0xfeffffff, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 2018/05/18 20:50:06 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="f8bf88df5b1b", @remote={0xac, 0x14, 0x14, 0xbb}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @rand_addr=0xac1414bb}}}}, &(0x7f0000000100)) 2018/05/18 20:50:06 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000000100), 0x0, 0x0) 2018/05/18 20:50:06 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) bind(r0, &(0x7f0000d01ff0)=ANY=[], 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") close(r0) 2018/05/18 20:50:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00004f0000), 0x1) bind$netlink(r0, &(0x7f000098eff4)={0x10}, 0xc) 2018/05/18 20:50:06 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x4000) 2018/05/18 20:50:06 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00009db000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000200)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40bc5311, &(0x7f0000000140)) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) [ 65.135129] IPVS: ftp: loaded support on port[0] = 21 [ 65.166707] IPVS: ftp: loaded support on port[0] = 21 [ 65.180144] IPVS: ftp: loaded support on port[0] = 21 [ 65.194593] IPVS: ftp: loaded support on port[0] = 21 [ 65.202784] IPVS: ftp: loaded support on port[0] = 21 [ 65.241122] IPVS: ftp: loaded support on port[0] = 21 [ 65.265120] IPVS: ftp: loaded support on port[0] = 21 [ 65.286431] IPVS: ftp: loaded support on port[0] = 21 [ 67.330480] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.337072] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.370541] device bridge_slave_0 entered promiscuous mode [ 67.386892] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.393286] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.404565] device bridge_slave_0 entered promiscuous mode [ 67.420313] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.426716] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.438676] device bridge_slave_0 entered promiscuous mode [ 67.450875] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.457299] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.466943] device bridge_slave_0 entered promiscuous mode [ 67.476260] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.482629] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.491590] device bridge_slave_0 entered promiscuous mode [ 67.498672] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.505076] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.523480] device bridge_slave_0 entered promiscuous mode [ 67.536229] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.542606] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.550262] device bridge_slave_1 entered promiscuous mode [ 67.558972] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.565387] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.572967] device bridge_slave_0 entered promiscuous mode [ 67.580719] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.587175] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.603070] device bridge_slave_0 entered promiscuous mode [ 67.615120] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.621513] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.634057] device bridge_slave_1 entered promiscuous mode [ 67.641386] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.647809] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.655887] device bridge_slave_1 entered promiscuous mode [ 67.664265] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.670661] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.679236] device bridge_slave_1 entered promiscuous mode [ 67.687751] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.694136] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.704502] device bridge_slave_1 entered promiscuous mode [ 67.713609] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 67.722999] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.729398] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.743419] device bridge_slave_1 entered promiscuous mode [ 67.752278] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.758684] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.772236] device bridge_slave_1 entered promiscuous mode [ 67.782287] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 67.789637] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.796036] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.814204] device bridge_slave_1 entered promiscuous mode [ 67.829496] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 67.837901] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 67.846486] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 67.853703] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 67.863929] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 67.872200] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 67.937073] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 67.946622] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 67.955510] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 67.964155] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 67.992752] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 68.003628] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 68.057739] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 68.107735] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 68.316130] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 68.331740] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 68.361846] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 68.399750] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 68.410537] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 68.427055] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 68.464526] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 68.479979] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 68.490271] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 68.503580] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 68.523613] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 68.534742] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 68.553407] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 68.633866] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 68.650362] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 68.698883] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 68.785270] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 68.792269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.831409] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 68.838303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.854233] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 68.862665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.898867] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 68.915492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.934787] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 68.943621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.980652] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 68.988769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.068649] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 69.075655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.145331] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 69.158125] team0: Port device team_slave_0 added [ 69.172200] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 69.188861] team0: Port device team_slave_0 added [ 69.197874] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 69.210060] team0: Port device team_slave_0 added [ 69.217745] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 69.225612] team0: Port device team_slave_0 added [ 69.248869] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 69.259261] team0: Port device team_slave_0 added [ 69.277716] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 69.286862] team0: Port device team_slave_1 added [ 69.308558] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 69.332346] team0: Port device team_slave_1 added [ 69.354332] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 69.363115] team0: Port device team_slave_1 added [ 69.377889] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 69.392749] team0: Port device team_slave_0 added [ 69.407313] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 69.416458] team0: Port device team_slave_1 added [ 69.425501] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 69.442574] team0: Port device team_slave_0 added [ 69.455351] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 69.462712] team0: Port device team_slave_1 added [ 69.483510] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 69.499576] team0: Port device team_slave_1 added [ 69.516805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.537959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.558702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.571467] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 69.580127] team0: Port device team_slave_0 added [ 69.602209] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 69.617663] team0: Port device team_slave_1 added [ 69.646807] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.662661] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.679625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.687735] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.699576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.711132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.722622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.741160] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 69.750731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.762572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.782412] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 69.799284] team0: Port device team_slave_1 added [ 69.805531] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 69.818359] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 69.826931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.848893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.875410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.892728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.908283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.915716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.923662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.931644] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 69.940874] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 69.950493] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 69.960802] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 69.974830] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 69.982360] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 69.989466] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 69.996635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.009711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.049818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.076483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.084669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.092529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.100331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.108056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.115723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.123529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.131280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.138840] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.146381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.153930] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.162922] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 70.170450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.178637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.189906] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 70.198885] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 70.212265] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 70.219789] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.241601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.269292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.282635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.297453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.305286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.313234] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 70.320379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.328711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.338298] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 70.354729] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 70.384326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.422956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.458205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.480291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.494712] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 70.510302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.523845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.546588] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 70.553988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.581628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.545079] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.551638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.558633] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.565067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.588917] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 71.601148] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.607522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.614177] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.620559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.632913] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 71.643949] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.650384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.657008] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.663404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.701790] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 71.713169] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.719574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.726225] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.732603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.745000] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 71.760595] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.766986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.773662] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.780066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.803126] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 71.840732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.856473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.883468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.905196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.917530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.951297] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.957712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.964368] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.970749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.005684] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 72.121552] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.127978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.134606] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.140956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.151281] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 72.161869] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.168236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.174838] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.181189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.188723] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 72.864349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.881737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.910497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.899893] random: crng init done [ 76.632469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.685978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.705160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.842407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.862980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.997709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.099058] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 77.140414] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 77.157856] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 77.259526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.282255] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 77.415612] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 77.430120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.447895] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 77.539779] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.546162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.560920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.590542] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.596773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.606636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.641056] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.647597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.685687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.730204] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 77.824880] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.831190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.839512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.919976] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.926407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.937207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.979551] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 78.002929] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 78.009113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.017775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.091677] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.109180] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.127747] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.260622] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.282364] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 78.292138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.308851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.385418] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 78.392075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.404526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.507928] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.533168] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.845240] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.875073] 8021q: adding VLAN 0 to HW filter on device team0 2018/05/18 20:50:22 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="f8bf88df5b1b", @remote={0xac, 0x14, 0x14, 0xbb}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @rand_addr=0xac1414bb}}}}, &(0x7f0000000100)) 2018/05/18 20:50:22 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) bind(r0, &(0x7f0000d01ff0)=ANY=[], 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") close(r0) 2018/05/18 20:50:22 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="f8bf88df5b1b", @remote={0xac, 0x14, 0x14, 0xbb}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @rand_addr=0xac1414bb}}}}, &(0x7f0000000100)) 2018/05/18 20:50:22 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) bind(r0, &(0x7f0000d01ff0)=ANY=[], 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") close(r0) 2018/05/18 20:50:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00004f0000), 0x1) bind$netlink(r0, &(0x7f000098eff4)={0x10}, 0xc) 2018/05/18 20:50:22 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="f8bf88df5b1b", @remote={0xac, 0x14, 0x14, 0xbb}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @rand_addr=0xac1414bb}}}}, &(0x7f0000000100)) 2018/05/18 20:50:22 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) bind(r0, &(0x7f0000d01ff0)=ANY=[], 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") close(r0) 2018/05/18 20:50:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00004f0000), 0x1) bind$netlink(r0, &(0x7f000098eff4)={0x10}, 0xc) 2018/05/18 20:50:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00004f0000), 0x1) bind$netlink(r0, &(0x7f000098eff4)={0x10}, 0xc) 2018/05/18 20:50:23 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x7, &(0x7f00000005c0), 0x0) 2018/05/18 20:50:23 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket(0xa, 0x200000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000110007031dfffd946fa2830020200a0008000000001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 2018/05/18 20:50:23 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00004f0000), 0x1) bind$netlink(r0, &(0x7f000098eff4)={0x10}, 0xc) 2018/05/18 20:50:23 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0xfeffffff, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 2018/05/18 20:50:23 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00009db000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000200)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40bc5311, &(0x7f0000000140)) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/18 20:50:23 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000000100), 0x0, 0x0) 2018/05/18 20:50:23 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x4000) 2018/05/18 20:50:23 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0xfeffffff, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) [ 82.027792] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. 2018/05/18 20:50:23 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000000100), 0x0, 0x0) 2018/05/18 20:50:23 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x4000) 2018/05/18 20:50:23 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00004f0000), 0x1) bind$netlink(r0, &(0x7f000098eff4)={0x10}, 0xc) 2018/05/18 20:50:24 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00004f0000), 0x1) bind$netlink(r0, &(0x7f000098eff4)={0x10}, 0xc) 2018/05/18 20:50:24 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x7, &(0x7f00000005c0), 0x0) 2018/05/18 20:50:24 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket(0xa, 0x200000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000110007031dfffd946fa2830020200a0008000000001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 2018/05/18 20:50:24 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000000100), 0x0, 0x0) 2018/05/18 20:50:24 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0xfeffffff, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 2018/05/18 20:50:24 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x4000) 2018/05/18 20:50:24 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00009db000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000200)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40bc5311, &(0x7f0000000140)) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/18 20:50:24 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0xd4d, 0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) 2018/05/18 20:50:24 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000), 0x10) [ 83.010536] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. 2018/05/18 20:50:25 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create(0x102010002) flock(r1, 0x5) dup3(r0, r1, 0x0) 2018/05/18 20:50:25 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="6d616e676c65000000004fd04073b781f74bb9a5fda9092572f3000000000000000000000000000000000000000000070000180100001801000040050000c0030000c0030000300600003006000030060000300600003006"], 0x1) 2018/05/18 20:50:25 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000440)={0x1f, 0x0, {}, 0x1, 0x8001}, 0xe) 2018/05/18 20:50:25 executing program 2: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d559166593ae164c990a0", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001e40)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002900)="9b136e5e622d27259eaa42c30cec52c1a19606e1f5c1539ddf859333a21375c023fbd1904d828e0d2dda560a5526699661371f9e2fcff7ac", 0x38}], 0x1, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x7}], 0x18}], 0x1, 0x0) readv(r2, &(0x7f0000000680)=[{&(0x7f0000000280)=""/129, 0x81}], 0x1) 2018/05/18 20:50:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x7, &(0x7f00000005c0), 0x0) 2018/05/18 20:50:25 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket(0xa, 0x200000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000110007031dfffd946fa2830020200a0008000000001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 2018/05/18 20:50:25 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00009db000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000200)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40bc5311, &(0x7f0000000140)) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/18 20:50:25 executing program 1: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000000)={'tunl0\x00H\x00', @ifru_mtu=0x1}) 2018/05/18 20:50:25 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x6, &(0x7f0000000040), &(0x7f0000013000)=0x221) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) [ 83.950489] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. [ 83.967602] IPVS: ftp: loaded support on port[0] = 21 2018/05/18 20:50:25 executing program 3: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000140)=""/117, 0x75) 2018/05/18 20:50:25 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) 2018/05/18 20:50:25 executing program 4: prctl$intptr(0x1d, 0xfffffffffffff2fd) clock_nanosleep(0x0, 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000040)) 2018/05/18 20:50:25 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket(0xa, 0x200000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000110007031dfffd946fa2830020200a0008000000001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 2018/05/18 20:50:25 executing program 0: r0 = socket(0x10, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) 2018/05/18 20:50:25 executing program 3: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000140)=""/117, 0x75) [ 84.159394] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. [ 84.235704] : renamed from tunl0 [ 84.264805] IPVS: ftp: loaded support on port[0] = 21 2018/05/18 20:50:26 executing program 4: prctl$intptr(0x1d, 0xfffffffffffff2fd) clock_nanosleep(0x0, 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000040)) 2018/05/18 20:50:26 executing program 0: r0 = socket(0x10, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) 2018/05/18 20:50:26 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) 2018/05/18 20:50:26 executing program 3: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000140)=""/117, 0x75) 2018/05/18 20:50:26 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000140)=0x3, 0xaa) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d5affc), 0x4) write(r0, &(0x7f00000002c0)="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", 0x6dc) write(r0, &(0x7f000069efac)="e26d4afed4d3467b7ee66e9ebb4039955b1d97a427cc701c5e5e6447b6510bff58c6313283eae8186bf1c22f39347ebb869277e809a7002f38611d02a6e3d4e4f6b8923c59ff9438d8c3d353b76131b90e044f80", 0x54) r1 = dup(r0) write$sndseq(r1, &(0x7f0000000b80)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @result}], 0x30) write$eventfd(r1, &(0x7f0000000280), 0xff93) recvfrom(r0, &(0x7f0000000180)=""/226, 0xfffffffffffffff6, 0x0, 0x0, 0xfffffffffffffcd1) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000d40)=0xb0) 2018/05/18 20:50:26 executing program 1: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000000)={'tunl0\x00H\x00', @ifru_mtu=0x1}) 2018/05/18 20:50:26 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$int_in(r0, 0x5452, &(0x7f0000affff8)=0x7fffffff) dup2(r0, r2) 2018/05/18 20:50:26 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000000)={'tunl0\x00H\x00', @ifru_mtu=0x1}) 2018/05/18 20:50:26 executing program 0: r0 = socket(0x10, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) [ 84.942725] IPVS: ftp: loaded support on port[0] = 21 2018/05/18 20:50:26 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) 2018/05/18 20:50:26 executing program 4: prctl$intptr(0x1d, 0xfffffffffffff2fd) clock_nanosleep(0x0, 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000040)) 2018/05/18 20:50:26 executing program 3: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000140)=""/117, 0x75) [ 85.013650] IPVS: ftp: loaded support on port[0] = 21 2018/05/18 20:50:26 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) exit(0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) umount2(&(0x7f00000000c0)='./file0\x00', 0x3) 2018/05/18 20:50:26 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) 2018/05/18 20:50:26 executing program 4: prctl$intptr(0x1d, 0xfffffffffffff2fd) clock_nanosleep(0x0, 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000040)) 2018/05/18 20:50:26 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0x303) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f0000000240)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "f5261e68096d5c0229a3b790564806b2d199ab53bb15d0f456464f127c998493b19e80"}, 0x2e) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000400000000000000000000000000000"], 0x2a) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 2018/05/18 20:50:26 executing program 0: r0 = socket(0x10, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) [ 85.268738] : renamed from tunl0 2018/05/18 20:50:26 executing program 4: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000f00)='#', 0x1, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x400) keyctl$revoke(0x3, r0) 2018/05/18 20:50:26 executing program 0: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x1002, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/231, 0xe7}], 0x1) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 2018/05/18 20:50:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="016217a733830000000000000000000002ff00af5e"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/18 20:50:26 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='clear_refs\x00') write$cgroup_pid(r1, &(0x7f0000000000)={[0x33]}, 0x1) [ 85.326650] : renamed from tunl0 2018/05/18 20:50:26 executing program 1: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000000)={'tunl0\x00H\x00', @ifru_mtu=0x1}) [ 85.462206] IPVS: ftp: loaded support on port[0] = 21 [ 85.635140] : renamed from tunl0 2018/05/18 20:50:27 executing program 3: r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) truncate(&(0x7f0000000340)='./file0\x00', 0x0) write$cgroup_pid(r0, &(0x7f0000000040)={[0x0]}, 0xb39) 2018/05/18 20:50:27 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000000)={'tunl0\x00H\x00', @ifru_mtu=0x1}) 2018/05/18 20:50:27 executing program 4: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000f00)='#', 0x1, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x400) keyctl$revoke(0x3, r0) 2018/05/18 20:50:27 executing program 0: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x1002, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/231, 0xe7}], 0x1) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 2018/05/18 20:50:27 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000380)='ceph\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000300)='(', 0x1, 0xfffffffffffffffd) 2018/05/18 20:50:27 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$int_in(r0, 0x5452, &(0x7f0000affff8)=0x7fffffff) dup2(r0, r2) [ 85.932280] IPVS: ftp: loaded support on port[0] = 21 [ 86.129188] : renamed from tunl0 2018/05/18 20:50:28 executing program 5: mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000008b000/0x3000)=nil, 0xfffffffffffffd1a, 0x4000, 0x0, &(0x7f00000da000/0x4000)=nil) 2018/05/18 20:50:28 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$int_in(r0, 0x5452, &(0x7f0000affff8)=0x7fffffff) dup2(r0, r2) 2018/05/18 20:50:28 executing program 1: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000000)={'tunl0\x00H\x00', @ifru_mtu=0x1}) 2018/05/18 20:50:28 executing program 4: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000f00)='#', 0x1, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x400) keyctl$revoke(0x3, r0) 2018/05/18 20:50:28 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000380)='ceph\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000300)='(', 0x1, 0xfffffffffffffffd) 2018/05/18 20:50:28 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$int_in(r0, 0x5452, &(0x7f0000affff8)=0x7fffffff) dup2(r0, r2) 2018/05/18 20:50:28 executing program 0: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x1002, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/231, 0xe7}], 0x1) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 2018/05/18 20:50:28 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000000)={'tunl0\x00H\x00', @ifru_mtu=0x1}) 2018/05/18 20:50:28 executing program 4: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000f00)='#', 0x1, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x400) keyctl$revoke(0x3, r0) [ 86.894653] IPVS: ftp: loaded support on port[0] = 21 [ 86.901690] IPVS: ftp: loaded support on port[0] = 21 2018/05/18 20:50:28 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000380)='ceph\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000300)='(', 0x1, 0xfffffffffffffffd) 2018/05/18 20:50:28 executing program 0: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x1002, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/231, 0xe7}], 0x1) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 2018/05/18 20:50:28 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000004100)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000040c0)={0xffffffff}, 0x111}}, 0x20) write$rdma_cm(r0, &(0x7f0000000080)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @local={0xfe, 0x80, [], 0xaa}, 0x1ff}, {0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000f40)=@listen={0x7, 0x8, 0xfa00, {r1}}, 0x10) 2018/05/18 20:50:28 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000380)='ceph\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000300)='(', 0x1, 0xfffffffffffffffd) 2018/05/18 20:50:28 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) futimesat(0xffffffffffffffff, &(0x7f0000000080)='/\x00', &(0x7f00000000c0)={{0x77359400}}) 2018/05/18 20:50:28 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) close(r0) [ 87.275807] : renamed from tunl0 [ 87.297653] : renamed from tunl0 2018/05/18 20:50:28 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000dcbff1)='/dev/snd/timer\x00', 0x0, 0x0) readv(r0, &(0x7f00007b7fe0)=[{&(0x7f0000604000)=""/8, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000073000)=0x1) r1 = getpgrp(0x0) r2 = syz_open_dev$usbmon(&(0x7f0000a63ff3)='/dev/usbmon#\x00', 0x0, 0x0) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r4, 0x8, r1) r6 = socket(0xa, 0x2, 0x0) ioctl(r6, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") read$eventfd(r2, &(0x7f0000e5aff8), 0xfffffc7a) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b28fe0)=[{r5}], 0x1, 0xfffffffffffffff8) dup3(r4, r5, 0x0) tkill(r3, 0x16) [ 88.150682] device bridge_slave_1 left promiscuous mode [ 88.156565] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.172727] device bridge_slave_0 left promiscuous mode [ 88.178274] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.225381] team0 (unregistering): Port device team_slave_1 removed [ 88.236560] team0 (unregistering): Port device team_slave_0 removed [ 88.246632] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 88.265226] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 88.291254] bond0 (unregistering): Released all slaves [ 88.987343] IPVS: ftp: loaded support on port[0] = 21 [ 89.503116] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.509535] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.516646] device bridge_slave_0 entered promiscuous mode [ 89.542603] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.548990] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.556063] device bridge_slave_1 entered promiscuous mode [ 89.579500] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 89.602097] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 89.662800] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 89.687481] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 89.782129] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 89.789335] team0: Port device team_slave_0 added [ 89.810351] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 89.817418] team0: Port device team_slave_1 added [ 89.839318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.862425] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.885681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.909348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.107821] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.114211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.120834] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.127183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.838155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.908320] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 90.979087] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 90.985326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.992917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.059312] 8021q: adding VLAN 0 to HW filter on device team0 2018/05/18 20:50:32 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bpq0\x00', 0x103}) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x400454de, &(0x7f0000000000)) 2018/05/18 20:50:32 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x80000000, 0x80) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x1ff) flistxattr(r1, &(0x7f00000000c0)=""/62, 0x3e) openat$cgroup_int(r0, &(0x7f0000000200)="6370757365742e73636865645f72656c61785f646f6d61696a5f6c6576656c00e5b0675369be80304b8f3244dd036afff990572cd5061d5b3d196d2fed459f0ca26b85f0670b6774517dc1cd23fb8477dc8162c27a00bcfbb96625776d1d7383cc76b32c8fd869d0735451c2423ff6c8808dff73126ebac02dc3a35b7cfa1520e3c194f95b6f7d2820ac3be5c72f6b4d29567fe9e02e59565a0936d9b25bd3533ccbceb154fc", 0x2, 0x0) 2018/05/18 20:50:32 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0xff) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x1}, 0x1c) 2018/05/18 20:50:32 executing program 6: r0 = timerfd_create(0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") timerfd_settime(r0, 0x0, &(0x7f0000000100)={{0x5}, {0x0, 0x5f6c}}, &(0x7f000000ffe0)) timerfd_gettime(r0, &(0x7f0000000000)) 2018/05/18 20:50:32 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$int_in(r0, 0x5452, &(0x7f0000affff8)=0x7fffffff) dup2(r0, r2) 2018/05/18 20:50:32 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$int_in(r0, 0x5452, &(0x7f0000affff8)=0x7fffffff) dup2(r0, r2) 2018/05/18 20:50:32 executing program 2: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}) 2018/05/18 20:50:32 executing program 0: mremap(&(0x7f000053f000/0x1000)=nil, 0x7fffdfac3000, 0x1000, 0x0, &(0x7f000053c000/0x1000)=nil) 2018/05/18 20:50:32 executing program 0: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f000081e000)={0x0, 0xfffffffffffffffd}, 0x8) 2018/05/18 20:50:32 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00ffffffff007910"], &(0x7f0000000640)="47504c00bc3047629662c71f3f5f26c0b48bec3e7ba6eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='GPL\x00', 0x80000001, 0x336, &(0x7f0000000300)=""/187}, 0x48) 2018/05/18 20:50:32 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0xff) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x1}, 0x1c) 2018/05/18 20:50:32 executing program 6: r0 = timerfd_create(0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") timerfd_settime(r0, 0x0, &(0x7f0000000100)={{0x5}, {0x0, 0x5f6c}}, &(0x7f000000ffe0)) timerfd_gettime(r0, &(0x7f0000000000)) 2018/05/18 20:50:32 executing program 2: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}) 2018/05/18 20:50:33 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$int_in(r0, 0x5452, &(0x7f0000affff8)=0x7fffffff) dup2(r0, r2) 2018/05/18 20:50:33 executing program 6: r0 = timerfd_create(0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") timerfd_settime(r0, 0x0, &(0x7f0000000100)={{0x5}, {0x0, 0x5f6c}}, &(0x7f000000ffe0)) timerfd_gettime(r0, &(0x7f0000000000)) 2018/05/18 20:50:33 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") clone(0x0, &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000040), &(0x7f0000000240)) flistxattr(r0, &(0x7f0000000280)=""/4096, 0x1000) 2018/05/18 20:50:33 executing program 4: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x3, 0x3a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200003c0], 0x0, &(0x7f0000000100), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'dummy0\x00', 'bcsh0\x00', 'sit0\x00', 'bridge_slave_0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x70, 0xc0, 0x110}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x9, 'syz1\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x1ff, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{{{0xf, 0x0, 0x0, 'eql\x00', 'team_slave_0\x00', 'syzkaller0\x00', 'teql0\x00', @random="d4be885e0ef2", [], @empty, [], 0x70, 0xa8, 0xd8}, [@common=@dnat={'dnat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xffffffffffffffff}}}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}, {{{0x3, 0x10, 0x9300, 'bond_slave_1\x00', 'ifb0\x00', 'teql0\x00', 'bond_slave_0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2}, [], 0xe0, 0xe0, 0x128, [@stp={'stp\x00', 0x48, {{0x0, {0x4, 0x0, 0x0, @random="e9e304a0a103", [0x0, 0x0, 0xff], 0x0, 0x947e, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x4e20}}}}]}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}}]}]}, 0x418) 2018/05/18 20:50:33 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x8000000001009375, &(0x7f0000006f80)="010000000000001018") 2018/05/18 20:50:33 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0xff) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x1}, 0x1c) 2018/05/18 20:50:33 executing program 2: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}) 2018/05/18 20:50:33 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000140)=0x1) write$tun(r1, &(0x7f0000000100)={@void, @val, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @multicast2=0xe0000002}, @udp={0x0, 0x0, 0x8}}}, 0x26) 2018/05/18 20:50:33 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0xff) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x1}, 0x1c) 2018/05/18 20:50:33 executing program 6: r0 = timerfd_create(0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") timerfd_settime(r0, 0x0, &(0x7f0000000100)={{0x5}, {0x0, 0x5f6c}}, &(0x7f000000ffe0)) timerfd_gettime(r0, &(0x7f0000000000)) [ 92.410201] autofs4:pid:7236:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.268435456), cmd(0x01009375) [ 92.423330] autofs4:pid:7236:validate_dev_ioctl: invalid device control module version supplied for cmd(0x01009375) [ 92.448898] kernel msg: ebtables bug: please report to author: NOPROTO & 802_3 not allowed 2018/05/18 20:50:34 executing program 2: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}) 2018/05/18 20:50:34 executing program 4: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x80140912, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000040)}) 2018/05/18 20:50:34 executing program 7: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) 2018/05/18 20:50:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@empty={[0x3]}}, {@in=@loopback=0x7f000001, 0x0, 0x6c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/05/18 20:50:34 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180)={0x1d}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d}, 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d}, 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x21, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}, 0x1}, 0x0) 2018/05/18 20:50:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000040)="c06300000f20c06635100000000f22c03e3e8035f90f09c007000fc71cda23650f01c3bad004b035ee0f0f64c6b0", 0x2e}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/18 20:50:34 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") unshare(0x2000400) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000000)) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1000000000000205, 0x0) 2018/05/18 20:50:34 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x20) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/05/18 20:50:34 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0x101}, 0x2c) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f00000001c0)=""/84}, 0x8) 2018/05/18 20:50:34 executing program 2: r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, r0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000448000), &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2400, 0x0) 2018/05/18 20:50:34 executing program 7: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir}) 2018/05/18 20:50:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@empty={[0x3]}}, {@in=@loopback=0x7f000001, 0x0, 0x6c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/05/18 20:50:34 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x100000001) r1 = socket(0x2, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmmsg(r0, &(0x7f00000001c0)=[{{&(0x7f0000000200)=@nl=@unspec, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000400)}}], 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000340)=0x9f89, 0x4) recvfrom(r0, &(0x7f0000000000)=""/70, 0x46, 0x0, &(0x7f00000000c0)=@rc={0x1f}, 0x6f3000) 2018/05/18 20:50:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x11) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000100)) 2018/05/18 20:50:34 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_emit_ethernet(0x140, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x10a, 0xffffff3c, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 2018/05/18 20:50:34 executing program 7: socketpair$inet(0x1e, 0x802, 0x0, &(0x7f0000000040)={0x0}) sendmsg$key(r0, &(0x7f0000f22000)={0x0, 0x0, &(0x7f0000f22000)={&(0x7f00001d7000)={0x1e, 0x0, 0x401, 0x0, 0x1}, 0x2ac4}, 0x1}, 0x0) 2018/05/18 20:50:34 executing program 1: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000002440)={@void, @val, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @multicast1=0xe0000001}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}, 0x26) 2018/05/18 20:50:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@empty={[0x3]}}, {@in=@loopback=0x7f000001, 0x0, 0x6c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/05/18 20:50:34 executing program 5: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x40000000008912, &(0x7f00000000c0)="c62b262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f0000000540)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000380)}) 2018/05/18 20:50:34 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@dstopts, 0x8) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=""/101, &(0x7f0000000280)=0x65) 2018/05/18 20:50:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@empty={[0x3]}}, {@in=@loopback=0x7f000001, 0x0, 0x6c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/05/18 20:50:34 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x5, 0x4) write(r0, &(0x7f0000000300), 0x0) [ 93.716386] binder: 7326:7329 BC_INCREFS_DONE node 1 has no pending increfs request [ 93.773158] binder: 7326:7329 got transaction to context manager from process owning it [ 93.781539] binder: 7326:7329 transaction failed 29201/-22, size 0-0 line 2847 [ 93.884343] binder: BINDER_SET_CONTEXT_MGR already set [ 93.909394] binder: 7326:7353 BC_INCREFS_DONE u0000000000000000 no match [ 93.955514] binder: 7326:7329 ioctl 40046207 0 returned -16 [ 93.976460] binder_alloc: 7326: binder_alloc_buf, no vma [ 93.982292] binder: 7326:7353 transaction failed 29189/-3, size 0-0 line 2971 [ 94.084300] binder: undelivered TRANSACTION_ERROR: 29189 [ 94.096846] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/18 20:50:35 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) r1 = socket(0xa, 0x400000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) write$evdev(r0, &(0x7f0000000080), 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r2, 0x1004000000016) 2018/05/18 20:50:35 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) clone(0x0, &(0x7f0000001900), &(0x7f0000744000), &(0x7f0000001880), &(0x7f0000001900)) 2018/05/18 20:50:35 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1300, &(0x7f0000000000)=0x2, 0x4) 2018/05/18 20:50:35 executing program 1: r0 = eventfd(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') read$eventfd(r0, &(0x7f00000000c0), 0x8) ppoll(&(0x7f0000000240)=[{r0}], 0x1, &(0x7f0000000540)={0x77359400}, &(0x7f0000000580), 0x8) sendfile(r0, r1, &(0x7f0000000000), 0x1000000008) 2018/05/18 20:50:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) writev(r1, &(0x7f0000001680)=[{&(0x7f00000004c0)="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", 0x401}], 0x1) 2018/05/18 20:50:35 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='/exe\x00\x00\x00\x00\x00\x00') fcntl$setstatus(r0, 0x4, 0x46000) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f00000000c0)={0x0, 0x100000000}) preadv(r0, &(0x7f0000000040), 0x10000000000000a6, 0x0) 2018/05/18 20:50:35 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r1, 0x0) 2018/05/18 20:50:35 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000280)=""/97, &(0x7f0000000300)=""/127}) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, &(0x7f0000000380)=""/115, &(0x7f0000000580)=""/156, &(0x7f0000000940)=""/185}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e80)) 2018/05/18 20:50:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)) dup2(r0, r2) dup3(r0, r1, 0x0) [ 94.857561] syz-executor6 (7380) used greatest stack depth: 13944 bytes left 2018/05/18 20:50:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)) dup2(r0, r2) dup3(r0, r1, 0x0) 2018/05/18 20:50:36 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='/exe\x00\x00\x00\x00\x00\x00') fcntl$setstatus(r0, 0x4, 0x46000) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f00000000c0)={0x0, 0x100000000}) preadv(r0, &(0x7f0000000040), 0x10000000000000a6, 0x0) 2018/05/18 20:50:36 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x2, 0x1000000}) 2018/05/18 20:50:36 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000280)=""/97, &(0x7f0000000300)=""/127}) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, &(0x7f0000000380)=""/115, &(0x7f0000000580)=""/156, &(0x7f0000000940)=""/185}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e80)) 2018/05/18 20:50:36 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='/exe\x00\x00\x00\x00\x00\x00') fcntl$setstatus(r0, 0x4, 0x46000) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f00000000c0)={0x0, 0x100000000}) preadv(r0, &(0x7f0000000040), 0x10000000000000a6, 0x0) 2018/05/18 20:50:36 executing program 7: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000280)=""/97, &(0x7f0000000300)=""/127}) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, &(0x7f0000000380)=""/115, &(0x7f0000000580)=""/156, &(0x7f0000000940)=""/185}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e80)) 2018/05/18 20:50:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)) dup2(r0, r2) dup3(r0, r1, 0x0) 2018/05/18 20:50:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_int(r1, 0x0, 0x1, &(0x7f0000000000), 0x4) 2018/05/18 20:50:38 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1c, &(0x7f0000000080), &(0x7f0000000140)=0x1) 2018/05/18 20:50:38 executing program 2: setrlimit(0x6, &(0x7f0000000000)) clone(0x0, &(0x7f0000001340), &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000140)) 2018/05/18 20:50:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x0, 0x1, 0x0, 0x0, @msi={0x7}}]}) 2018/05/18 20:50:38 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000280)=""/97, &(0x7f0000000300)=""/127}) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, &(0x7f0000000380)=""/115, &(0x7f0000000580)=""/156, &(0x7f0000000940)=""/185}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e80)) 2018/05/18 20:50:38 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='/exe\x00\x00\x00\x00\x00\x00') fcntl$setstatus(r0, 0x4, 0x46000) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f00000000c0)={0x0, 0x100000000}) preadv(r0, &(0x7f0000000040), 0x10000000000000a6, 0x0) 2018/05/18 20:50:38 executing program 7: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000280)=""/97, &(0x7f0000000300)=""/127}) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, &(0x7f0000000380)=""/115, &(0x7f0000000580)=""/156, &(0x7f0000000940)=""/185}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e80)) 2018/05/18 20:50:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)) dup2(r0, r2) dup3(r0, r1, 0x0) [ 97.140716] x86/PAT: syz-executor3:7435 map pfn RAM range req write-combining for [mem 0x1be640000-0x1be643fff], got write-back [ 97.158200] x86/PAT: syz-executor3:7437 map pfn RAM range req write-combining for [mem 0x1be640000-0x1be643fff], got write-back 2018/05/18 20:50:38 executing program 7: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000280)=""/97, &(0x7f0000000300)=""/127}) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, &(0x7f0000000380)=""/115, &(0x7f0000000580)=""/156, &(0x7f0000000940)=""/185}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e80)) 2018/05/18 20:50:38 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000280)=""/97, &(0x7f0000000300)=""/127}) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, &(0x7f0000000380)=""/115, &(0x7f0000000580)=""/156, &(0x7f0000000940)=""/185}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e80)) 2018/05/18 20:50:38 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000440)={r0, r1}) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="5f4be9", 0x3}], 0x1, &(0x7f0000000640)}, 0x0) recvmsg$kcm(r2, &(0x7f0000001840)={&(0x7f0000000580)=@ll, 0x80, &(0x7f00000017c0), 0x0, &(0x7f0000001800)=""/14, 0xe}, 0x2060) dup2(0xffffffffffffffff, 0xffffffffffffffff) 2018/05/18 20:50:38 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x3a) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000040)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f00000000c0)=""/70, 0x2e) 2018/05/18 20:50:38 executing program 2: r0 = socket$kcm(0x2, 0x2, 0x88) close(r0) 2018/05/18 20:50:38 executing program 3: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_cmd={0xf}}) 2018/05/18 20:50:38 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ip6gretap0\x00', &(0x7f0000000040)=@ethtool_eeprom={0x43}}) 2018/05/18 20:50:38 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$sock_cred(r0, 0x1, 0x27, &(0x7f0000000100), &(0x7f0000000140)=0xc) 2018/05/18 20:50:38 executing program 3: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000)) mknod(&(0x7f0000000080)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)) r0 = inotify_init1(0x0) r1 = getpid() fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 2018/05/18 20:50:38 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmsg(r2, &(0x7f0000000180)={&(0x7f0000000000)=@ethernet, 0x80, &(0x7f0000000100)=[{&(0x7f0000002040)="ff", 0x1}], 0x1, &(0x7f0000004000)}, 0x0) close(r2) close(r1) 2018/05/18 20:50:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000003c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000340), 0x0, &(0x7f0000000380)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) sendmsg$unix(r1, &(0x7f0000e4ffc8)={&(0x7f0000beb000)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) close(r1) close(r0) 2018/05/18 20:50:38 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0xd90]}) 2018/05/18 20:50:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x487}]}) 2018/05/18 20:50:38 executing program 1: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0xff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80}, 0x800, 0x0, 0xff}, 0x20) 2018/05/18 20:50:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000100), &(0x7f0000000140)) 2018/05/18 20:50:38 executing program 4: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r3 = dup2(r2, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x0, 0x1, 0x0, 0x0, @tick=0xfffffffffffffffd, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000100)={0x12, @time={0x0, 0x989680}}) 2018/05/18 20:50:38 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="c626262c850000012cf66f") bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) recvfrom(r2, &(0x7f00000000c0)=""/36, 0x22, 0x0, &(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @host=0x2}, 0x707000) 2018/05/18 20:50:39 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0xd90]}) 2018/05/18 20:50:39 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000680)="c626262c8523bf012cf66f") bind$alg(r0, &(0x7f000065ffa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="0022f8ff020000000000000000000000", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000006c0)="c888f232ccb87523ec303592fc84f17599fd65116d9a2086934ff21f6be38f89d12f857b7504d44f22708264731f4ac52ccb8d34aca73a9524e13e323c7496edcba8f5121af072ffa356d3a89ee9be739b6ed4aaaa2ed0d094668921681f86f8b172637eb34cc37e248a81f5cd1af5ced4b91c82a67033617d7acddb928a4c121770378dd21c761048584ae6ccd55a8d", 0x90}], 0x1}], 0x1, 0x0) recvfrom$ax25(r2, &(0x7f0000000000)=""/239, 0xef, 0x0, &(0x7f00000001c0)={0x3, {"310601346e6274"}}, 0x6f3000) 2018/05/18 20:50:39 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) mremap(&(0x7f0000509000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000246000/0x3000)=nil) 2018/05/18 20:50:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6}, {@in=@loopback=0x7f000001, 0x0, 0x6c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/05/18 20:50:39 executing program 4: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc) 2018/05/18 20:50:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000015c0)={r2, 0x0, 0x2, r2}) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={r3, 0xfffffffffffffffb, 0x2, r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x0, 0x2, r2}) 2018/05/18 20:50:39 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="d3ab27191a010023560fd9d5e03eba602dff05b82756df62", 0x18) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000002cc0)=""/4096, 0x1000}], 0x1, &(0x7f0000000400)=""/80, 0x50}, 0x0) 2018/05/18 20:50:39 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000004bc0)=[{{&(0x7f00000009c0)=@in6={0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x80, &(0x7f0000000a80), 0x0, &(0x7f0000000ac0)}}], 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x4000000001c, &(0x7f00000001c0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) 2018/05/18 20:50:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6}, {@in=@loopback=0x7f000001, 0x0, 0x6c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/05/18 20:50:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000480)={0x10}, 0xfe67, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x20, 0x1, 0x0, 0x0, {0x9}}, 0x14}, 0x1}, 0x0) 2018/05/18 20:50:39 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xb7) [ 98.503400] irq bypass consumer (token 000000003f70a323) registration fails: -16 2018/05/18 20:50:39 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]}) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) 2018/05/18 20:50:39 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x2003e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2}}}, 0x108) 2018/05/18 20:50:39 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0xd90]}) 2018/05/18 20:50:39 executing program 4: fanotify_init(0x6a, 0x0) 2018/05/18 20:50:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6}, {@in=@loopback=0x7f000001, 0x0, 0x6c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/05/18 20:50:39 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45965a5c4f599c89346d0f0000000030e1290fc622c476120f3c58"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x20d, &(0x7f0000000300)=""/187}, 0x48) 2018/05/18 20:50:40 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]}) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) 2018/05/18 20:50:40 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r1, 0x227b, 0x707000) 2018/05/18 20:50:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6}, {@in=@loopback=0x7f000001, 0x0, 0x6c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/05/18 20:50:40 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45965a5c4f599c89346d0f0000000030e1290fc622c476120f3c58"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x20d, &(0x7f0000000300)=""/187}, 0x48) 2018/05/18 20:50:40 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x2003e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2}}}, 0x108) 2018/05/18 20:50:40 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0xd90]}) 2018/05/18 20:50:40 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) mremap(&(0x7f0000509000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000246000/0x3000)=nil) 2018/05/18 20:50:40 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]}) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) 2018/05/18 20:50:40 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x2003e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2}}}, 0x108) 2018/05/18 20:50:40 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45965a5c4f599c89346d0f0000000030e1290fc622c476120f3c58"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x20d, &(0x7f0000000300)=""/187}, 0x48) 2018/05/18 20:50:40 executing program 5: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) poll(&(0x7f0000000000), 0x0, 0x8e70) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c46000000000000000089a800000000000000000000000000000000000040001a74cf4a0000000000000000000000000000000038000000000000000000efffdfffffffffff0000000000000000000000000000000000000000000000000000000000000000005f0000000000000000000000000000c6898b45d9d0e67bfb32caba17515beb5f45ee8d66a339a4f6997507dbecb5426ed32cec507bd159678ee0d1891d726480b6372f8e168af5fda5cee850bff483b24988a8ff4bcec18c8ad85dd5ec65a32e3df6971312ff5e4cee813e8b207fcd3b3c8d59c1a2797b1e073b3c217ffe4509a07f34b615c31818dcfd1cf2e99acef3db53bdf326a2418797918f98f297c525451fe69f883844874bc3c3e6d2a29ab51ecc5a3b3b889bae2484c88b3875e9c326632b5f5fb1ad5d634207e07ad2764c19638db3efe00842066e97b31d4eaa6fbf77492a0204f160fd21862b2e09f52f8d52366346f94d29b5716cbd5e76f7b433ab860e59e2f88ecf0e7484f4361c0b46ed3cb5f6c68dbba270"], 0x183) fsync(r0) 2018/05/18 20:50:40 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r1, 0x227b, 0x707000) 2018/05/18 20:50:40 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000604ffc)) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) dup2(r0, r2) 2018/05/18 20:50:40 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]}) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) 2018/05/18 20:50:40 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]}) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) 2018/05/18 20:50:40 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x2003e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2}}}, 0x108) 2018/05/18 20:50:40 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r1, 0x227b, 0x707000) 2018/05/18 20:50:41 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl(r0, 0x6, &(0x7f0000000000)) socket$inet(0x2, 0x0, 0x40000000000000) syz_open_dev$midi(&(0x7f0000000440)='/dev/midi#\x00', 0x1, 0x0) setns(0xffffffffffffffff, 0x0) 2018/05/18 20:50:41 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]}) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) 2018/05/18 20:50:41 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]}) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) 2018/05/18 20:50:41 executing program 3: unshare(0x400) r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffffffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}, &(0x7f0000000040)=0x100) 2018/05/18 20:50:41 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r1, 0x227b, 0x707000) 2018/05/18 20:50:41 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x9, 0x4) sendto$inet(r0, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0xfffffffffffffe58, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/81, 0x51}, 0x40002102) 2018/05/18 20:50:41 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45965a5c4f599c89346d0f0000000030e1290fc622c476120f3c58"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x20d, &(0x7f0000000300)=""/187}, 0x48) 2018/05/18 20:50:41 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) mremap(&(0x7f0000509000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000246000/0x3000)=nil) 2018/05/18 20:50:41 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKRAGET(r0, 0x127d, &(0x7f0000000040)) 2018/05/18 20:50:42 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in6}, {@in=@loopback=0x7f000001, 0x0, 0x6c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0x2}, [@etimer_thresh={0x8, 0xc}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x140}, 0x1}, 0x0) 2018/05/18 20:50:42 executing program 5: r0 = gettid() r1 = socket(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="4626262c8523bf012cf66f") process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) [ 100.728894] program syz-executor6 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.764972] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 2018/05/18 20:50:42 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40045402, &(0x7f00000001c0)) 2018/05/18 20:50:42 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)=""/250) [ 100.876335] program syz-executor6 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.911619] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 2018/05/18 20:50:42 executing program 0: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0x2e) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) creat(&(0x7f0000000140)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 2018/05/18 20:50:42 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x1, &(0x7f0000000300), 0x0) [ 100.923979] snd_dummy snd_dummy.0: control 76:0:0:Î:0 is already present [ 101.007498] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app 2018/05/18 20:50:43 executing program 4: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000340)=@req3={0x0, 0x2d8, 0x1ff}, 0x1c) r2 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) r4 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f0000000380)="7f", 0x1, r3) r5 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r2) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r5, r5, r4}, &(0x7f0000000280)=""/132, 0x84, 0x0) 2018/05/18 20:50:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0xfffffffffffffffd}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="266464f2f0806ead000f08c744240007000000c744240200980000c7442406000000000f011c24d0f0c4e1fc5a685866baa000ed66baf80cb8b14cb385ef66bafc0cb033ee0f20c035040000000f22c064f4c4e1781726", 0x57}], 0x1, 0x63, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/18 20:50:43 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl(r0, 0x6, &(0x7f0000000000)) socket$inet(0x2, 0x0, 0x40000000000000) syz_open_dev$midi(&(0x7f0000000440)='/dev/midi#\x00', 0x1, 0x0) setns(0xffffffffffffffff, 0x0) 2018/05/18 20:50:43 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)=""/250) 2018/05/18 20:50:43 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0x20000ffff, 0xffffffffffffffff}) 2018/05/18 20:50:43 executing program 5: r0 = gettid() r1 = socket(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="4626262c8523bf012cf66f") process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 2018/05/18 20:50:43 executing program 0: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0x2e) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) creat(&(0x7f0000000140)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 2018/05/18 20:50:43 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) mremap(&(0x7f0000509000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000246000/0x3000)=nil) [ 101.964807] program syz-executor6 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.984679] snd_dummy snd_dummy.0: control 76:0:0:Î:0 is already present [ 102.011489] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 2018/05/18 20:50:43 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)=""/250) 2018/05/18 20:50:43 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x2) fallocate(r0, 0x1, 0x0, 0x7) fallocate(r0, 0x3, 0x0, 0xffff) 2018/05/18 20:50:43 executing program 1: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000004000)=0x2) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r1, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000011000)) ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) [ 102.075839] kvm: emulating exchange as write 2018/05/18 20:50:43 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)=""/250) 2018/05/18 20:50:43 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl(r0, 0x6, &(0x7f0000000000)) socket$inet(0x2, 0x0, 0x40000000000000) syz_open_dev$midi(&(0x7f0000000440)='/dev/midi#\x00', 0x1, 0x0) setns(0xffffffffffffffff, 0x0) [ 102.115941] snd_dummy snd_dummy.0: control 76:0:0:Î:0 is already present [ 102.195714] snd_dummy snd_dummy.0: control 76:0:0:Î:0 is already present [ 102.213921] program syz-executor6 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.266792] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 2018/05/18 20:50:44 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f00000000c0)=""/66) 2018/05/18 20:50:44 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl(r0, 0x6, &(0x7f0000000000)) socket$inet(0x2, 0x0, 0x40000000000000) syz_open_dev$midi(&(0x7f0000000440)='/dev/midi#\x00', 0x1, 0x0) setns(0xffffffffffffffff, 0x0) 2018/05/18 20:50:44 executing program 5: r0 = gettid() r1 = socket(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="4626262c8523bf012cf66f") process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 2018/05/18 20:50:44 executing program 0: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0x2e) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) creat(&(0x7f0000000140)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 2018/05/18 20:50:44 executing program 7: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000880)={'#! ', './file0', [{0x20}, {0x20}, {0x20, '&'}, {0x20, '#! '}, {0x20, '#! '}, {0x20, '*sem0'}, {0x20, '\x00'}], 0xa, "180e22511ec2b809160d9462246837f938cc1a65472b60c043f244fe893021a99e639d895e00000e1d3576530137bbc5267ed4b40f4c299de425ef3136e54ff155426f234ae3a5314ff9c330ee604e5bda4d030430720af03038ae01e14e6509"}, 0x7f) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) 2018/05/18 20:50:44 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$int_out(r0, 0x80045700, &(0x7f0000000100)) 2018/05/18 20:50:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000000100)=0x0) fstatfs(r1, &(0x7f0000000080)=""/76) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000000)="100000000100000000", 0x9}]) 2018/05/18 20:50:44 executing program 1: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000004000)=0x2) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r1, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000011000)) ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/05/18 20:50:44 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000078b05663"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/18 20:50:44 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(tnepres-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000015c0)={&(0x7f0000000180)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001340)=""/53, 0x35}, {&(0x7f0000001440)=""/190, 0xbe}], 0x2, &(0x7f0000001580)=""/31, 0x1f}, 0x0) [ 103.000446] program syz-executor6 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.018546] binder_alloc: binder_alloc_mmap_handler: 7791 20000000-20002000 already mapped failed -16 [ 103.020543] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 2018/05/18 20:50:44 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0xfffffffffffbfffd, &(0x7f0000001640)) 2018/05/18 20:50:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000400)=[{0x30, 0x0, 0x0, 0xffeff010}, {0x16}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000008c0)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0x0, {0xa}}, 0x18}, 0x1}, 0x0) 2018/05/18 20:50:44 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000080607041dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 2018/05/18 20:50:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000400)=[{0x30, 0x0, 0x0, 0xffeff010}, {0x16}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000008c0)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0x0, {0xa}}, 0x18}, 0x1}, 0x0) 2018/05/18 20:50:44 executing program 4: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000380)={'nouuid,', {[{@rtdev={'rtdev', 0x3d, './file0'}, 0x2c}, {@rtdev={'rtdev', 0x3d, './file0'}, 0x2c}]}}) [ 103.222788] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 2018/05/18 20:50:44 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@setneightbl={0x13, 0x43, 0x1}, 0x14}, 0x1}, 0x0) 2018/05/18 20:50:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000400)=[{0x30, 0x0, 0x0, 0xffeff010}, {0x16}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000008c0)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0x0, {0xa}}, 0x18}, 0x1}, 0x0) 2018/05/18 20:50:44 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000ac0)=@broute={'broute\x00', 0x20, 0x4, 0x810, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f00000001c0), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', 'bcsh0\x00', 'bond_slave_1\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xd0, 0x138, 0x168, [@state={'state\x00', 0x8}, @cgroup0={'cgroup\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}]}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x1f, 0x0, 0x0, 'ip6gre0\x00', 'gre0\x00', 'veth0\x00', 'veth0_to_bond\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xc0, 0xc0, 0xf0, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{{{0x9, 0x0, 0x0, 'syzkaller1\x00', 'rose0\x00', 'team_slave_1\x00', 'vcan0\x00', @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x70, 0x70, 0xa0}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}, {{{0x11, 0x0, 0x0, 'nr0\x00', 'yam0\x00', 'ip6tnl0\x00', 'team_slave_0\x00', @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x2f8, 0x428, 0x458, [@bpf0={'bpf\x00', 0x210}, @helper={'helper\x00', 0x28, {{0x0, 'tftp-20000\x00'}}}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:event_device_t:s0\x00'}}}]}, @common=@STANDARD={'\x00', 0x8}}]}]}, 0x888) [ 103.323620] XFS (loop4): Invalid device [./file0], error=-2 [ 103.399261] XFS (loop4): Invalid device [./file0], error=-2 [ 103.461968] cannot load conntrack support for proto=7 2018/05/18 20:50:45 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/05/18 20:50:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000400)=[{0x30, 0x0, 0x0, 0xffeff010}, {0x16}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000008c0)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0x0, {0xa}}, 0x18}, 0x1}, 0x0) 2018/05/18 20:50:45 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x54) 2018/05/18 20:50:45 executing program 4: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000380)={'nouuid,', {[{@rtdev={'rtdev', 0x3d, './file0'}, 0x2c}, {@rtdev={'rtdev', 0x3d, './file0'}, 0x2c}]}}) 2018/05/18 20:50:45 executing program 7: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x15}]}) 2018/05/18 20:50:45 executing program 5: r0 = gettid() r1 = socket(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="4626262c8523bf012cf66f") process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 2018/05/18 20:50:45 executing program 1: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000004000)=0x2) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r1, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000011000)) ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/05/18 20:50:45 executing program 0: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0x2e) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) creat(&(0x7f0000000140)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 2018/05/18 20:50:45 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x10, 0x803, 0x4) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003780)=[{{&(0x7f0000000040)=@in={0x0, 0x0, @dev}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000280)=""/4096, 0x1000}}, {{&(0x7f0000002680)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000003700)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x1, &(0x7f0000003740)=""/30, 0x1e}}], 0x2, 0x0, &(0x7f0000000000)={0x77359400}) 2018/05/18 20:50:45 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000018ff4)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000180)={0x1c, 0x28, 0x1, 0x0, 0x0, {0x1}, [@generic="7b6c6e6601"]}, 0x1c}, 0x1}, 0x0) [ 103.896930] XFS (loop4): Invalid device [./file0], error=-2 [ 103.906012] IPVS: ftp: loaded support on port[0] = 21 2018/05/18 20:50:45 executing program 4: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000380)={'nouuid,', {[{@rtdev={'rtdev', 0x3d, './file0'}, 0x2c}, {@rtdev={'rtdev', 0x3d, './file0'}, 0x2c}]}}) 2018/05/18 20:50:45 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="c626262c8523bf012cf66f") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) connect$inet6(r1, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1c) recvfrom$inet6(r1, &(0x7f0000000000)=""/105, 0x69, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, 0x1c) write(r1, &(0x7f00000002c0)="a5", 0x1) 2018/05/18 20:50:45 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000340)="800000000002000019000000e60100006c000000002800000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@minixdf='minixdf', 0x2c}, {@auto_da_alloc='auto_da_alloc', 0x2c}, {@init_itable_val={'init_itable', 0x3d, [0x36]}, 0x2c}]}) [ 104.062440] XFS (loop4): Invalid device [./file0], error=-2 [ 104.162613] EXT4-fs (loop7): bad geometry: block count 512 exceeds size of device (1 blocks) [ 104.203248] EXT4-fs (loop7): bad geometry: block count 512 exceeds size of device (1 blocks) [ 104.206830] IPVS: ftp: loaded support on port[0] = 21 2018/05/18 20:50:46 executing program 4: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000380)={'nouuid,', {[{@rtdev={'rtdev', 0x3d, './file0'}, 0x2c}, {@rtdev={'rtdev', 0x3d, './file0'}, 0x2c}]}}) 2018/05/18 20:50:46 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000340)="800000000002000019000000e60100006c000000002800000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@minixdf='minixdf', 0x2c}, {@auto_da_alloc='auto_da_alloc', 0x2c}, {@init_itable_val={'init_itable', 0x3d, [0x36]}, 0x2c}]}) 2018/05/18 20:50:46 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x54) 2018/05/18 20:50:46 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fanotify_init(0xc, 0x0) 2018/05/18 20:50:46 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = dup2(r0, r0) getsockname(r1, &(0x7f00000003c0)=@can, &(0x7f0000000240)=0x80) 2018/05/18 20:50:46 executing program 6: unshare(0x2000400) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) fanotify_mark(r0, 0x9, 0x40000020, 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') 2018/05/18 20:50:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 2018/05/18 20:50:46 executing program 1: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000004000)=0x2) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r1, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000011000)) ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) [ 104.972613] XFS (loop4): Invalid device [./file0], error=-2 [ 104.997152] EXT4-fs (loop7): bad geometry: block count 512 exceeds size of device (1 blocks) 2018/05/18 20:50:46 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x10, 0x100000802, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'ifb0\x00', 0x3082}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8922, &(0x7f00000000c0)={"6966623000f7ff010000000000000076", 0x4ff}) [ 105.016909] binder: 7948:7949 got transaction with invalid offsets ptr 2018/05/18 20:50:46 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fanotify_init(0xc, 0x0) 2018/05/18 20:50:46 executing program 4: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe800, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010a7900000000f801", 0x17}], 0x0, &(0x7f0000000480)) lchown(&(0x7f0000000180)='./file0\x00', r1, 0x0) [ 105.071888] binder: 7948:7949 transaction failed 29201/-14, size 0-12288 line 2999 2018/05/18 20:50:46 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000340)="800000000002000019000000e60100006c000000002800000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@minixdf='minixdf', 0x2c}, {@auto_da_alloc='auto_da_alloc', 0x2c}, {@init_itable_val={'init_itable', 0x3d, [0x36]}, 0x2c}]}) [ 105.128539] binder_alloc: binder_alloc_mmap_handler: 7948 20002000-20006000 already mapped failed -16 2018/05/18 20:50:46 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fanotify_init(0xc, 0x0) [ 105.181180] binder: BINDER_SET_CONTEXT_MGR already set [ 105.195230] binder_alloc: 7948: binder_alloc_buf, no vma [ 105.200850] binder: 7948:7960 transaction failed 29189/-3, size 0-12288 line 2971 [ 105.208970] binder: 7948:7949 ioctl 40046207 0 returned -16 [ 105.223669] EXT4-fs (loop7): bad geometry: block count 512 exceeds size of device (1 blocks) 2018/05/18 20:50:46 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigsuspend(&(0x7f0000000040), 0x8) sendmmsg$unix(r1, &(0x7f0000000200), 0x55f, 0x0) write(r2, &(0x7f0000000100), 0x0) 2018/05/18 20:50:46 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/18 20:50:46 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000340)="800000000002000019000000e60100006c000000002800000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@minixdf='minixdf', 0x2c}, {@auto_da_alloc='auto_da_alloc', 0x2c}, {@init_itable_val={'init_itable', 0x3d, [0x36]}, 0x2c}]}) 2018/05/18 20:50:46 executing program 2: r0 = memfd_create(&(0x7f00000001c0)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740337492e13c91671ce127", 0x0) pwrite64(r0, &(0x7f0000000240)='U', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0x7f8) msgsnd(0x0, &(0x7f0000001040)=ANY=[], 0x0, 0x0) 2018/05/18 20:50:46 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fanotify_init(0xc, 0x0) [ 105.389103] binder: undelivered TRANSACTION_ERROR: 29201 [ 105.404126] binder: undelivered TRANSACTION_ERROR: 29189 [ 105.440561] BTRFS: device fsid ecf6f2a3-2997-48ae-b81e-1b00920efd9a devid 0 transid 0 /dev/loop4 [ 105.461735] EXT4-fs (loop7): bad geometry: block count 512 exceeds size of device (1 blocks) [ 105.520934] BTRFS error (device loop4): superblock checksum mismatch [ 105.558838] BTRFS error (device loop4): open_ctree failed [ 105.612842] BTRFS error (device loop4): superblock checksum mismatch [ 105.650309] BTRFS error (device loop4): open_ctree failed 2018/05/18 20:50:47 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x54) 2018/05/18 20:50:47 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000100)={0x18, 0x2, {0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1e) [ 106.160427] IPVS: ftp: loaded support on port[0] = 21 2018/05/18 20:50:48 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mkdir(&(0x7f0000000080)="2e2f66696c65302f662e4f6530f000", 0x0) 2018/05/18 20:50:48 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/18 20:50:48 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x3f}, 0x1c) 2018/05/18 20:50:48 executing program 2: mkdir(&(0x7f0000000300)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') chroot(&(0x7f0000007fc0)='./control\x00') rmdir(&(0x7f0000000040)='./control\x00') syz_fuseblk_mount(&(0x7f0000005140)='./control/file0\x00', &(0x7f0000005180)='./control/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000003c0)='./control\x00', &(0x7f0000000400)='./control\x00', &(0x7f0000000440)='tmpfs\x00', 0x0, 0x0) close(r0) 2018/05/18 20:50:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)="6e65742f736e6d700001f7acae8c81b02d4806e45e1e8f2c11d9069564da5a8686d8b3328ff0391be9dd1d329ef974ef7bfa0e305005c92308ec4d664392681363af6083ca414b12ae9b591e67177f5487bcc22fd9d2739e731780c373e9ba061a0044e1242cce9e64714c288cc827c8e909013de46e4084d67b809eda64cc60f903") preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1, 0x80000000) 2018/05/18 20:50:48 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000200)="74086e750000000000000000008c00", 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x5) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f00000000c0)) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) 2018/05/18 20:50:48 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x54) 2018/05/18 20:50:48 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="af26262c8523bf012cf66f") r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0xccf) write$binfmt_aout(r1, &(0x7f0000000280), 0x20) 2018/05/18 20:50:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x8010aebc, &(0x7f0000000000)) 2018/05/18 20:50:48 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)={0x40, 0x10, [0x2c, 0x100, 0x6, 0x1]}) 2018/05/18 20:50:48 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000640), 0xa, 0x0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty={[0xeffdffff]}, 0x8}, 0x1c) [ 107.091417] BTRFS error (device loop4): superblock checksum mismatch [ 107.100388] IPVS: ftp: loaded support on port[0] = 21 [ 107.105509] FAT-fs (loop6): error, invalid access to FAT (entry 0x000004f0) [ 107.112949] FAT-fs (loop6): Filesystem has been set read-only [ 107.129964] BTRFS error (device loop4): open_ctree failed 2018/05/18 20:50:48 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x1000008000) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="d9", 0x1}], 0x1, &(0x7f0000002580)}, 0x0) r3 = accept4(r0, &(0x7f00000001c0)=@in={0x0, 0x0, @local}, &(0x7f0000000280)=0x80, 0x0) recvmmsg(r3, &(0x7f0000009fc0)=[{{&(0x7f0000009980)=@alg, 0x80, &(0x7f0000009e40), 0x0, &(0x7f0000009ec0)=""/202, 0xca}}], 0x1, 0x0, &(0x7f000000a1c0)) 2018/05/18 20:50:48 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/18 20:50:48 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x4, 0x4) r1 = socket(0xa, 0x200000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000)='\f', 0x1, 0x1, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000180)="078fd1c9a5c5f3c4b10b3c04aed824d52976da04b17457afe303e6b8dba91cb1477c239848be2d2e224a86f6cdbf4bf01fc229ef3705d8a6fe5e54f8b954590f7e6fc6a121b4014ecfd25a5e2e90debd10ae3823ed3fd35a6e5f674d279a634ad5e4cb73ce7f24a089f1f2491d", 0x6d, 0x40011, &(0x7f0000000080)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) [ 107.414129] BTRFS error (device loop4): superblock checksum mismatch [ 107.450252] BTRFS error (device loop4): open_ctree failed [ 107.863592] print_req_error: I/O error, dev loop0, sector 22656 [ 107.869970] print_req_error: I/O error, dev loop0, sector 22656 [ 107.876364] Buffer I/O error on dev loop0, logical block 2832, async page read [ 107.883917] print_req_error: I/O error, dev loop0, sector 22808 [ 107.890371] print_req_error: I/O error, dev loop0, sector 22808 [ 107.896601] Buffer I/O error on dev loop0, logical block 2851, async page read [ 107.904308] print_req_error: I/O error, dev loop0, sector 0 [ 107.910225] print_req_error: I/O error, dev loop0, sector 0 [ 107.916056] Buffer I/O error on dev loop0, logical block 0, async page read [ 107.923368] print_req_error: I/O error, dev loop0, sector 8 [ 107.929158] Buffer I/O error on dev loop0, logical block 1, async page read [ 107.937385] print_req_error: I/O error, dev loop0, sector 22816 [ 107.943493] Buffer I/O error on dev loop0, logical block 2852, async page read [ 107.951564] print_req_error: I/O error, dev loop0, sector 22816 [ 107.957694] Buffer I/O error on dev loop0, logical block 2852, async page read [ 107.965334] print_req_error: I/O error, dev loop0, sector 22816 [ 107.971474] Buffer I/O error on dev loop0, logical block 2852, async page read [ 107.979097] Buffer I/O error on dev loop0, logical block 2852, async page read [ 107.986970] Buffer I/O error on dev loop0, logical block 2852, async page read [ 107.995278] Buffer I/O error on dev loop0, logical block 2852, async page read 2018/05/18 20:50:49 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x7}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xaa6, 0x4) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [], 0xa}, 0xb) 2018/05/18 20:50:49 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000001780)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001740)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000000)=@set_option={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000100), r1, 0x1, 0x223}}, 0x20) 2018/05/18 20:50:49 executing program 5: r0 = epoll_create1(0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x3) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) 2018/05/18 20:50:49 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x1000008000) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="d9", 0x1}], 0x1, &(0x7f0000002580)}, 0x0) r3 = accept4(r0, &(0x7f00000001c0)=@in={0x0, 0x0, @local}, &(0x7f0000000280)=0x80, 0x0) recvmmsg(r3, &(0x7f0000009fc0)=[{{&(0x7f0000009980)=@alg, 0x80, &(0x7f0000009e40), 0x0, &(0x7f0000009ec0)=""/202, 0xca}}], 0x1, 0x0, &(0x7f000000a1c0)) 2018/05/18 20:50:49 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 2018/05/18 20:50:49 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6}, {@in=@loopback=0x7f000001, 0x0, 0x6c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/05/18 20:50:49 executing program 7: pkey_mprotect(&(0x7f0000032000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="fe2814c591209746416db773faf96042568c", 0x12}, {&(0x7f0000001380)}, {&(0x7f0000002380)="016ef7a6c0831edb38a5f90a16c49eb6be7d8413ac96d9000209aa7e863de59058a3f320d951970f86631c5adb005052298b3cb14e07c201e9c0b1f7401009d04f7aefc79b966079795a9210491757175197009664b97b35a0db3a970eedee80f3a647606765ff053b478f9fc1647b2281d64c9d19a4a79fbcd028", 0x7b, 0x100000001}], 0x400, &(0x7f0000002480)) 2018/05/18 20:50:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}, r1}, 0x14) [ 108.376935] BTRFS error (device loop4): superblock checksum mismatch [ 108.407670] BTRFS error (device loop4): open_ctree failed 2018/05/18 20:50:49 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") dup2(r1, r0) 2018/05/18 20:50:49 executing program 0: r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0x2, &(0x7f00000000c0), 0x69b) 2018/05/18 20:50:49 executing program 5: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x6}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {0x0, @random="24d5b62a824b"}, 0x4, {0x2, 0x0, @rand_addr}, 'syzkaller0\x00'}) [ 108.421762] ntfs: (device loop7): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 108.430237] ntfs: (device loop7): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 108.442313] ntfs: (device loop7): ntfs_fill_super(): Not an NTFS volume. 2018/05/18 20:50:49 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x1000008000) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="d9", 0x1}], 0x1, &(0x7f0000002580)}, 0x0) r3 = accept4(r0, &(0x7f00000001c0)=@in={0x0, 0x0, @local}, &(0x7f0000000280)=0x80, 0x0) recvmmsg(r3, &(0x7f0000009fc0)=[{{&(0x7f0000009980)=@alg, 0x80, &(0x7f0000009e40), 0x0, &(0x7f0000009ec0)=""/202, 0xca}}], 0x1, 0x0, &(0x7f000000a1c0)) 2018/05/18 20:50:49 executing program 2: madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x10) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb) 2018/05/18 20:50:49 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() clone(0x50800000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000240)) timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) timer_delete(0x0) 2018/05/18 20:50:49 executing program 4: r0 = socket$packet(0x11, 0x808000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) getsockopt$packet_int(r0, 0x107, 0x15, &(0x7f0000000100), &(0x7f0000000140)=0x4) 2018/05/18 20:50:49 executing program 7: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x9) dup3(r0, r1, 0x0) 2018/05/18 20:50:49 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x1f0000, 0x1, 0x4, 0x4, 0x1}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x5c) 2018/05/18 20:50:49 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x32}, 0x0, @in=@local={0xac, 0x14, 0x14, 0xaa}}}, 0xe8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) 2018/05/18 20:50:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x40000071, 0x40480]}) [ 108.702102] IPVS: ftp: loaded support on port[0] = 21 2018/05/18 20:50:49 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000280)) 2018/05/18 20:50:49 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000002c0)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xfdfdffff}, {0x0, 0x0, 0x0, [], 0x80ffff}]}) 2018/05/18 20:50:49 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x98) [ 109.038249] IPVS: ftp: loaded support on port[0] = 21 2018/05/18 20:50:50 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x1000008000) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="d9", 0x1}], 0x1, &(0x7f0000002580)}, 0x0) r3 = accept4(r0, &(0x7f00000001c0)=@in={0x0, 0x0, @local}, &(0x7f0000000280)=0x80, 0x0) recvmmsg(r3, &(0x7f0000009fc0)=[{{&(0x7f0000009980)=@alg, 0x80, &(0x7f0000009e40), 0x0, &(0x7f0000009ec0)=""/202, 0xca}}], 0x1, 0x0, &(0x7f000000a1c0)) 2018/05/18 20:50:50 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000005480)='./file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f0000005440)='hugetlbfs\x00', 0x0, &(0x7f0000001d80)) chdir(&(0x7f0000000180)='./file0\x00') mknod(&(0x7f00000001c0)='./file0\x00', 0x1022, 0x0) 2018/05/18 20:50:50 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x1f0000, 0x1, 0x4, 0x4, 0x1}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x5c) 2018/05/18 20:50:50 executing program 1: r0 = gettid() madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xf) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_writev(r0, &(0x7f0000000fc0)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 2018/05/18 20:50:50 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000002c0)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xfdfdffff}, {0x0, 0x0, 0x0, [], 0x80ffff}]}) 2018/05/18 20:50:50 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x800, 0x0) io_setup(0x8, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x0, r0, &(0x7f0000000080)}]) 2018/05/18 20:50:50 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() clone(0x50800000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000240)) timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) timer_delete(0x0) 2018/05/18 20:50:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100000200000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)) [ 109.265239] EXT4-fs (loop2): can't read group descriptor 0 [ 109.361629] EXT4-fs (loop2): can't read group descriptor 0 [ 109.388541] IPVS: ftp: loaded support on port[0] = 21 2018/05/18 20:50:50 executing program 4: clock_gettime(0xc, &(0x7f00000000c0)) 2018/05/18 20:50:50 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000002c0)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xfdfdffff}, {0x0, 0x0, 0x0, [], 0x80ffff}]}) 2018/05/18 20:50:50 executing program 5: syz_emit_ethernet(0x32, &(0x7f0000aeb000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {[@timestamp={0x44, 0x8, 0x7, 0x0, 0x0, [{}]}]}}, @icmp=@address_reply={0x12}}}}}, &(0x7f0000000040)) 2018/05/18 20:50:50 executing program 1: r0 = gettid() madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xf) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_writev(r0, &(0x7f0000000fc0)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 2018/05/18 20:50:50 executing program 6: r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000040)=@in6={0xa}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000480)}, 0x20004040) recvmsg(r0, &(0x7f0000000440)={&(0x7f00000000c0), 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000340)=""/221, 0xdd}, 0x0) 2018/05/18 20:50:50 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() clone(0x50800000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000240)) timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) timer_delete(0x0) 2018/05/18 20:50:50 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x1f0000, 0x1, 0x4, 0x4, 0x1}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x5c) 2018/05/18 20:50:50 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x0, 0x9, 0xfffffff7ffffffff}, 0x14}, 0x1}, 0x0) 2018/05/18 20:50:50 executing program 1: r0 = gettid() madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xf) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_writev(r0, &(0x7f0000000fc0)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 2018/05/18 20:50:50 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000000c0), 0x4) 2018/05/18 20:50:50 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") migrate_pages(0x0, 0x8, &(0x7f0000000140), &(0x7f00000001c0)=0x3) 2018/05/18 20:50:50 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) io_setup(0x1000, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="040000008cf46cfde19a4e3bcfbdbedee32e68b3a251fd2cfd09684d9c7afae320bbf22a2ce3cb58fa63c42a238cb85f1023fa813c9a0e46", 0x38}]) 2018/05/18 20:50:50 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x1f0000, 0x1, 0x4, 0x4, 0x1}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x5c) 2018/05/18 20:50:50 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x0, 0x9, 0xfffffff7ffffffff}, 0x14}, 0x1}, 0x0) [ 109.728873] IPVS: ftp: loaded support on port[0] = 21 2018/05/18 20:50:51 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000002c0)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xfdfdffff}, {0x0, 0x0, 0x0, [], 0x80ffff}]}) 2018/05/18 20:50:52 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x0, 0x9, 0xfffffff7ffffffff}, 0x14}, 0x1}, 0x0) 2018/05/18 20:50:52 executing program 6: r0 = epoll_create1(0x0) flock(r0, 0x2) r1 = epoll_create1(0x0) flock(r1, 0x1) flock(r0, 0x5) 2018/05/18 20:50:52 executing program 1: r0 = gettid() madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xf) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_writev(r0, &(0x7f0000000fc0)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 2018/05/18 20:50:52 executing program 5: r0 = inotify_init1(0x0) r1 = getpid() fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0xffffffffffff73eb, 0x4}) process_vm_readv(r2, &(0x7f0000000080)=[{&(0x7f0000001300)=""/4096, 0xa2d53b58}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/121, 0x79}], 0x215, 0x0) 2018/05/18 20:50:52 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/18 20:50:52 executing program 0: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x2, 0x480, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000740], 0x0, &(0x7f0000000000), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', "73797a2b616c666572fd00", 'ip6tnl0\x00', "01616d61000000004ab2cec800", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x2a8, 0x2d8, 0x320, [@bpf0={'bpf\x00', 0x210, {{0x3, [{}, {}, {0x6}]}}}]}, [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x3}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffdffffffffc, 0x1, [{{{0x3, 0x0, 0x0, 'yam0\x00', 'ifb0\x00', 'ip6tnl0\x00', 'ifb0\x00', @link_local={0x1, 0x80, 0xc2}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0x70, 0xa0}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}]}]}, 0x4f8) 2018/05/18 20:50:52 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() clone(0x50800000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000240)) timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) timer_delete(0x0) 2018/05/18 20:50:52 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000000)=0x1, 0x4) sendmsg$rds(r0, &(0x7f00001c3000)={&(0x7f0000000040)={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/233, 0xe9}], 0x1, &(0x7f0000003b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001840)=""/18, 0x12}, &(0x7f0000003b00)=[{&(0x7f0000003ac0)=""/41, 0x29}], 0x1}}], 0x48}, 0x0) 2018/05/18 20:50:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000140)=0x4, 0x4) sendto$inet6(r1, &(0x7f0000000280), 0xa5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) 2018/05/18 20:50:52 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_to_bond\x00', &(0x7f0000000040)=@ethtool_cmd={0x26, 0x100}}) 2018/05/18 20:50:52 executing program 4: unshare(0x400) r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x1e, 0x1, 0x0) getsockopt(r1, 0x10f, 0x83, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/18 20:50:52 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x0, 0x9, 0xfffffff7ffffffff}, 0x14}, 0x1}, 0x0) [ 111.215793] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 111.234230] IPVS: ftp: loaded support on port[0] = 21 2018/05/18 20:50:52 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2}, 0x2c) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x127) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x13f) [ 111.274545] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/05/18 20:50:52 executing program 7: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c606262c8523bf012cf66f") r1 = socket$inet(0x2, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x28}, {0x6}]}, 0x10) 2018/05/18 20:50:52 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x84, 0x482, &(0x7f0000000040)={0x0, @rand_addr, 0x0, 0x0, 'wrr\x00'}, 0x2c) 2018/05/18 20:50:52 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f00000001c0)=""/240, &(0x7f0000000000)=0xf0) 2018/05/18 20:50:52 executing program 2: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r1, 0xffffffffffffff7f) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x3) 2018/05/18 20:50:53 executing program 1: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00001c3000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) 2018/05/18 20:50:53 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="ff8c90aef74000004800000000000000000000000000000000000000831710ff6b777287e24b7ee1a0eb99bfffffff3f765e6bd176470605", 0x38}], 0x1) 2018/05/18 20:50:53 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x103d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x4, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x50}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 2018/05/18 20:50:53 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000080)) 2018/05/18 20:50:53 executing program 6: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x8, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}}, &(0x7f0000000300)=0x100) 2018/05/18 20:50:53 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$LOOP_CTL_ADD(r0, 0x4c82, 0x0) 2018/05/18 20:50:53 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0xe092) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) 2018/05/18 20:50:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') getdents64(r0, &(0x7f00000011c0)=""/4096, 0x1000) getdents(r0, &(0x7f0000001100)=""/188, 0xbc) 2018/05/18 20:50:53 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) fcntl$lock(r0, 0x11, &(0x7f0000000100)) 2018/05/18 20:50:53 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(rmd320-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="000000000000000000200017d4edb818d1326c3b28ec092dddcabde168e80db8ed46ffff104cab926118c1c34059fb3729c1a8a06b16c7feefa16a309a7e9b82e9aa64571c5c17b9c00eb8ccc15457406cd623e89165e7f5d81ac935c303c6c908b960aac347b9dd47b9ca90a1c323a582ad9a9cc8413301261e56266441bd0b", 0x80) 2018/05/18 20:50:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') getdents64(r0, &(0x7f00000011c0)=""/4096, 0x1000) getdents(r0, &(0x7f0000001100)=""/188, 0xbc) 2018/05/18 20:50:53 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000000000)="e2", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x3fff, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) listen(r0, 0xffffffffffffff7f) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000040)=@fragment, 0x8) accept(r0, &(0x7f00000000c0)=@can, &(0x7f0000000080)=0xffffffff0000001c) 2018/05/18 20:50:53 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x541b, &(0x7f0000000240)) 2018/05/18 20:50:53 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000000000000000000000000000ff"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/18 20:50:53 executing program 7: syz_emit_ethernet(0x66, &(0x7f0000000000)={@random="cd3997030f00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@time_exceed={0xffffff81, 0x0, 0x0, 0x0, [0x0, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}}}}}}, 0x0) 2018/05/18 20:50:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') getdents64(r0, &(0x7f00000011c0)=""/4096, 0x1000) getdents(r0, &(0x7f0000001100)=""/188, 0xbc) [ 112.906575] mmap: syz-executor1 (8349) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 2018/05/18 20:50:54 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x0, 0x0, 0x35) 2018/05/18 20:50:54 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') getdents64(r0, &(0x7f00000011c0)=""/4096, 0x1000) getdents(r0, &(0x7f0000001100)=""/188, 0xbc) 2018/05/18 20:50:54 executing program 0: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) mq_open(&(0x7f0000000000)='^&\x00', 0x40, 0x0, &(0x7f0000000040)={0x0, 0xa, 0xbb76}) 2018/05/18 20:50:54 executing program 2: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'bond_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000700)=r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"696662b000faffffffffffff0004fb00", 0x1d}) 2018/05/18 20:50:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="3e0f238966b9030100c066b84c18f16566ba7afd6b770f30360f01d12e0f019c06002e36ab2e0fdac00f01cf0f01ca66b8a8b100000f23d00f21f86635200000000f23f8440f20c0663509000000440f22c0", 0x52}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/18 20:50:54 executing program 3: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r1 = socket(0x11, 0x100000803, 0x0) r2 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x90) 2018/05/18 20:50:54 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") inotify_init() mkdir(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x5, 0xffffffffffffff9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x96ab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa000003fe, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/05/18 20:50:54 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x6857b21ff1155d93) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) truncate(&(0x7f0000000140)='./file0/bus\x00', 0x0) [ 113.352015] capability: warning: `syz-executor0' uses 32-bit capabilities (legacy support in use) [ 113.396640] rpcbind: RPC call returned error 22 [ 113.414390] rpcbind: RPC call returned error 22 2018/05/18 20:50:54 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000980)) r0 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) fstat(r0, &(0x7f0000000700)) 2018/05/18 20:50:54 executing program 7: semop(0x0, &(0x7f0000000080)=[{0x0, 0xffff}], 0x1) semtimedop(0x0, &(0x7f0000000240)=[{0x0, 0x51d}], 0x1, &(0x7f0000000040)) semop(0x0, &(0x7f0000000000), 0x177) r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") semctl$IPC_RMID(0x0, 0x0, 0x10) 2018/05/18 20:50:54 executing program 6: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x20102, 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) 2018/05/18 20:50:54 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x100000001) sendmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000000200)=@nl=@unspec, 0x80, &(0x7f0000000500), 0x0, &(0x7f00000000c0)}}], 0x1, 0x0) ioctl$sock_netrom_SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000080)) recvmsg(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000180)=""/10, 0xa}, 0x0) 2018/05/18 20:50:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0x2}}]}) 2018/05/18 20:50:54 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000080)='/\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000100)='./file0\x00', 0x80000000000000) 2018/05/18 20:50:54 executing program 2: r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000600)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, &(0x7f0000000000), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x3, 0x0, 0x0, 'vcan0\x00', 'bridge0\x00', 'sit0\x00', 'team0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x1d8, 0x1d8, 0x210, [@comment={'comment\x00', 0x100}, @statistic={'statistic\x00', 0x18}]}}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 0xffffffffffffffff}}}}, {{{0x1b, 0x0, 0x0, 'team_slave_1\x00', 'irlan0\x00', 'irlan0\x00', 'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2}, [], @random="f646793b7b39", [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2}}}}}]}]}, 0x3c0) 2018/05/18 20:50:54 executing program 6: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x20102, 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) 2018/05/18 20:50:54 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") clock_getres(0x2, &(0x7f0000000040)) [ 140.042027] watchdog: BUG: soft lockup - CPU#0 stuck for 22s! [syz-executor7:4519] [ 140.049823] Modules linked in: [ 140.053013] irq event stamp: 11096058 [ 140.056821] hardirqs last enabled at (11096057): [] d_walk+0x80f/0xc80 [ 140.065136] hardirqs last disabled at (11096058): [] interrupt_entry+0xb5/0xf0 [ 140.074061] softirqs last enabled at (4442508): [] __do_softirq+0x778/0xaf5 [ 140.082811] softirqs last disabled at (4442453): [] irq_exit+0x1d1/0x200 [ 140.091206] CPU: 0 PID: 4519 Comm: syz-executor7 Not tainted 4.17.0-rc5+ #57 [ 140.098992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 140.108344] RIP: 0010:lock_acquire+0x270/0x520 [ 140.112918] RSP: 0018:ffff88018be278f0 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 140.120626] RAX: dffffc0000000000 RBX: ffffed00317c4f23 RCX: 0000000000000000 [ 140.127892] RDX: 1ffffffff11a30e5 RSI: ffff88018be16e38 RDI: 0000000000000286 [ 140.135156] RBP: ffff88018be279e0 R08: 0000000000000008 R09: 0000000000000004 [ 140.142433] R10: ffff88018be16ed8 R11: ffff88018be16600 R12: ffff88018be16600 [ 140.149695] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000000 [ 140.156961] FS: 0000000001cae940(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 140.165180] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.171056] CR2: 0000000001cb7978 CR3: 000000018c3dd000 CR4: 00000000001426f0 [ 140.178323] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 140.185713] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 140.192972] Call Trace: [ 140.195558] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 140.201104] ? lock_release+0xa10/0xa10 [ 140.205079] ? kasan_check_read+0x11/0x20 [ 140.209237] ? do_raw_spin_unlock+0x9e/0x2e0 [ 140.213643] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 140.218236] ? kasan_check_write+0x14/0x20 [ 140.222468] ? do_raw_spin_lock+0xc1/0x200 [ 140.226705] d_walk+0x49b/0xc80 [ 140.229983] ? d_walk+0x46a/0xc80 [ 140.233441] ? d_shrink_del+0x3b0/0x3b0 [ 140.237415] ? dget_parent+0x680/0x680 [ 140.241296] ? shrink_dentry_list+0xa3/0x7c0 [ 140.245703] ? shrink_dentry_list+0x5a8/0x7c0 [ 140.250200] ? is_subdir+0x480/0x480 [ 140.253916] ? shrink_dcache_parent+0x199/0x230 [ 140.258584] ? shrink_dcache_parent+0xc7/0x230 [ 140.263166] shrink_dcache_parent+0x179/0x230 [ 140.267663] ? path_has_submounts+0x1a0/0x1a0 [ 140.272156] ? down_write+0x87/0x120 [ 140.275867] ? vfs_rmdir+0xe0/0x470 [ 140.279493] ? down_read+0x1b0/0x1b0 [ 140.283209] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 140.288743] ? security_inode_rmdir+0xf4/0x130 [ 140.293325] vfs_rmdir+0x202/0x470 [ 140.296868] do_rmdir+0x523/0x610 [ 140.300348] ? __ia32_sys_mkdir+0x80/0x80 [ 140.304497] ? exit_to_usermode_loop+0x87/0x310 [ 140.309171] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 140.314706] ? exit_to_usermode_loop+0x1ef/0x310 [ 140.319465] ? do_syscall_64+0x92/0x800 [ 140.323441] __x64_sys_rmdir+0x36/0x40 [ 140.327329] do_syscall_64+0x1b1/0x800 [ 140.331215] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 140.336056] ? syscall_return_slowpath+0x5c0/0x5c0 [ 140.340986] ? syscall_return_slowpath+0x30f/0x5c0 [ 140.345918] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 140.351285] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 140.356130] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 140.361317] RIP: 0033:0x455777 [ 140.364503] RSP: 002b:00007ffdb82d2e08 EFLAGS: 00000202 ORIG_RAX: 0000000000000054 [ 140.372209] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 0000000000455777 [ 140.379485] RDX: 0000000000000000 RSI: 00007ffdb82d4bb0 RDI: 00007ffdb82d4bb0 [ 140.387128] RBP: 00007ffdb82d4bb0 R08: 0000000000000000 R09: 0000000000000001 [ 140.394392] R10: 0000000000000006 R11: 0000000000000202 R12: 0000000001caf940 [ 140.401655] R13: 0000000000000000 R14: 000000000000019a R15: 000000000001bb67 [ 140.408955] Code: 74 07 00 0f 84 c8 01 00 00 48 8b bd 20 ff ff ff 57 9d 0f 1f 44 00 00 48 b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 <48> c7 43 08 00 00 00 00 c7 43 10 00 00 00 00 48 8d 65 d8 5b 41 [ 140.428388] Sending NMI from CPU 0 to CPUs 1: [ 140.432880] NMI backtrace for cpu 1 [ 140.432889] CPU: 1 PID: 4520 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #57 [ 140.432894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 140.432906] RIP: 0010:find_held_lock+0x0/0x1c0 [ 140.432910] RSP: 0018:ffff88018b8df8a8 EFLAGS: 00000002 [ 140.432917] RAX: 0000000000000004 RBX: 1ffff1003171bf1b RCX: ffff88018b8df8f8 [ 140.432922] RDX: 0000000000000004 RSI: ffffffff88c12648 RDI: ffff88018b8d2640 [ 140.432927] RBP: ffff88018b8df9e0 R08: ffffffff88c12648 R09: ffff88018b8df738 [ 140.432931] R10: ffffffff8a713a20 R11: 0000000000000004 R12: ffff88018b8df9b8 [ 140.432937] R13: ffffffff88c12648 R14: ffff88018b8d2640 R15: ffff88018b8df8f8 [ 140.432943] FS: 00000000027b9940(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 140.432949] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.432953] CR2: 00007ffcbbe07eac CR3: 000000018bf65000 CR4: 00000000001426e0 [ 140.432961] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 140.432966] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 140.432967] Call Trace: [ 140.432977] ? lock_release+0x28b/0xa10 [ 140.432987] ? shrink_dcache_parent+0x179/0x230 [ 140.432995] ? lock_downgrade+0x8e0/0x8e0 [ 140.433005] ? lock_downgrade+0x8e0/0x8e0 [ 140.433013] ? lock_release+0xa10/0xa10 [ 140.433023] ? kasan_check_read+0x11/0x20 [ 140.433032] ? do_raw_spin_unlock+0x9e/0x2e0 [ 140.433040] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 140.433050] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 140.433058] ? kasan_check_write+0x14/0x20 [ 140.433066] ? do_raw_spin_lock+0xc1/0x200 [ 140.433074] d_walk+0x1d5/0xc80 [ 140.433082] ? shrink_dcache_parent+0x179/0x230 [ 140.433090] ? d_shrink_del+0x3b0/0x3b0 [ 140.433098] ? dget_parent+0x680/0x680 [ 140.433105] ? shrink_dentry_list+0x8d/0x7c0 [ 140.433112] ? shrink_dentry_list+0x5a8/0x7c0 [ 140.433120] ? is_subdir+0x480/0x480 [ 140.433128] ? shrink_dcache_parent+0x199/0x230 [ 140.433136] ? shrink_dcache_parent+0xc7/0x230 [ 140.433144] shrink_dcache_parent+0x179/0x230 [ 140.433152] ? path_has_submounts+0x1a0/0x1a0 [ 140.433162] ? down_write+0x87/0x120 [ 140.433170] ? vfs_rmdir+0xe0/0x470 [ 140.433177] ? down_read+0x1b0/0x1b0 [ 140.433189] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 140.433199] ? security_inode_rmdir+0xf4/0x130 [ 140.433207] vfs_rmdir+0x202/0x470 [ 140.433215] do_rmdir+0x523/0x610 [ 140.433224] ? __ia32_sys_mkdir+0x80/0x80 [ 140.433233] ? exit_to_usermode_loop+0x87/0x310 [ 140.433243] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 140.433252] ? exit_to_usermode_loop+0x1ef/0x310 [ 140.433261] ? do_syscall_64+0x92/0x800 [ 140.433269] __x64_sys_rmdir+0x36/0x40 [ 140.433277] do_syscall_64+0x1b1/0x800 [ 140.433286] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 140.433294] ? syscall_return_slowpath+0x5c0/0x5c0 [ 140.433303] ? syscall_return_slowpath+0x30f/0x5c0 [ 140.433312] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 140.433321] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 140.433330] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 140.433335] RIP: 0033:0x455777 [ 140.433339] RSP: 002b:00007ffcbbe085b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000054 [ 140.433346] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 0000000000455777 [ 140.433351] RDX: 0000000000000000 RSI: 00007ffcbbe0a360 RDI: 00007ffcbbe0a360 [ 140.433356] RBP: 00007ffcbbe0a360 R08: 0000000000000000 R09: 0000000000000001 [ 140.433360] R10: 0000000000000006 R11: 0000000000000206 R12: 00000000027ba940 [ 140.433365] R13: 0000000000000000 R14: 0000000000000185 R15: 000000000001bb95 [ 140.433369] Code: e9 a4 fb ff ff 48 89 95 28 ff ff ff 48 89 b5 30 ff ff ff e8 f3 84 59 00 48 8b 95 28 ff ff ff 48 8b b5 30 ff ff ff e9 58 fb ff ff <55> 48 89 e5 41 57 44 8d 7a ff 41 56 49 63 c7 49 89 f6 41 55 48 [ 140.433890] Kernel panic - not syncing: softlockup: hung tasks [ 140.793524] CPU: 0 PID: 4519 Comm: syz-executor7 Tainted: G L 4.17.0-rc5+ #57 [ 140.802102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 140.811446] Call Trace: [ 140.814021] [ 140.816173] dump_stack+0x1b9/0x294 [ 140.819802] ? dump_stack_print_info.cold.2+0x52/0x52 [ 140.824998] ? printk_safe_log_store+0x260/0x260 [ 140.829755] panic+0x22f/0x4de [ 140.832947] ? add_taint.cold.5+0x16/0x16 [ 140.837099] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 140.842633] ? watchdog_timer_fn.cold.5+0xe2/0x126 [ 140.847557] ? watchdog_timer_fn.cold.5+0xd9/0x126 [ 140.852487] watchdog_timer_fn.cold.5+0xf3/0x126 [ 140.857506] __hrtimer_run_queues+0x3e3/0x10a0 [ 140.862091] ? watchdog+0x30/0x30 [ 140.865556] ? hrtimer_start_range_ns+0xd10/0xd10 [ 140.870401] ? pvclock_read_flags+0x160/0x160 [ 140.874891] ? kvm_clock_read+0x25/0x30 [ 140.878863] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 140.883890] ? kvm_clock_read+0x25/0x30 [ 140.887869] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 140.892885] ? ktime_get_update_offsets_now+0x3d3/0x5c0 [ 140.898252] ? do_timer+0x50/0x50 [ 140.901701] ? rcu_nmi_exit+0xd7/0x2b0 [ 140.905591] ? do_raw_spin_lock+0xc1/0x200 [ 140.909832] hrtimer_interrupt+0x2f3/0x750 [ 140.914079] smp_apic_timer_interrupt+0x15d/0x710 [ 140.918919] ? smp_call_function_single_interrupt+0x650/0x650 [ 140.924811] ? _raw_spin_lock+0x32/0x40 [ 140.928884] ? _raw_spin_unlock+0x22/0x30 [ 140.933031] ? handle_edge_irq+0x330/0x870 [ 140.937263] ? task_prio+0x50/0x50 [ 140.940805] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 140.945652] apic_timer_interrupt+0xf/0x20 [ 140.949879] [ 140.952112] RIP: 0010:lock_acquire+0x270/0x520 [ 140.956686] RSP: 0018:ffff88018be278f0 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 140.964391] RAX: dffffc0000000000 RBX: ffffed00317c4f23 RCX: 0000000000000000 [ 140.971655] RDX: 1ffffffff11a30e5 RSI: ffff88018be16e38 RDI: 0000000000000286 [ 140.978919] RBP: ffff88018be279e0 R08: 0000000000000008 R09: 0000000000000004 [ 140.986183] R10: ffff88018be16ed8 R11: ffff88018be16600 R12: ffff88018be16600 [ 140.993446] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000000 [ 141.000732] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 141.006268] ? lock_release+0xa10/0xa10 [ 141.010238] ? kasan_check_read+0x11/0x20 [ 141.014381] ? do_raw_spin_unlock+0x9e/0x2e0 [ 141.018798] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 141.023380] ? kasan_check_write+0x14/0x20 [ 141.027609] ? do_raw_spin_lock+0xc1/0x200 [ 141.031849] d_walk+0x49b/0xc80 [ 141.035125] ? d_walk+0x46a/0xc80 [ 141.038579] ? d_shrink_del+0x3b0/0x3b0 [ 141.042550] ? dget_parent+0x680/0x680 [ 141.046431] ? shrink_dentry_list+0xa3/0x7c0 [ 141.050836] ? shrink_dentry_list+0x5a8/0x7c0 [ 141.055330] ? is_subdir+0x480/0x480 [ 141.059044] ? shrink_dcache_parent+0x199/0x230 [ 141.063708] ? shrink_dcache_parent+0xc7/0x230 [ 141.068292] shrink_dcache_parent+0x179/0x230 [ 141.072789] ? path_has_submounts+0x1a0/0x1a0 [ 141.077380] ? down_write+0x87/0x120 [ 141.081087] ? vfs_rmdir+0xe0/0x470 [ 141.084804] ? down_read+0x1b0/0x1b0 [ 141.088519] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 141.094055] ? security_inode_rmdir+0xf4/0x130 [ 141.098635] vfs_rmdir+0x202/0x470 [ 141.102174] do_rmdir+0x523/0x610 [ 141.105631] ? __ia32_sys_mkdir+0x80/0x80 [ 141.109776] ? exit_to_usermode_loop+0x87/0x310 [ 141.114450] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 141.119986] ? exit_to_usermode_loop+0x1ef/0x310 [ 141.124756] ? do_syscall_64+0x92/0x800 [ 141.128733] __x64_sys_rmdir+0x36/0x40 [ 141.132619] do_syscall_64+0x1b1/0x800 [ 141.136502] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 141.141345] ? syscall_return_slowpath+0x5c0/0x5c0 [ 141.146275] ? syscall_return_slowpath+0x30f/0x5c0 [ 141.151204] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 141.156569] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 141.161413] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 141.166598] RIP: 0033:0x455777 [ 141.169781] RSP: 002b:00007ffdb82d2e08 EFLAGS: 00000202 ORIG_RAX: 0000000000000054 [ 141.177486] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 0000000000455777 [ 141.184753] RDX: 0000000000000000 RSI: 00007ffdb82d4bb0 RDI: 00007ffdb82d4bb0 [ 141.192015] RBP: 00007ffdb82d4bb0 R08: 0000000000000000 R09: 0000000000000001 [ 141.199285] R10: 0000000000000006 R11: 0000000000000202 R12: 0000000001caf940 [ 141.206547] R13: 0000000000000000 R14: 000000000000019a R15: 000000000001bb67 [ 141.214314] Dumping ftrace buffer: [ 141.218041] (ftrace buffer empty) [ 141.221736] Kernel Offset: disabled [ 141.225344] Rebooting in 86400 seconds..