0x0) timerfd_settime(r1, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000100)=""/134, 0x5f407ba2) getpeername$packet(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0x14) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0xfffffffffffffffb, 0x6}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYBLOB="9800000091c05ceb86ac52beb16df0ebd85dc1a18f31000d8a5ce10305a21ae2de5de986b24799eb27e4c3b674b1fa8398c90de6198da02c0e78186bf919b75e8dbd1c50403abe405affe9507b73da1468ead4fe75c5682d5bf25ab7a35de7e3c99e113b671bedb7780dc8f5d57c9a186a2e12d5e083c99aab434061ff1244732ba6ac494e3292b5db46f2b000c732ef000000"], &(0x7f00000002c0)=0xa0) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000380)={@empty, r2}, 0x14) socket$bt_bnep(0x1f, 0x3, 0x4) 2018/05/21 12:29:30 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff, 0x1800}], 0x1, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) 2018/05/21 12:29:30 executing program 6: socket(0x1e, 0x2, 0x0) epoll_create(0x100000001) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x40}, &(0x7f0000000040)={0x0, 0x0, 0x1}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) 2018/05/21 12:29:30 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030000160000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000040004000000000000000000000000000000000000000000000000000000000002000100000000000000000000ca2b95d3e04569ca0000000a00000000000000fe8000000000000000000000000000ff000000000000000000c8190861ef2b1151ff16db368dd137f18762c330895aa154163e8a79805a0d092ab45d6fc48b84714caa7e73922ab04f25bd42f744304bed48e117"], 0xb0}, 0x1}, 0x0) r1 = semget$private(0x0, 0x2, 0x400) semctl$IPC_INFO(r1, 0x4, 0x3, &(0x7f0000000100)=""/202) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0x0) [ 750.125765] device bridge_slave_1 left promiscuous mode [ 750.131604] bridge0: port 2(bridge_slave_1) entered disabled state 2018/05/21 12:29:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) open_by_handle_at(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6b00000000000000c6c341818c7c9a1aef8f3550c542f4004f17f206c7aa95a96bf0aec094376d7d9feb435a5446551e03707c51f2594ba4213377ad418deedd19674d3fd8c1021e251c3f53e6d615ac070e19f21eced1003d9f1ec852a04ce75ece8059ffffe5dc8b9fe58b882a2f744f498863cc01c919400d0188dd7cb84a451cacae0396d8e5b31ef0d45c3acdbb3fcf1c56d15266118f93c0eb2c9764da1c5d03d031996487e08645fc06d5c31ef79ba97ad8a5993fc13b0b293428b48e6fec5fce6381229d5854de2b6d759041604dd69675aa82992421b370d921bd21"], 0x101080) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)="fc", 0x1, 0x1000000}]) 2018/05/21 12:29:30 executing program 5: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="7f", 0x1, r1) r3 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r1) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r3, r2}, &(0x7f0000000380)=""/238, 0xee, &(0x7f0000000100)={&(0x7f0000000080)={'crct10dif\x00'}}) [ 750.200996] device bridge_slave_0 left promiscuous mode [ 750.206759] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:29:30 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff, 0x1800}], 0x1, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) 2018/05/21 12:29:30 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x200000) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000040)={0x5, 0x20, 0x7, 0x1, 0xfffffffffffffff7, 0xffffffffffffffff}) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) 2018/05/21 12:29:30 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) connect(r2, &(0x7f0000000040)=@l2={0x1f, 0x401, {0x3, 0x0, 0x7fff, 0x63, 0x400, 0x3}, 0xfffffffffffff28f, 0x7}, 0x80) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:29:30 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r0, 0xff, 0x7, &(0x7f0000000080), 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) [ 750.444171] team0 (unregistering): Port device team_slave_1 removed [ 750.510172] team0 (unregistering): Port device team_slave_0 removed [ 750.567628] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 750.628366] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 750.710840] IPVS: ftp: loaded support on port[0] = 21 [ 750.714222] bond0 (unregistering): Released all slaves [ 751.648877] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.655309] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.662715] device bridge_slave_0 entered promiscuous mode [ 751.698932] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.705359] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.712892] device bridge_slave_1 entered promiscuous mode [ 751.749496] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 751.785557] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 751.891009] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 751.930414] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 751.968192] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 751.975238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 752.012979] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 752.019923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 752.121572] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 752.128838] team0: Port device team_slave_0 added [ 752.164200] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 752.171664] team0: Port device team_slave_1 added [ 752.207715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 752.246834] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 752.284627] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 752.292253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 752.300873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 752.333731] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 752.340945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 752.350136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 752.709831] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.716246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 752.722992] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.729382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 752.737025] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 752.927544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 754.040124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.168913] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 754.292442] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 754.298677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 754.306834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 754.427880] 8021q: adding VLAN 0 to HW filter on device team0 [ 755.173060] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 755.184162] syz-executor2 cpuset=syz2 mems_allowed=0 [ 755.189404] CPU: 1 PID: 11719 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 755.196777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 755.206135] Call Trace: [ 755.208728] dump_stack+0x185/0x1d0 [ 755.212364] dump_header+0x2cc/0x16f0 [ 755.216159] ? is_console_locked+0x29/0x50 [ 755.220391] ? kmsan_report+0x4f/0x260 [ 755.224300] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 755.229772] ? ___ratelimit+0x67f/0x760 [ 755.233753] oom_kill_process+0x341/0x2160 [ 755.237985] ? mem_cgroup_scan_tasks+0x289/0x610 [ 755.242748] out_of_memory+0x1700/0x1da0 [ 755.246810] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 755.252188] ? _cond_resched+0x8b/0xd0 [ 755.256113] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 755.261315] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 755.266692] pagefault_out_of_memory+0x57/0x110 [ 755.271358] mm_fault_error+0x490/0x810 [ 755.275359] __do_page_fault+0x1272/0x1a10 [ 755.279604] ? page_fault+0x1e/0x30 [ 755.283226] do_page_fault+0xd3/0x260 [ 755.287021] ? page_fault+0x8/0x30 [ 755.290562] page_fault+0x1e/0x30 [ 755.294005] RIP: 0033:0x4071d8 [ 755.297183] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 755.302541] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 755.309800] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 755.317071] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 755.324346] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 755.331616] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 755.339342] Task in /syz2 killed as a result of limit of /syz2 [ 755.345493] memory: usage 804kB, limit 0kB, failcnt 752 [ 755.350913] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 755.357719] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 755.363911] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 755.383873] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 755.392692] [11719] 0 11719 17553 8393 114688 0 0 syz-executor2 [ 755.401611] Memory cgroup out of memory: Kill process 11719 (syz-executor2) score 8421000 or sacrifice child [ 755.411699] Killed process 11719 (syz-executor2) total-vm:70212kB, anon-rss:80kB, file-rss:33492kB, shmem-rss:0kB 2018/05/21 12:29:35 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) connect(r2, &(0x7f0000000040)=@l2={0x1f, 0x401, {0x3, 0x0, 0x7fff, 0x63, 0x400, 0x3}, 0xfffffffffffff28f, 0x7}, 0x80) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:29:35 executing program 5: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="7f", 0x1, r1) r3 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r1) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x2, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000200)={0x18, 0x3, 0x9000}, 0x4) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r3, r2}, &(0x7f0000000380)=""/238, 0xee, &(0x7f0000000100)={&(0x7f0000000080)={'crct10dif\x00'}}) 2018/05/21 12:29:35 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}, {0x0, 0xffffffff, 0x1800}], 0x2, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) 2018/05/21 12:29:35 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)="fc", 0x1, 0x1000000}]) 2018/05/21 12:29:35 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x200000) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000040)={0x5, 0x20, 0x7, 0x1, 0xfffffffffffffff7, 0xffffffffffffffff}) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) 2018/05/21 12:29:35 executing program 3: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0xffffffffffffff9c, 0x3, 0x0, 0xfffffffffffff9de, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = timerfd_create(0x2, 0x80800) r3 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x80800) ppoll(&(0x7f0000000180)=[{r0}, {r1, 0xa000}, {r2, 0x4}, {r3, 0x1}], 0x4, &(0x7f00000001c0), &(0x7f0000000200)={0x80000000}, 0x8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) 2018/05/21 12:29:35 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) r1 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0xb78a, 0x200000) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) getresgid(&(0x7f0000000240), &(0x7f0000000400)=0x0, &(0x7f0000000440)) fchownat(r1, &(0x7f0000000140)='./file0\x00', r2, r3, 0x400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e22, 0x6, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}, [0x8, 0x3f, 0x800, 0x1ff, 0x800, 0x6a5, 0x1, 0x813, 0x1000, 0x8, 0x8001, 0x5, 0x4, 0x3f, 0x4]}, &(0x7f0000000580)=0x100) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000008c0)={r4, @in6={{0xa, 0x4e21, 0xffffffff, @empty, 0x800000}}}, 0x37a) 2018/05/21 12:29:35 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) connect(r2, &(0x7f0000000040)=@l2={0x1f, 0x401, {0x3, 0x0, 0x7fff, 0x63, 0x400, 0x3}, 0xfffffffffffff28f, 0x7}, 0x80) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:29:35 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_submit(0x0, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)="fc", 0x1, 0x1000000}]) 2018/05/21 12:29:35 executing program 6: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="7f", 0x1, r1) r3 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r1) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r3, r2}, &(0x7f0000000380)=""/238, 0xee, &(0x7f0000000100)={&(0x7f0000000080)={'crct10dif\x00'}}) 2018/05/21 12:29:35 executing program 5: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="7f", 0x1, r1) r3 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000240)="b72554399ad338191bd00698f001aba09c7b5e32c189b20ad12465cfed32b7005c93353ea87e35a9221220b38bb0dcff3231a97f399ee83408ebb96ca84364c9f4639f18bf01c75424fe449a946be740390a7ac4953454b89dbc2f4027ff127d6c0124933bafe700de501ce16e2f0ce9b0446d006203f97dd11a42f817b5e116102cd9191e964685178fb0ce2ae1bccaa88575203f4131d683868a415519147c70cb2f90255bf5c0078165c3289826e2c32b2275dfe0fb5b40324cf4ad45142cca72e7b012f0d8b48214f009276d3da077848e38d666cc5c4cfda008d3121ec3820a121de325e3fea2e3699f", 0xec, r1) keyctl$reject(0x13, r3, 0x3ff, 0x400, r0) r4 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r1) keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r4, r2}, &(0x7f0000000380)=""/238, 0xee, &(0x7f0000000100)={&(0x7f0000000080)={'crct10dif\x00'}}) [ 755.699365] device bridge_slave_1 left promiscuous mode [ 755.705355] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.752958] device bridge_slave_0 left promiscuous mode [ 755.758868] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:29:35 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x100, 0x8) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2018/05/21 12:29:35 executing program 1: io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r0, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001200)="fc", 0x1, 0x1000000}]) [ 755.962420] team0 (unregistering): Port device team_slave_1 removed 2018/05/21 12:29:36 executing program 6: r0 = socket(0x10, 0x8000000803, 0x0) sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002400)=[{{&(0x7f0000000040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002380)}}], 0x1, 0x0, &(0x7f00000037c0)) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400000) sysinfo(&(0x7f0000000140)=""/46) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) [ 756.038488] team0 (unregistering): Port device team_slave_0 removed [ 756.106610] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 756.165256] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 756.220333] IPVS: ftp: loaded support on port[0] = 21 [ 756.232990] bond0 (unregistering): Released all slaves [ 757.470861] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.477316] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.484727] device bridge_slave_0 entered promiscuous mode [ 757.521128] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.527572] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.534964] device bridge_slave_1 entered promiscuous mode [ 757.570661] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 757.607159] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 757.713733] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 757.753285] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 757.911838] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 757.919184] team0: Port device team_slave_0 added [ 757.954617] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 757.961856] team0: Port device team_slave_1 added [ 757.997812] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 758.036595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 758.074433] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 758.081689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 758.090785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 758.121825] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 758.129038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 758.137626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 758.486829] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.493258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 758.500007] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.506400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 758.513960] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 758.527225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 759.827505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 759.954170] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 760.075755] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 760.082022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 760.090234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 760.216275] 8021q: adding VLAN 0 to HW filter on device team0 [ 760.946596] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 760.957658] syz-executor2 cpuset=syz2 mems_allowed=0 [ 760.962877] CPU: 0 PID: 12025 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 760.970249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 760.979596] Call Trace: [ 760.982186] dump_stack+0x185/0x1d0 [ 760.985807] dump_header+0x2cc/0x16f0 [ 760.989599] ? is_console_locked+0x29/0x50 [ 760.993827] ? kmsan_report+0x4f/0x260 [ 760.997715] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 761.003183] ? ___ratelimit+0x67f/0x760 [ 761.007178] oom_kill_process+0x341/0x2160 [ 761.011409] ? mem_cgroup_scan_tasks+0x289/0x610 [ 761.016177] out_of_memory+0x1700/0x1da0 [ 761.020239] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 761.025608] ? _cond_resched+0x8b/0xd0 [ 761.029503] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 761.034684] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 761.040071] pagefault_out_of_memory+0x57/0x110 [ 761.044735] mm_fault_error+0x490/0x810 [ 761.048722] __do_page_fault+0x1272/0x1a10 [ 761.052959] ? page_fault+0x1e/0x30 [ 761.056581] do_page_fault+0xd3/0x260 [ 761.060385] ? page_fault+0x8/0x30 [ 761.063919] page_fault+0x1e/0x30 [ 761.067363] RIP: 0033:0x4071d8 [ 761.070541] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 761.075897] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 761.083157] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 761.090415] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 761.097678] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 761.104937] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 761.112748] Task in /syz2 killed as a result of limit of /syz2 [ 761.118847] memory: usage 804kB, limit 0kB, failcnt 760 [ 761.124283] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 761.131111] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 761.137311] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 761.157250] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 761.166114] [12025] 0 12025 17553 8393 118784 0 0 syz-executor2 [ 761.175018] Memory cgroup out of memory: Kill process 12025 (syz-executor2) score 8422000 or sacrifice child [ 761.185123] Killed process 12025 (syz-executor2) total-vm:70212kB, anon-rss:80kB, file-rss:33492kB, shmem-rss:0kB [ 761.213192] oom_reaper: reaped process 12025 (syz-executor2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 2018/05/21 12:29:41 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffffffffffb, 0xfa, 0x7f, @buffer={0x0, 0xe4, &(0x7f0000000300)=""/228}, &(0x7f0000000400)="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", &(0x7f0000000500)=""/245, 0x4, 0x15, 0x1, &(0x7f0000000080)}) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000700)='/dev/rtc0\x00', 0x800, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000780)=0xffffffffffffff04) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000740)=0x1) r2 = request_key(&(0x7f0000000640)='logon\x00', &(0x7f0000000680)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000006c0)='/dev/hwrng\x00', 0x0) keyctl$assume_authority(0x10, r2) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20401, 0x0) connect$ipx(r3, &(0x7f0000000600)={0x4, 0xef5d, 0x303, "69882af76e43", 0x40}, 0x10) 2018/05/21 12:29:41 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x0, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)="fc", 0x1, 0x1000000}]) 2018/05/21 12:29:41 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0xa82, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000001580)=0x1b) writev(r0, &(0x7f0000000140), 0x0) 2018/05/21 12:29:41 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) connect(r2, &(0x7f0000000040)=@l2={0x1f, 0x401, {0x3, 0x0, 0x7fff, 0x63, 0x400, 0x3}, 0xfffffffffffff28f, 0x7}, 0x80) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:29:41 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}, {0x0, 0xffffffff, 0x1800}], 0x2, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) 2018/05/21 12:29:41 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) connect(r2, &(0x7f0000000040)=@l2={0x1f, 0x401, {0x3, 0x0, 0x7fff, 0x63, 0x400, 0x3}, 0xfffffffffffff28f, 0x7}, 0x80) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:29:41 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000001640)='/dev/amidi#\x00', 0x5, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000001680)={0x0, 0x9}, &(0x7f00000016c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000001700)=@sack_info={r2, 0x5, 0x75d}, &(0x7f0000001740)=0xc) 2018/05/21 12:29:41 executing program 5: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="7f", 0x1, r1) r3 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r1) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r3, r2}, &(0x7f0000000380)=""/238, 0xee, &(0x7f0000000100)={&(0x7f0000000080)={'crct10dif\x00'}}) 2018/05/21 12:29:41 executing program 6: r0 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x1f, 0x7, 0xffffffff, 0x2459df60, 0xffffffffffffffff, 0x9, 0x4, {0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x5, 0x8001, 0xffffffffffffffe0, 0xffffffff, 0x5}}, &(0x7f0000000180)=0xb0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x5, 0x8, 0x2, 0x7, 0x4, 0xd4a, 0x7, 0x7, r2}, &(0x7f0000000280)=0x20) accept4$inet6(r0, &(0x7f0000000000), &(0x7f0000000040)=0x1c, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) 2018/05/21 12:29:41 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(0x0, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)="fc", 0x1, 0x1000000}]) 2018/05/21 12:29:41 executing program 5: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="7f", 0x1, r1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x400000, 0x0) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000280)=""/31) r4 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r1) keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r4, r2}, &(0x7f0000000380)=""/238, 0xee, &(0x7f0000000100)={&(0x7f0000000080)={'crct10dif\x00'}}) r5 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000200)=0x4) 2018/05/21 12:29:41 executing program 3: socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000000)) r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x101000) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000080)=""/20) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) [ 761.499689] device bridge_slave_1 left promiscuous mode [ 761.505547] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.588829] device bridge_slave_0 left promiscuous mode [ 761.594711] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:29:41 executing program 5: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="7f", 0x1, r1) r3 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r1) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000240)='bic\x00', 0x4) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r3, r2}, &(0x7f0000000380)=""/238, 0xee, &(0x7f0000000100)={&(0x7f0000000080)={'crct10dif\x00'}}) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000180)) 2018/05/21 12:29:41 executing program 6: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="7f", 0x1, r1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x400000, 0x0) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000280)=""/31) r4 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r1) keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r4, r2}, &(0x7f0000000380)=""/238, 0xee, &(0x7f0000000100)={&(0x7f0000000080)={'crct10dif\x00'}}) r5 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000200)=0x4) 2018/05/21 12:29:41 executing program 1: syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r0, 0x0, &(0x7f0000001440)) [ 761.801245] team0 (unregistering): Port device team_slave_1 removed 2018/05/21 12:29:41 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) r1 = msgget$private(0x0, 0x40) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/162) [ 761.861290] team0 (unregistering): Port device team_slave_0 removed [ 761.921210] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 761.961270] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 762.085789] bond0 (unregistering): Released all slaves [ 762.160135] IPVS: ftp: loaded support on port[0] = 21 [ 762.994892] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.001346] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.008827] device bridge_slave_0 entered promiscuous mode [ 763.049299] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.055791] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.064132] device bridge_slave_1 entered promiscuous mode [ 763.103249] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 763.140219] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 763.239809] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 763.277697] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 763.315358] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 763.322268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 763.359926] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 763.366902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 763.471590] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 763.478832] team0: Port device team_slave_0 added [ 763.513948] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 763.521311] team0: Port device team_slave_1 added [ 763.556923] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 763.594951] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 763.632503] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 763.639969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 763.649016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 763.681636] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 763.688909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 763.698046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 764.048563] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.054996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.061769] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.068162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.075704] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 764.320719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 765.386301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.513413] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 765.639810] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 765.646177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 765.653653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 765.776553] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.518000] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 766.529147] syz-executor2 cpuset=syz2 mems_allowed=0 [ 766.534430] CPU: 0 PID: 12354 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 766.541803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 766.551249] Call Trace: [ 766.553841] dump_stack+0x185/0x1d0 [ 766.557463] dump_header+0x2cc/0x16f0 [ 766.561261] ? is_console_locked+0x29/0x50 [ 766.565492] ? kmsan_report+0x4f/0x260 [ 766.569385] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 766.574845] ? ___ratelimit+0x67f/0x760 [ 766.578829] oom_kill_process+0x341/0x2160 [ 766.583080] ? mem_cgroup_scan_tasks+0x289/0x610 [ 766.587844] out_of_memory+0x1700/0x1da0 [ 766.591905] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 766.597273] ? _cond_resched+0x8b/0xd0 [ 766.601183] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 766.606394] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 766.611767] pagefault_out_of_memory+0x57/0x110 [ 766.616430] mm_fault_error+0x490/0x810 [ 766.620414] __do_page_fault+0x1272/0x1a10 [ 766.624648] ? page_fault+0x1e/0x30 [ 766.628267] do_page_fault+0xd3/0x260 [ 766.632073] ? page_fault+0x8/0x30 [ 766.635611] page_fault+0x1e/0x30 [ 766.639064] RIP: 0033:0x4071d8 [ 766.642243] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 766.647601] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 766.654861] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 766.662120] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 766.669377] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 766.676637] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 766.684743] Task in /syz2 killed as a result of limit of /syz2 [ 766.690831] memory: usage 804kB, limit 0kB, failcnt 768 [ 766.696264] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 766.703140] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 766.709531] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 766.729461] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 766.738311] [12354] 0 12354 17553 8393 114688 0 0 syz-executor2 [ 766.747222] Memory cgroup out of memory: Kill process 12354 (syz-executor2) score 8421000 or sacrifice child [ 766.757294] Killed process 12354 (syz-executor2) total-vm:70212kB, anon-rss:80kB, file-rss:33492kB, shmem-rss:0kB [ 766.785431] oom_reaper: reaped process 12354 (syz-executor2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 2018/05/21 12:29:46 executing program 6: unshare(0x2000400) r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x8, 0x100) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000100)=""/4096) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') lseek(r1, 0x0, 0x0) 2018/05/21 12:29:46 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{}, {0x0, 0xffffffff, 0x1800}], 0x2, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) 2018/05/21 12:29:46 executing program 1: syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r0, 0x0, &(0x7f0000001440)) 2018/05/21 12:29:46 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x12, 0x0, 0x0, 0x3, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_x_nat_t_type={0x1, 0x14, 0x6}]}, 0x90}, 0x1}, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000100)={0x303, 0x33}, 0xfffffffffffffd9f) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) ioctl$TCXONC(r1, 0x540a, 0x358d) 2018/05/21 12:29:46 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) connect(r2, &(0x7f0000000040)=@l2={0x1f, 0x401, {0x3, 0x0, 0x7fff, 0x63, 0x400, 0x3}, 0xfffffffffffff28f, 0x7}, 0x80) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:29:46 executing program 5: sigaltstack(&(0x7f0000ffc000/0x3000)=nil, 0x0) r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="7f", 0x1, r1) r3 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r1) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r3, r2}, &(0x7f0000000380)=""/238, 0xee, &(0x7f0000000100)={&(0x7f0000000080)={'crct10dif\x00'}}) 2018/05/21 12:29:46 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) connect(r2, &(0x7f0000000040)=@l2={0x1f, 0x401, {0x3, 0x0, 0x7fff, 0x63, 0x400, 0x3}, 0xfffffffffffff28f, 0x7}, 0x80) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:29:46 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @multicast1=0xe0000001}}, 0x81, 0x24, 0x4, 0x1, 0x25}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000200)={r2, 0x3ff}, &(0x7f0000000240)=0x8) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/05/21 12:29:47 executing program 6: r0 = socket$inet6(0xa, 0x7, 0x0) sendmmsg(r0, &(0x7f0000007780)=[{{&(0x7f0000001040)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x80, &(0x7f00000011c0)=[{&(0x7f00000010c0)="0f", 0x1}], 0x1, &(0x7f0000001200)}}], 0x1, 0x0) 2018/05/21 12:29:47 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{}, {0x0, 0xffffffff, 0x1800}], 0x2, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) 2018/05/21 12:29:47 executing program 5: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="7f", 0x1, r1) prctl$getreaper(0x2d, &(0x7f0000000180)) r3 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r1) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r3, r2}, &(0x7f0000000380)=""/238, 0xee, &(0x7f0000000100)={&(0x7f0000000080)={'crct10dif\x00'}}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x2004, 0x0) getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000240)=0x2, &(0x7f0000000280)=0x4) [ 767.056817] device bridge_slave_1 left promiscuous mode [ 767.062620] bridge0: port 2(bridge_slave_1) entered disabled state 2018/05/21 12:29:47 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="09f3df46a0f4da3402030000160000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000ff"], 0xb0}, 0x1}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x102000, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000040)=0x2) [ 767.119680] device bridge_slave_0 left promiscuous mode [ 767.125491] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:29:47 executing program 1: syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r0, 0x0, &(0x7f0000001440)) 2018/05/21 12:29:47 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{}, {0x0, 0xffffffff, 0x1800}], 0x2, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) 2018/05/21 12:29:47 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYRES64=r0], 0xffffffffffffff62}, 0x1}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) getpriority(0x2, r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) fcntl$getflags(r2, 0x401) accept4$inet(r2, &(0x7f0000000180)={0x0, 0x0, @multicast1}, &(0x7f00000001c0)=0x10, 0x800) ioctl$sock_netrom_SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000140)) creat(&(0x7f0000000200)='./file0\x00', 0x9a) [ 767.331735] team0 (unregistering): Port device team_slave_1 removed 2018/05/21 12:29:47 executing program 6: r0 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="6d616e276c6500000e037e00c9d58471348a85000000000af765ebaa00000000000000000000000000000000002215803aa1b2cbcb001f00000006000040d67f20f0ea4a96b004006bb95573833264df7c2d03ad1200000000000029be4c95b0541602e22310a27608"], 0x1) 2018/05/21 12:29:47 executing program 5: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="7f", 0xffffff29, r1) r3 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r1) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r3, r2}, &(0x7f0000000380)=""/238, 0xee, &(0x7f0000000100)={&(0x7f0000000080)={'crct10dif\x00'}}) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, r0) [ 767.386465] team0 (unregistering): Port device team_slave_0 removed 2018/05/21 12:29:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001200)="fc", 0x1, 0x1000000}]) [ 767.476375] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 767.559608] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 767.687124] bond0 (unregistering): Released all slaves [ 767.756704] IPVS: ftp: loaded support on port[0] = 21 [ 768.540320] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.547526] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.555104] device bridge_slave_0 entered promiscuous mode [ 768.606150] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.612572] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.619916] device bridge_slave_1 entered promiscuous mode [ 768.674647] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 768.715679] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 768.826639] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 768.866992] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 768.904713] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 768.911686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 768.949761] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 768.956732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 769.059529] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 769.066769] team0: Port device team_slave_0 added [ 769.102321] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 769.109560] team0: Port device team_slave_1 added [ 769.145349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 769.185034] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 769.222890] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 769.230279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 769.238714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 769.270811] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 769.278182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 769.286605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 769.641015] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.647447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.654237] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.660628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 769.668269] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 769.888810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 770.981960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 771.110715] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 771.236674] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 771.242947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 771.251294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 771.374209] 8021q: adding VLAN 0 to HW filter on device team0 [ 772.124431] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 772.135512] syz-executor2 cpuset=syz2 mems_allowed=0 [ 772.140762] CPU: 0 PID: 12676 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 772.148146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 772.157497] Call Trace: [ 772.160089] dump_stack+0x185/0x1d0 [ 772.163720] dump_header+0x2cc/0x16f0 [ 772.167515] ? is_console_locked+0x29/0x50 [ 772.171742] ? kmsan_report+0x4f/0x260 [ 772.175633] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 772.181099] ? ___ratelimit+0x67f/0x760 [ 772.185088] oom_kill_process+0x341/0x2160 [ 772.189319] ? mem_cgroup_scan_tasks+0x289/0x610 [ 772.194102] out_of_memory+0x1700/0x1da0 [ 772.198169] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 772.203566] ? _cond_resched+0x8b/0xd0 [ 772.207463] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 772.212646] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 772.218014] pagefault_out_of_memory+0x57/0x110 [ 772.222685] mm_fault_error+0x490/0x810 [ 772.226669] __do_page_fault+0x1272/0x1a10 [ 772.230902] ? page_fault+0x1e/0x30 [ 772.234527] do_page_fault+0xd3/0x260 [ 772.238320] ? page_fault+0x8/0x30 [ 772.241859] page_fault+0x1e/0x30 [ 772.245305] RIP: 0033:0x4071d8 [ 772.248482] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 772.253838] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 772.261104] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 772.268364] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 772.275621] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 772.282881] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 772.290316] Task in /syz2 killed as a result of limit of /syz2 [ 772.296549] memory: usage 804kB, limit 0kB, failcnt 776 [ 772.302014] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 772.308840] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 772.315091] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 772.335113] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 772.343961] [12676] 0 12676 17553 8392 114688 0 0 syz-executor2 [ 772.352860] Memory cgroup out of memory: Kill process 12676 (syz-executor2) score 8420000 or sacrifice child [ 772.363032] Killed process 12676 (syz-executor2) total-vm:70212kB, anon-rss:76kB, file-rss:33492kB, shmem-rss:0kB 2018/05/21 12:29:52 executing program 2: sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f00001f9fe0)}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x8f0, 0xfffffffffffffffe}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2018/05/21 12:29:52 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) 2018/05/21 12:29:52 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300fc7602000029bc700000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000800000004000400000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00040000000000fe8000000000000000000000000000ff0000000000000000"], 0xb0}, 0x1}, 0x0) r1 = pkey_alloc(0x0, 0x3) pread64(r0, &(0x7f0000000000)=""/171, 0xab, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) 2018/05/21 12:29:52 executing program 5: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000002c0)="7f", 0x1, r1) r3 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r1) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x800, 0x0) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000000200)) keyctl$dh_compute(0x17, &(0x7f00000005c0)={r3, r2, r2}, &(0x7f00000004c0)=""/238, 0xee, &(0x7f0000000100)={&(0x7f0000000080)={'sha1-avx\x00'}}) ioctl$SG_EMULATED_HOST(r4, 0x2203, &(0x7f0000000280)) ioctl$RNDCLEARPOOL(r4, 0x5206, &(0x7f0000000140)=0x1f) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x8, [0x9, 0x80000000, 0x1, 0xdf0e, 0x7, 0x8000, 0x8, 0x8000000000000]}, &(0x7f0000000340)=0x14) 2018/05/21 12:29:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200), 0x0, 0x1000000}]) 2018/05/21 12:29:52 executing program 6: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000040)=r2) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 2018/05/21 12:29:52 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1a141, 0x20) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000240), &(0x7f0000000300)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000340)={0x8000, 0x8, 0x3, 0xfffffffffffffffa, 0x0}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000003c0)={r2, 0x6, 0xfffffffffffffbe0}, &(0x7f0000000400)=0x8) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000200)) write$cgroup_pid(r1, &(0x7f0000000140)={[0x31, 0x32, 0x33, 0x39, 0x36, 0x38, 0x31]}, 0x7) 2018/05/21 12:29:52 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) connect(r2, &(0x7f0000000040)=@l2={0x1f, 0x401, {0x3, 0x0, 0x7fff, 0x63, 0x400, 0x3}, 0xfffffffffffff28f, 0x7}, 0x80) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:29:52 executing program 6: r0 = socket$inet6(0xa, 0x802, 0x800) connect$inet6(r0, &(0x7f0000000000)={0xa}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(r0, &(0x7f00000077c0)=[{{&(0x7f0000000040)=@ethernet, 0x80, &(0x7f0000001300), 0x0, &(0x7f0000001380)}}, {{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002600)="a5", 0x1}, {&(0x7f0000002780)}], 0x2, &(0x7f00000029c0)}}, {{0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000004ec0)}], 0x1}, 0x3ff}, {{&(0x7f0000005040)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x80, &(0x7f0000007580)=[{&(0x7f00000050c0)="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", 0x1000}, {&(0x7f00000061c0)="3a4a178abb9e285160a8bcda4f2fec11743d1ab339f198277640b05a8fff1d133648e029", 0x24}, {&(0x7f0000007200)="cb632492b4d2642657b655fa2ae1ad9cd559aba4aede7d3ff66d59a3a141d9fce466b2647edc93b7224be0cde1e53622d46820f0fcc4d042a04574597db8c49d5f25c384252bc96754f659f53418dcbaf7167d836fbc0655b4e9005852ff71d5720344660774fa5ed49ace26cd5ec2e66a338de08977d47c901063f43559cced1a7d3b14e2152883e84b64613aa77aba66c653fbbed4", 0x96}, {&(0x7f0000007380)="aa594519d348bc7ad34a7979bc9d9fbd681f806478872a3b19307d27417ef9bce0d2eee99ccfb479c80dcb148e329a95a4d29f896247304404f3e5fc053faec5f3198413ff692f047f", 0x49}, {&(0x7f0000007480)="796364237183c09e41bdb907345a18f92a6d9999247bdd60cc3d4fd2d66eb2e28a87e9cf76c90f16393622469ae4de1eea9659604b100a014a37dfdd895eeab40238ca85d8fb01603d6835b5c29f4c0a02a6e1a7a63c1a3c9302a37c5fef980bb1065504db99acae2572c9fdb84d6ceb8076d76e3915cab45b61c5d6803730facbf9728a42dd980c10bc6aeec4b7ad88dbe0dbf29fa49677b2c44e6809f8f63fb7415b25b190ba56b1e35ca471597b81580dd14558dd3c89baa70fd8713245769cdd45943b3fa4d2d785b3d8a16f2ce7cbffc2b747a9aee6719b15d6bcdc7ce877e664695b89134cdb1bc7ba3dee32d943a3e1757e56a6339c59", 0xfa}], 0x5, &(0x7f0000007640)=ANY=[@ANYBLOB="40000000000000000a01000001000000e177c012c6c6b2b247b66cd2cdac86f052c5fa8eb6e98b2dc43ed3e01bbed29ad92878102f0000000a010000010000004e588e52faa00ee03f51ee9c094823c2cda15fe9c4983702a84487789a04766ac8007975bbf5b9100a2a8c89de5cf1a60cb20db5af0a765b493c79fbb1fe95a2fca364e8fb7777f0247d3dc510013800000000000000000000000000000000000000000000000000"], 0xa8, 0x8811}, 0xfffffffffffffffa}], 0x4, 0x41) [ 772.592460] could not allocate digest TFM handle sha1-avx 2018/05/21 12:29:52 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="02030000160000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000040004000000000000000000000000000000000000000000001fa631000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000ff0000000000498d37dc38e5eaaa39270140d558cfa0b8d67907a92c624eb3018e7231728997099830e4105dd420f481681c6a52405df6ad3d9607909fc5e6c6a40072174efde0e1e6faf5a634"], 0xb0}, 0x1}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x40400, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x5e, 0x4}, 'port0\x00', 0x10, 0x20000, 0x0, 0x2, 0x7, 0x8, 0x4, 0x0, 0x1, 0xe5}) 2018/05/21 12:29:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) [ 772.663960] could not allocate digest TFM handle sha1-avx [ 772.693404] device bridge_slave_1 left promiscuous mode [ 772.699326] bridge0: port 2(bridge_slave_1) entered disabled state 2018/05/21 12:29:52 executing program 5: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000180)='user\x00', 0x3) fcntl$setsig(r1, 0xa, 0x10) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r3 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="7f", 0x1, r2) r4 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r2) keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r4, r3}, &(0x7f0000000380)=""/238, 0xee, &(0x7f0000000280)={&(0x7f0000000080)={'ghash-generic\x00'}}) [ 772.760985] device bridge_slave_0 left promiscuous mode [ 772.766850] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:29:52 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r1, 0xca4}, &(0x7f0000000180)=0x8) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000040)=0xffff, 0x4) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) connect$unix(r2, &(0x7f000066fff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000000)={0x73, @broadcast=0xffffffff, 0x4e21, 0x3, 'ovf\x00', 0x20, 0xc2d7, 0x4a}, 0x2c) 2018/05/21 12:29:52 executing program 3: r0 = getpid() ptrace$getenv(0x4201, r0, 0x0, &(0x7f0000000180)) mq_open(&(0x7f0000000100)='posix_acl_accessvmnet1eth1\x00', 0x80, 0xc1, &(0x7f0000000140)={0x10000, 0x80000001, 0x7c5f, 0x6, 0x540525b2, 0x400, 0x2, 0x5}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="02030000160000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000040004000000000000000000196174feec50dac93f0f000000000000000000000000eaffffffffffffff0200010000000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000ff0000000000000000647aad1d12c8fcef0b98d6379c8dc9d762863129dda3a35cd53bde2464cf64316e36ad55e40dd621e57150a3cff5028548a57a6fa21026a0c7871495b4f2d55c019cd7"], 0xb0}, 0x1}, 0x0) 2018/05/21 12:29:53 executing program 1 (fault-call:2 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) [ 772.963179] team0 (unregistering): Port device team_slave_1 removed [ 773.013606] team0 (unregistering): Port device team_slave_0 removed [ 773.048816] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 773.090400] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 773.116289] FAULT_INJECTION: forcing a failure. [ 773.116289] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 773.128439] CPU: 1 PID: 12978 Comm: syz-executor1 Not tainted 4.17.0-rc5+ #101 [ 773.135836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 773.142037] IPVS: ftp: loaded support on port[0] = 21 [ 773.145216] Call Trace: [ 773.145258] dump_stack+0x185/0x1d0 [ 773.145299] should_fail+0x87b/0xab0 [ 773.145339] __alloc_pages_nodemask+0x61c/0x5dd0 [ 773.145399] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 773.145436] ? __list_add_valid+0xb8/0x450 [ 773.174954] ? kmsan_set_origin_inline+0x6b/0x120 [ 773.179847] ? is_console_locked+0x14/0x50 [ 773.184148] alloc_pages_current+0x6b5/0x970 [ 773.188609] pte_alloc_one+0x56/0x110 [ 773.192479] handle_mm_fault+0x43dd/0x7e50 [ 773.196776] ? filemap_fault+0x25f0/0x25f0 [ 773.201074] __do_page_fault+0xec4/0x1a10 [ 773.205368] ? page_fault+0x1e/0x30 [ 773.209040] do_page_fault+0xd3/0x260 [ 773.212885] page_fault+0x1e/0x30 [ 773.216378] RIP: 0010:__get_user_4+0x21/0x30 [ 773.220797] RSP: 0018:ffff880175adfc28 EFLAGS: 00010206 [ 773.226177] RAX: 00007fc31a9a5003 RBX: 0000000000000000 RCX: ffff880000000000 [ 773.233480] RDX: ffffffffffffffff RSI: aaaaaaaaaaaab000 RDI: ffffea0000000000 [ 773.240778] RBP: ffff880175adfc88 R08: 0000000001080020 R09: 0000000000000002 [ 773.248072] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88013cf41800 [ 773.255369] R13: 0000000000000000 R14: ffff880175adfc30 R15: ffff88019c206098 [ 773.262729] ? lookup_ioctx+0x8b/0x3b0 [ 773.266669] do_io_submit+0x2b9/0x2f60 [ 773.270619] ? __msan_poison_alloca+0x15c/0x1d0 [ 773.275330] ? syscall_return_slowpath+0xe9/0x700 [ 773.280217] ? prepare_exit_to_usermode+0x4a/0x3a0 [ 773.285251] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 773.290853] ? prepare_exit_to_usermode+0x149/0x3a0 [ 773.296016] ? syscall_return_slowpath+0x86/0x700 [ 773.300925] ? syscall_return_slowpath+0xe9/0x700 [ 773.305825] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 773.311427] ? fput+0x25c/0x2e0 [ 773.314772] __x64_sys_io_submit+0xda/0x110 [ 773.319139] do_syscall_64+0x154/0x220 [ 773.323080] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 773.328294] RIP: 0033:0x455a09 [ 773.331505] RSP: 002b:00007fc31abc5c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 773.339250] RAX: ffffffffffffffda RBX: 00007fc31abc66d4 RCX: 0000000000455a09 [ 773.346560] RDX: 0000000020001440 RSI: 0000000000000001 RDI: 00007fc31a9a5000 [ 773.353860] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 773.361170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 773.368470] R13: 000000000000018e R14: 00000000006f65f0 R15: 0000000000000000 [ 773.399499] bond0 (unregistering): Released all slaves [ 773.444522] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20001 ovf [ 773.492148] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20001 ovf [ 774.335471] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.341917] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.349361] device bridge_slave_0 entered promiscuous mode [ 774.400966] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.407427] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.414776] device bridge_slave_1 entered promiscuous mode [ 774.451869] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 774.490442] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 774.596850] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 774.637174] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 774.807001] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 774.814653] team0: Port device team_slave_0 added [ 774.851263] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 774.858825] team0: Port device team_slave_1 added [ 774.896321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 774.936618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 774.976139] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 774.983376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 774.992615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 775.025345] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 775.032546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 775.041800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 775.410638] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.417170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 775.423984] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.430436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 775.437971] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 775.496311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 776.815659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.946941] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 777.078433] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 777.084704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 777.092712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 777.221039] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.001575] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 778.012720] syz-executor2 cpuset=syz2 mems_allowed=0 [ 778.018266] CPU: 0 PID: 12979 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 778.025647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 778.034998] Call Trace: [ 778.037605] dump_stack+0x185/0x1d0 [ 778.041240] dump_header+0x2cc/0x16f0 [ 778.045057] ? is_console_locked+0x29/0x50 [ 778.049301] ? kmsan_report+0x4f/0x260 [ 778.053200] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 778.058673] ? ___ratelimit+0x67f/0x760 [ 778.062667] oom_kill_process+0x341/0x2160 [ 778.066902] ? mem_cgroup_scan_tasks+0x289/0x610 [ 778.071669] out_of_memory+0x1700/0x1da0 [ 778.075738] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 778.081122] ? _cond_resched+0x8b/0xd0 [ 778.085028] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 778.090231] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 778.095618] pagefault_out_of_memory+0x57/0x110 [ 778.100291] mm_fault_error+0x490/0x810 [ 778.104287] __do_page_fault+0x1272/0x1a10 [ 778.108532] ? page_fault+0x1e/0x30 [ 778.112163] do_page_fault+0xd3/0x260 [ 778.115969] ? page_fault+0x8/0x30 [ 778.119511] page_fault+0x1e/0x30 [ 778.122961] RIP: 0033:0x4071d8 [ 778.126138] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 778.131501] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 778.138769] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 778.146030] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 778.153312] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 778.160573] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 778.167938] Task in /syz2 killed as a result of limit of /syz2 [ 778.174128] memory: usage 804kB, limit 0kB, failcnt 784 [ 778.179565] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 778.186394] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 778.192607] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 778.212539] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 778.221403] [12979] 0 12979 17553 8393 118784 0 0 syz-executor2 [ 778.230328] Memory cgroup out of memory: Kill process 12979 (syz-executor2) score 8422000 or sacrifice child [ 778.240418] Killed process 12979 (syz-executor2) total-vm:70212kB, anon-rss:80kB, file-rss:33492kB, shmem-rss:0kB 2018/05/21 12:29:58 executing program 5: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='pids.events\x00', 0x0, 0x0) getsockopt$netlink(r2, 0x10e, 0xf, &(0x7f0000000200)=""/24, &(0x7f0000000240)=0x18) keyctl$revoke(0x3, r1) r3 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="7f", 0x1, r1) r4 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r1) fchmodat(r2, &(0x7f0000000000)='./file0\x00', 0xa0) keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r4, r3}, &(0x7f0000000380)=""/238, 0xee, &(0x7f0000000100)={&(0x7f0000000080)={'crct10dif\x00'}}) 2018/05/21 12:29:58 executing program 1 (fault-call:2 fault-nth:1): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:29:58 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) connect(r2, &(0x7f0000000040)=@l2={0x1f, 0x401, {0x3, 0x0, 0x7fff, 0x63, 0x400, 0x3}, 0xfffffffffffff28f, 0x7}, 0x80) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:29:58 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)) 2018/05/21 12:29:58 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x4000, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x109000, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x6, 0x2, 0xed, 0xfffffffffffffffc, 0x0, 0x9000000000000, 0x1401, 0xc, 0x8a, 0x6, 0x3, 0x8, 0x0, 0x1ff, 0x2, 0x10000, 0x9, 0x7, 0x1, 0x8, 0x101, 0x1ff, 0x7, 0x7, 0x3, 0x10000, 0x7fff, 0xfffffffffffffc1d, 0x9, 0x1, 0xffffffffffffffff, 0x5, 0x100000001, 0x63290cb3, 0x9, 0x10000, 0x0, 0xffffffffffff8001, 0x4, @perf_config_ext={0xffffffff, 0xea}, 0x88, 0x1ff800, 0x401, 0x7, 0x3, 0x40, 0x9}, r0, 0x4, r1, 0x8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300001600000000000000000000000400030000000000000000000000000000000000003de507a71c67000000000000000000000005000600000000000a000900000000000000000000000000000000000000000000001800000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000000a00000000000000fe8000000000000000000000000000ff00000000000000000000000000000000"], 0xb0}, 0x1}, 0x0) 2018/05/21 12:29:58 executing program 2: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth1_to_bond\x00', 0x20000005001}) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0x4000000080, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0000030000000000000060af04ca01082f000000000000000000000044b370bb57cb42810000000000000000000000000001047600000000000000000800000086dd080088be00000000100000000100000000000000080022eb0000000020000000020000000000000000000000080065580000000050acdef5a3519d62f43dfd62dfbddb61d9579c1338672e3903772471e34ffd1739819b0567d31657fb0d3261660fe7fb33a80b5059376961da4998bdfde0f9a1aebe6fc5cbf22fd711ec3c7bd18f20ddeda7c3f9cf54e3fd311822b8873511b0e31ae1994e99e1300e31f88e43b115b869afd543c4bc9e7cb9224ff031625327"], 0x1) 2018/05/21 12:29:58 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc), 0x4) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000080)={r2, r3/1000+30000}, 0x10) 2018/05/21 12:29:58 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000240)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}, 0x5}], 0x1, 0x0, &(0x7f0000004cc0)={0x77359400}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x14000, 0x0) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000140), &(0x7f0000000200)=0x4) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000300)={{0x1, 0xa7c443}, 'port1\x00', 0x54, 0x0, 0x1, 0x8, 0x8, 0x7, 0x101, 0x0, 0x4, 0x71}) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) [ 778.460353] device bridge_slave_1 left promiscuous mode [ 778.466301] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.528710] FAULT_INJECTION: forcing a failure. [ 778.528710] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 778.540905] CPU: 0 PID: 13256 Comm: syz-executor1 Not tainted 4.17.0-rc5+ #101 [ 778.548306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 778.557669] Call Trace: [ 778.560272] dump_stack+0x185/0x1d0 [ 778.563911] should_fail+0x87b/0xab0 [ 778.567638] __alloc_pages_nodemask+0x61c/0x5dd0 [ 778.572398] ? kernel_poison_pages+0x40/0x360 [ 778.576900] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 778.582274] ? kernel_poison_pages+0x1a0/0x360 [ 778.586867] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 778.592335] ? get_page_from_freelist+0xab28/0xb600 [ 778.597429] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 778.602809] ? page_counter_try_charge+0x205/0x5c0 [ 778.607752] ? page_counter_try_charge+0x4af/0x5c0 [ 778.612710] kmsan_alloc_meta_for_pages+0x8d/0x3a0 [ 778.617657] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 778.623034] ? try_charge+0x2522/0x2d50 [ 778.627025] ? kmsan_set_origin_inline+0x6b/0x120 [ 778.631880] ? __msan_poison_alloca+0x15c/0x1d0 [ 778.636564] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 778.641935] ? memcg_kmem_charge+0x703/0xa30 [ 778.646363] kmsan_alloc_page+0x82/0xe0 [ 778.650355] __alloc_pages_nodemask+0xf8e/0x5dd0 [ 778.655117] ? __wake_up_common+0x123/0xa60 [ 778.659449] ? _raw_spin_lock_irqsave+0x45/0xf0 [ 778.664130] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 778.669593] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 778.674969] ? kmsan_set_origin_inline+0x6b/0x120 [ 778.679829] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 778.685229] alloc_pages_current+0x6b5/0x970 [ 778.689667] pte_alloc_one+0x56/0x110 [ 778.693485] handle_mm_fault+0x43dd/0x7e50 [ 778.697737] ? filemap_fault+0x25f0/0x25f0 [ 778.701986] __do_page_fault+0xec4/0x1a10 [ 778.706148] ? page_fault+0x1e/0x30 [ 778.709787] do_page_fault+0xd3/0x260 [ 778.713592] page_fault+0x1e/0x30 [ 778.717049] RIP: 0010:__get_user_4+0x21/0x30 [ 778.721452] RSP: 0018:ffff880152f0fc28 EFLAGS: 00010206 [ 778.726817] RAX: 00007fc31a9a5003 RBX: 0000000000000000 RCX: ffff880000000000 [ 778.734090] RDX: ffffffffffffffff RSI: aaaaaaaaaaaab000 RDI: ffffea0000000000 [ 778.741366] RBP: ffff880152f0fc88 R08: 0000000001080020 R09: 0000000000000002 [ 778.748644] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88013cf41800 [ 778.755918] R13: 0000000000000000 R14: ffff880152f0fc30 R15: ffff88019c206098 [ 778.763210] ? lookup_ioctx+0x8b/0x3b0 [ 778.767115] do_io_submit+0x2b9/0x2f60 [ 778.771021] ? __msan_poison_alloca+0x15c/0x1d0 [ 778.775709] ? syscall_return_slowpath+0xe9/0x700 [ 778.780571] ? prepare_exit_to_usermode+0x4a/0x3a0 [ 778.785521] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 778.791013] ? prepare_exit_to_usermode+0x149/0x3a0 [ 778.796042] ? syscall_return_slowpath+0x86/0x700 [ 778.800898] ? syscall_return_slowpath+0xe9/0x700 [ 778.805751] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 778.811127] ? fput+0x25c/0x2e0 [ 778.814443] __x64_sys_io_submit+0xda/0x110 [ 778.818781] do_syscall_64+0x154/0x220 [ 778.822685] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 778.827878] RIP: 0033:0x455a09 [ 778.831065] RSP: 002b:00007fc31abc5c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 778.838784] RAX: ffffffffffffffda RBX: 00007fc31abc66d4 RCX: 0000000000455a09 [ 778.846060] RDX: 0000000020001440 RSI: 0000000000000001 RDI: 00007fc31a9a5000 [ 778.853344] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 778.860618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 778.867897] R13: 000000000000018e R14: 00000000006f65f0 R15: 0000000000000001 2018/05/21 12:29:58 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xa0}, 0x1}, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x6b0401) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180)) recvfrom$ax25(r1, &(0x7f0000000040)=""/224, 0xe0, 0x10043, &(0x7f0000000140)={0x3, {"7fef374c598dc1"}, 0x20}, 0x10) 2018/05/21 12:29:58 executing program 5: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="7f", 0x1, r1) r3 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r1) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r3, r2}, &(0x7f0000000380)=""/238, 0xee, &(0x7f0000000100)={&(0x7f0000000080)={'crct10dif\x00'}}) r4 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x3, 0x20000) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, &(0x7f0000000200)=0x7, 0x4) [ 778.885663] device bridge_slave_0 left promiscuous mode [ 778.891539] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:29:58 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x12, 0x400, 0x9, 0x4, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_ident={0x2, 0xb, 0x3, 0x0, 0x3}]}, 0x20}, 0x1}, 0x20000000) mkdir(&(0x7f0000000000)='./file0\x00', 0x40) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/05/21 12:29:59 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1=0xe0000001}, 0xf) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast1=0xe0000001, @loopback=0x7f000001, @multicast1=0xe0000001}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc) [ 779.085667] team0 (unregistering): Port device team_slave_1 removed 2018/05/21 12:29:59 executing program 5: r0 = add_key$keyring(&(0x7f0000001a00)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="7f", 0x1, r1) r3 = memfd_create(&(0x7f0000000280)='\x00', 0x2) ioctl$DRM_IOCTL_MAP_BUFS(r3, 0xc0186419, &(0x7f00000005c0)={0x6, &(0x7f00000004c0)=""/199, &(0x7f0000001900)=[{0x3, 0x16, 0x5, &(0x7f00000002c0)=""/22}, {0xce, 0xb8, 0xdb, &(0x7f0000000680)=""/184}, {0x6, 0x1d, 0x2, &(0x7f0000000300)=""/29}, {0x8000, 0x9a, 0x401, &(0x7f0000000740)=""/154}, {0x2, 0x1000, 0x8, &(0x7f0000000800)=""/4096}, {0x9, 0xf8, 0x8, &(0x7f0000001800)=""/248}]}) r4 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x1, 0x80000) fsetxattr(r4, &(0x7f0000000200)=@known='security.selinux\x00', &(0x7f0000000240)='\x00', 0x1, 0x2) r5 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r1) keyctl$dh_compute(0x17, &(0x7f0000000040)={r5, r5, r2}, &(0x7f0000000380)=""/238, 0xee, &(0x7f0000000100)={&(0x7f0000000080)={'crct10dif\x00'}}) [ 779.139486] team0 (unregistering): Port device team_slave_0 removed 2018/05/21 12:29:59 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="02030000160000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000ff0000000000000000cb1794732783090a09edf5115b113a2edae67bbf79da380d123282834aa6c4d9e147f67495cbb18597f500b2310d0fd786b0676876351f2d9a1ed954ee48e36a9f71e55aac2f02848053df13876b9f07870c02c210e05e3b1ce995aa955115073e03687bb30deb93f76330d9a9bbb3e574a21280c11c0d7a03c801fac9578b3c74ac68071331c91d78b908d18107573c9d02ec9178292de6b8c59c7144ae18933284236a02c9c3dc0347eb1990cc13d11e7c2860a0e535db64d8b231348e662a2ed7ec14dd512260a5127b545a00000000000000000000"], 0xb0}, 0x1}, 0x0) [ 779.186292] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 779.186746] IPVS: ftp: loaded support on port[0] = 21 [ 779.241375] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 779.352746] bond0 (unregistering): Released all slaves [ 780.316400] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.322840] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.330178] device bridge_slave_0 entered promiscuous mode [ 780.366814] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.373243] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.380636] device bridge_slave_1 entered promiscuous mode [ 780.417395] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 780.454691] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 780.558386] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 780.597447] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 780.762950] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 780.770368] team0: Port device team_slave_0 added [ 780.806185] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 780.813704] team0: Port device team_slave_1 added [ 780.849675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 780.888421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 780.926322] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 780.933524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 780.941997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 780.975529] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 780.982778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 780.991152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 781.353595] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.360044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 781.366792] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.373215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 781.380726] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 781.455311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 782.701840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 782.829285] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 782.951666] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 782.957911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 782.965956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 783.087548] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.831670] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 783.843358] syz-executor2 cpuset=syz2 mems_allowed=0 [ 783.848609] CPU: 1 PID: 13278 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 783.855985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 783.865327] Call Trace: [ 783.867916] dump_stack+0x185/0x1d0 [ 783.871535] dump_header+0x2cc/0x16f0 [ 783.875327] ? is_console_locked+0x29/0x50 [ 783.879552] ? kmsan_report+0x4f/0x260 [ 783.883442] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 783.888904] ? ___ratelimit+0x67f/0x760 [ 783.892884] oom_kill_process+0x341/0x2160 [ 783.897239] ? mem_cgroup_scan_tasks+0x289/0x610 [ 783.902000] out_of_memory+0x1700/0x1da0 [ 783.906083] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 783.911482] ? _cond_resched+0x8b/0xd0 [ 783.915377] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 783.920562] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 783.925932] pagefault_out_of_memory+0x57/0x110 [ 783.930594] mm_fault_error+0x490/0x810 [ 783.934579] __do_page_fault+0x1272/0x1a10 [ 783.938811] ? page_fault+0x1e/0x30 [ 783.942427] do_page_fault+0xd3/0x260 [ 783.946216] ? page_fault+0x8/0x30 [ 783.949748] page_fault+0x1e/0x30 [ 783.953191] RIP: 0033:0x4071d8 [ 783.956366] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 783.961719] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 783.968975] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 783.976234] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 783.983491] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 783.990751] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 783.998522] Task in /syz2 killed as a result of limit of /syz2 [ 784.004726] memory: usage 804kB, limit 0kB, failcnt 792 [ 784.010163] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 784.016988] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 784.023191] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 784.043173] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 784.051941] [13278] 0 13278 17553 8394 114688 0 0 syz-executor2 [ 784.060872] Memory cgroup out of memory: Kill process 13278 (syz-executor2) score 8422000 or sacrifice child [ 784.070923] Killed process 13278 (syz-executor2) total-vm:70212kB, anon-rss:84kB, file-rss:33492kB, shmem-rss:0kB 2018/05/21 12:30:04 executing program 5: r0 = memfd_create(&(0x7f0000000180)='crct10dif\x00', 0x1) getsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200), &(0x7f0000000240)=0x4) r1 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="7f", 0x1, r2) r4 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r2) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000280)=0x1f, &(0x7f0000000300)=0xfffffffffffffe86) keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r4, r3}, &(0x7f0000000380)=""/238, 0xee, &(0x7f0000000100)={&(0x7f0000000080)={'crct10dif\x00'}}) 2018/05/21 12:30:04 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x101000, 0x0) recvmmsg(r0, &(0x7f0000004140)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/153, 0x99}, {&(0x7f0000000100)}, {&(0x7f0000000140)=""/163, 0xa3}, {&(0x7f0000000200)}], 0x4, &(0x7f0000000280)=""/187, 0xbb, 0x7fffffff}, 0x43163034}, {{&(0x7f0000000340)=@rc, 0x80, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/38, 0x26}], 0x1, &(0x7f0000000440)=""/4096, 0x1000, 0x1}, 0x7ff}, {{&(0x7f0000001440)=@pppoe, 0x80, &(0x7f00000035c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/157, 0x9d}], 0x4, 0x0, 0x0, 0x4}, 0x9}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003600)=""/237, 0xed}, {&(0x7f0000003700)=""/205, 0xcd}, {&(0x7f0000003800)=""/2, 0x2}, {&(0x7f0000003840)=""/220, 0xdc}, {&(0x7f0000003940)=""/101, 0x65}, {&(0x7f00000039c0)=""/7, 0x7}, {&(0x7f0000003a00)=""/184, 0xb8}], 0x7, &(0x7f0000003b40)=""/224, 0xe0, 0x19a1}, 0x401}, {{&(0x7f0000003c40)=@nl=@unspec, 0x80, &(0x7f00000040c0)=[{&(0x7f0000003cc0)=""/41, 0x29}, {&(0x7f0000003d00)=""/236, 0xec}, {&(0x7f0000003e00)=""/84, 0x54}, {&(0x7f0000003e80)=""/108, 0x6c}, {&(0x7f0000003f00)=""/14, 0xe}, {&(0x7f0000003f40)=""/153, 0x99}, {&(0x7f0000004000)=""/99, 0x63}, {&(0x7f0000004080)=""/46, 0x2e}], 0x8, 0x0, 0x0, 0x5}, 0x62}], 0x5, 0x1, &(0x7f0000004280)={0x77359400}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) 2018/05/21 12:30:04 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:30:04 executing program 4 (fault-call:3 fault-nth:0): r0 = semget$private(0x0, 0x20000000104, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) 2018/05/21 12:30:04 executing program 7: clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)={r0, r1+30000000}) sendto(0xffffffffffffffff, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) r2 = accept$inet(0xffffffffffffff9c, &(0x7f0000000380)={0x0, 0x0, @remote}, &(0x7f00000003c0)=0x10) sendto(r2, &(0x7f0000000340)='fc', 0x2, 0x0, &(0x7f0000000480)=@ax25={0x3, {"b442f281e30b93"}, 0x7}, 0xfffffffffffffdad) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4801, 0x0) connect$llc(r3, &(0x7f0000000140)={0x1a, 0x308, 0x6, 0x5, 0x6, 0x4, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) 2018/05/21 12:30:04 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000a00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xa0, r1, 0x300, 0x70bd27, 0x25dfdbfb, {0x8}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1714d138}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6713}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000000}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x2}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1=0xe0000001}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000880)=0x0) fcntl$setstatus(r2, 0x4, 0x40400) io_submit(r3, 0x2000000000000099, &(0x7f0000000840)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x2, r2, &(0x7f00000001c0)="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", 0x0, 0x16f9, 0x0, 0x1, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, r2, &(0x7f0000000300)="4692311f7bdc2a01b9ac4e18751a583d9d9c33c39889358eb323093245e6096c90591170a4e09544b462e218d81a7cfdd3b0098da493527e352c99c573d8490ac0611e24feecf9c32e17f1bd5dea4ac35953e875a2c316b56e15c54d36deeb62ef646489011893e2321c0abb6ec2607a787ce95696e6db9ec7e75e295ce6578a328ce3e0e8f91e336c0e9a11f491ecfe8047be2ad4f96fc204132fcb66043fa69210d581969e6f99c535511d03c8ac9ef38e0c215653554fa434903cecd34e1451d90078c4f4b47a", 0x0, 0x3c8, 0x0, 0x0, r2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x3, 0x7fff, r2, &(0x7f0000000440)="0d08ec273ca09c5886f2fe23b91aa09d50b9a23a6f7e17987c5b5290adf1f508fc41947689d5e9f250bc3ca547d5e4da089a1eff45f7b2c0cd2c87a5f6b6ba26196c10a28d2e07f5b211f492bc2debcccbfe314fef368403d34dad4f0c7c18968ecd656dea4fdc81e79987dc4a9028541eed4067f4670f39b58ffd9391c829fae6df578d31862ff28e89f4981837b303a77b2324fbcd77473165d4944a459bae2e0c745be8c7c0d10eb5ea67", 0x0, 0x5, 0x0, 0x1, r2}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3, 0xfff, r2, &(0x7f0000000540)="d2898b487707726373a28ba00188de422c7944f95e4157fab0a1a2373d381fb963a5a4c5a5fbb18568aafe80f8bba0a1fc2cca0585144cd0e4c1b5a976385f2bd1c204d16ae7863befff8a9eb2df9df6bce98315879c38d637c84a1c0d3eaf39a749b0cf7c5ad33b9b1fc4d0674523b3dab07f4ddea8821232b69e4bd66f8ea4e967476d2d11cfb4db948da0aedc6962840e2a2df7452c53178cf4bc16ade0917171403ff7444c9b339c0cbead18231419b803b87591e1006c06b6", 0x0, 0x5, 0x0, 0x0, r2}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x5963, r2, &(0x7f0000000640)="8a93fb3f77ca4bf83bf278279cc3d1dbc7d2e83432d281322dd9e85444321a3d20eec573dd97d709f5611c05cf54e21bb664b3601b00b3951f5c8aa4db5a398f6d2f114d007c005b2b820f2ad4fc083e58dafe898fc76bac9d438d9ee3d867bf207a9f8f6d", 0x0, 0x1f, 0x0, 0x0, r2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x6, 0x3f, r2, &(0x7f0000000700)="40d66bd7416d6774b51d6a228f893a1f0ea583f7454a935bb1630366747f55a20df50e604822c0a25b08b8245a658424dd03fed91fd7a103d02d3c07625b61a7c745ce9596e6f652fb73d3ae293ce4011f3235ff408d30aa26e1a7a069df50be00d89c4f997c1f6c4cae340d72da5e8d494cd7ed70492e92a0cb7a2fa4d14032b7c6647a476696da8332c37b9d98a58afef43f33529e4034bc3810b4ba1aba0924797d9950087e88e22c83174c660789f3e52fca3ac1724395398f0d8e3d89b874c157de02b5b2922adec448ad652fbfcd55c6832a15b3b4c2c64960d520", 0x0, 0xfffffffffffffff7, 0x0, 0x1, r2}]) chroot(&(0x7f0000000000)='./file0\x00') 2018/05/21 12:30:04 executing program 6: capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x109000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000040)={0x8, 0x1, 'client1\x00', 0x1, "4774a91e18b262f7", "c79c2f70ec996ee7beefcdad14f7705e0d9228e628c18895dd00e80163206ccf", 0xb8, 0x9}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000180)="011908000000f5bfcb", 0x9) 2018/05/21 12:30:04 executing program 2: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x100, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) 2018/05/21 12:30:04 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x400, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000140)={0x7, 0x2, 0xffff, 0xbc3, 0x5, 0x0, 0x1, 0x81, 0x5, 0x9, 0x4, 0x2a7d}) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/05/21 12:30:04 executing program 6: r0 = add_key$keyring(&(0x7f0000001a00)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="7f", 0x1, r1) r3 = memfd_create(&(0x7f0000000280)='\x00', 0x2) ioctl$DRM_IOCTL_MAP_BUFS(r3, 0xc0186419, &(0x7f00000005c0)={0x6, &(0x7f00000004c0)=""/199, &(0x7f0000001900)=[{0x3, 0x16, 0x5, &(0x7f00000002c0)=""/22}, {0xce, 0xb8, 0xdb, &(0x7f0000000680)=""/184}, {0x6, 0x1d, 0x2, &(0x7f0000000300)=""/29}, {0x8000, 0x9a, 0x401, &(0x7f0000000740)=""/154}, {0x2, 0x1000, 0x8, &(0x7f0000000800)=""/4096}, {0x9, 0xf8, 0x8, &(0x7f0000001800)=""/248}]}) r4 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x1, 0x80000) fsetxattr(r4, &(0x7f0000000200)=@known='security.selinux\x00', &(0x7f0000000240)='\x00', 0x1, 0x2) r5 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r1) keyctl$dh_compute(0x17, &(0x7f0000000040)={r5, r5, r2}, &(0x7f0000000380)=""/238, 0xee, &(0x7f0000000100)={&(0x7f0000000080)={'crct10dif\x00'}}) [ 784.322752] device bridge_slave_1 left promiscuous mode [ 784.328703] bridge0: port 2(bridge_slave_1) entered disabled state 2018/05/21 12:30:04 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000740)='/dev/sequencer2\x00', 0x400000, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={r0, 0x7, 0x1, 0x5, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) ioctl$sock_SIOCGIFCONF(r1, 0x8910, &(0x7f0000000000)=@req) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000100)={{0x3, 0x7, 0x6, 0x6, "20d63eec823e537a1dd63fc575bb959bf88008dbc30e6f498108aa65731a680b4e4fa9b3d4c5069979282a61", 0xffffffffffffffff}, 0x4, [0x1f, 0x6, 0x0, 0x3, 0x8, 0x100, 0x1, 0x8c, 0x7, 0x3, 0x81, 0x0, 0x7fff, 0x5, 0x80000001, 0x80000001, 0x800, 0x90, 0xfffffffffffffffe, 0x1, 0x101, 0xd1, 0x7, 0x80000001, 0x100000000, 0x6, 0x2, 0x8000, 0x7ff, 0x1, 0xfffffffffffffffd, 0x4, 0x5, 0x1000, 0xe253, 0xffff, 0x200, 0x5, 0x2, 0x38, 0x2, 0x0, 0x5, 0x4, 0xbf2, 0x8001, 0x8000, 0xba7, 0x5c, 0x100000001, 0x400, 0x1, 0x2f, 0x10000, 0x8, 0xc2, 0x8, 0x3, 0x1d, 0x3, 0x7fff, 0x4, 0xffff, 0x8, 0x2, 0x2, 0x9, 0x5, 0x100000000, 0x4, 0x8, 0x100000, 0x3, 0x5, 0x10000, 0x7ff, 0x4, 0x2, 0x800, 0x9, 0x3ff, 0xb9, 0x6, 0xacb7, 0x54aec1c3, 0x7f, 0x80, 0xb70, 0x9, 0x4, 0x1, 0x4, 0x6, 0x2ac0, 0x7fffffff, 0x8ea, 0x5, 0x6, 0x40, 0x7, 0xbe8b, 0x0, 0x7f, 0xfffffffffffffff7, 0x1, 0x82d6, 0x7, 0x69, 0x80000001, 0x81, 0x3, 0x0, 0x1000000, 0x1, 0x5, 0x68, 0x0, 0x3ff, 0x200000, 0x100, 0xe3, 0x1, 0x632, 0x20, 0x400, 0x57, 0x6, 0x400], {0x77359400}}) getpeername$ipx(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10) vmsplice(r1, &(0x7f0000000a80)=[{&(0x7f00000007c0)="691a5d8b964723e7a85bfafc67dd0e1cd1fe71b094082c53a1f38c0a14dc1bfb4f61d2a65e0cdbcc54d739e6222c8721b183be1a9af49a26101f88710993596eef60d4bbb0792d1d86ef1fa87c8f27cd5181a171642d55dcad39e6491393d0323b66e7a990e3d3cc37ce8546b5b0c3c854fb3fbeffa82b81aea2af67ab3654dd0336b5ce32da11d690364101d0cddbfc8ca4d6e7d8ad5ad0465b4b607c9f28b0bebd7d76efa52984984aece85893f11f8620093dd1", 0xb5}, {&(0x7f0000000880)="f89f9e8926b540dad359729949a0a981fd1bf7aa4e80bde9d076541a875e444196b6146966e6618c93a7e46412e00f079613c9124d8d0ba16f34661bd6684de8250abe91df6eeb7e5b87f3ed251701b0f664e8861b25099bdc070ae4414a3cc49097a77144ede87521b84f383922959bc29487574a77895ddb759b2b597807e5c72cca36cf8d98f5c56fe0ac1625c7837c3507391e8f078b0c35ea68c025c91b1c562c70ecfff73ee9012cd411eabe84dd113f0b2eecbe76edaa81d0d2e51c776bf2fd1844a1667f7046352f3996728257e86064fb63095c01052505e8e4", 0xde}, {&(0x7f0000000980)="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", 0xfd}], 0x3, 0xf) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000700)={'ip_vti0\x00', {0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}}) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000600)=ANY=[@ANYBLOB="02030000160000000000000000000000040003000800000000000000000000000000000000000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000ff0000000000000000e2e9b701b54750f92217d9538f2b67ffed1c094a18a03425e357b97dbb2db1091421f661933c08d8a51e3d2e90ce24fbc090f37f9e"], 0xb0}, 0x1}, 0x0) 2018/05/21 12:30:04 executing program 5: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) keyctl$get_persistent(0x16, r2, r0) r3 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="7f", 0x1, r1) r4 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r1) keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r4, r3}, &(0x7f0000000380)=""/238, 0xee, &(0x7f0000000100)={&(0x7f0000000080)={'crct10dif\x00'}}) [ 784.415924] device bridge_slave_0 left promiscuous mode [ 784.421736] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:30:04 executing program 1: io_setup(0x100000001, &(0x7f00000000c0)=0x0) io_submit(r0, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001200)}]) 2018/05/21 12:30:04 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) r1 = socket(0x2, 0x2000080003, 0x2) getsockopt$sock_int(r1, 0x1, 0x13, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f00000000c0)) [ 784.606346] team0 (unregistering): Port device team_slave_1 removed 2018/05/21 12:30:04 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02030000160000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000004000400000000000000000000000000000000000000000000000001000000000200010000000000000013000000000005000500000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0xb0}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x40, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbff, [@sadb_sa={0x2, 0x1, 0x4d2, 0x1, 0xffffffffffff8800, 0x99, 0x2, 0x40000001}, @sadb_ident={0x2, 0xb, 0xffffffffffffffe1, 0x0, 0xffffffffffff157a}, @sadb_x_nat_t_type={0x1, 0x14, 0x100}]}, 0x38}, 0x1}, 0x8800) 2018/05/21 12:30:04 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8002, &(0x7f00000001c0)=0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000000)=[{0x4, 0x8, 0xfffffffffffffff7, 0x8}, {0x40, 0x4, 0x5, 0x20}, {0x4, 0x2, 0x8, 0x236}, {0x1, 0x3, 0x4, 0x7}, {0x82, 0x400, 0x9, 0xff}, {0x6, 0x4, 0x6, 0x209b}]}) io_setup(0xfffffffffffffff8, &(0x7f0000000080)) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) [ 784.668581] team0 (unregistering): Port device team_slave_0 removed 2018/05/21 12:30:04 executing program 5: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000180)="7f", 0x1, r1) r3 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r1) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r3, r2}, &(0x7f0000000380)=""/238, 0xee, &(0x7f0000000100)={&(0x7f0000000080)={'crct10dif\x00'}}) [ 784.738990] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 784.807760] bond0 (unregistering): Releasing backup interface bond_slave_0 2018/05/21 12:30:04 executing program 6: semget$private(0x0, 0x0, 0x1) [ 784.981585] bond0 (unregistering): Released all slaves [ 784.988160] IPVS: ftp: loaded support on port[0] = 21 [ 785.013785] FAULT_INJECTION: forcing a failure. [ 785.013785] name failslab, interval 1, probability 0, space 0, times 0 [ 785.025217] CPU: 0 PID: 13621 Comm: syz-executor4 Not tainted 4.17.0-rc5+ #101 [ 785.032614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 785.042000] Call Trace: [ 785.044641] dump_stack+0x185/0x1d0 [ 785.048321] should_fail+0x87b/0xab0 [ 785.052085] __should_failslab+0x278/0x2a0 [ 785.056390] should_failslab+0x29/0x70 [ 785.060319] __kmalloc_node+0x236/0x11f0 [ 785.064417] ? security_capable+0x1c5/0x200 [ 785.068797] ? kvmalloc_node+0x1a1/0x2e0 [ 785.072901] ? semctl_main+0x47f/0x5890 [ 785.076930] kvmalloc_node+0x1a1/0x2e0 [ 785.080856] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 785.086270] semctl_main+0x50c/0x5890 [ 785.090125] ? kstrtouint_from_user+0x373/0x410 [ 785.094864] ? kmsan_set_origin_inline+0x6b/0x120 [ 785.099782] ? kmsan_set_origin+0x9e/0x160 [ 785.104076] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 785.109503] ? fsnotify+0x480/0x1860 [ 785.113277] ? kmsan_set_origin_inline+0x6b/0x120 [ 785.118182] ? __msan_poison_alloca+0x15c/0x1d0 [ 785.122915] ? __x64_sys_semctl+0x11e/0x170 [ 785.127298] ? ksys_semctl+0x7f/0x5d0 [ 785.131155] ? __x64_sys_semctl+0x11e/0x170 [ 785.135528] ksys_semctl+0x2ef/0x5d0 [ 785.139300] ? syscall_return_slowpath+0xe9/0x700 [ 785.144204] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 785.149641] __x64_sys_semctl+0x11e/0x170 [ 785.153924] do_syscall_64+0x154/0x220 [ 785.157846] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 785.163061] RIP: 0033:0x455a09 [ 785.166272] RSP: 002b:00007f5fc90f8c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 785.174017] RAX: ffffffffffffffda RBX: 00007f5fc90f96d4 RCX: 0000000000455a09 [ 785.181312] RDX: 0000000000000011 RSI: 0000000000000000 RDI: 0000000000148028 [ 785.188608] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 785.195905] R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000014 [ 785.203202] R13: 0000000000000573 R14: 00000000006fc368 R15: 0000000000000000 [ 786.048121] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.054594] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.061998] device bridge_slave_0 entered promiscuous mode [ 786.098772] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.105213] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.112759] device bridge_slave_1 entered promiscuous mode [ 786.148943] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 786.186137] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 786.293626] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 786.333456] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 786.371776] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 786.378972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 786.515801] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 786.523194] team0: Port device team_slave_0 added [ 786.559621] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 786.566876] team0: Port device team_slave_1 added [ 786.604575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 786.642027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 786.681037] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 786.688370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 786.697677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 786.730333] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 786.737530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 786.746941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 787.109724] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.116163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 787.122927] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.129326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.137026] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 787.231583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 788.479108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.608749] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 788.735681] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 788.741920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 788.750195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 788.872942] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.621622] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 789.632694] syz-executor2 cpuset=syz2 mems_allowed=0 [ 789.638125] CPU: 0 PID: 13618 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 789.645507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 789.654875] Call Trace: [ 789.657466] dump_stack+0x185/0x1d0 [ 789.661108] dump_header+0x2cc/0x16f0 [ 789.664919] ? is_console_locked+0x29/0x50 [ 789.669160] ? kmsan_report+0x4f/0x260 [ 789.673075] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 789.678556] ? ___ratelimit+0x67f/0x760 [ 789.682543] oom_kill_process+0x341/0x2160 [ 789.686778] ? mem_cgroup_scan_tasks+0x289/0x610 [ 789.691550] out_of_memory+0x1700/0x1da0 [ 789.695616] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 789.700992] ? _cond_resched+0x8b/0xd0 [ 789.704914] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 789.710101] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 789.715845] pagefault_out_of_memory+0x57/0x110 [ 789.720514] mm_fault_error+0x490/0x810 [ 789.724501] __do_page_fault+0x1272/0x1a10 [ 789.728747] ? page_fault+0x1e/0x30 [ 789.732369] do_page_fault+0xd3/0x260 [ 789.736183] ? page_fault+0x8/0x30 [ 789.739717] page_fault+0x1e/0x30 [ 789.743168] RIP: 0033:0x4071d8 [ 789.746347] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 789.751718] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 789.758980] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 789.766243] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 789.773506] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 789.780764] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 789.788295] Task in /syz2 killed as a result of limit of /syz2 [ 789.794521] memory: usage 804kB, limit 0kB, failcnt 800 [ 789.799962] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 789.806770] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 789.812984] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 789.832962] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 789.841774] [13618] 0 13618 17553 8394 114688 0 0 syz-executor2 [ 789.850673] Memory cgroup out of memory: Kill process 13618 (syz-executor2) score 8422000 or sacrifice child [ 789.860764] Killed process 13618 (syz-executor2) total-vm:70212kB, anon-rss:84kB, file-rss:33492kB, shmem-rss:0kB 2018/05/21 12:30:09 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02030080160000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000004000400000000000000000000000000000000000000000000200000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0xb0}, 0x1}, 0x0) 2018/05/21 12:30:09 executing program 6: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x3, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) socket$kcm(0x29, 0x7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/kcm\x00\b\x00') readv(r1, &(0x7f0000000000)=[{&(0x7f0000f44000)=""/100, 0x64}, {&(0x7f0000ea5000)=""/4096, 0x1000}], 0x2) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000140)={{{@in6}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000240)=0xe8) syz_open_dev$urandom(&(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x20000) 2018/05/21 12:30:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) fremovexattr(r0, &(0x7f00000001c0)=@random={'system.', "2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b"}) 2018/05/21 12:30:09 executing program 5: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="7f", 0x1, r1) r3 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r1) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x101202, 0x0) ioctl$KDDISABIO(r4, 0x4b37) sendmsg$kcm(r4, &(0x7f00000002c0)={&(0x7f0000000200)=@sco={0x1f, {0x2, 0x7, 0xe923, 0x4, 0xffffffffffff0001, 0x1000}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000004c0)="5b8ff370191e082fed224ec3d68393f801b8b2d7cb98d6fba04b7cdc9d2ad3c4839c3970e8e858217960b5e01a0d8ca162c2d186be4eb4ff0282aa02c2facda122b8c19e1611d819267ee565765ae5cde5ff1214af8783ba1b007ba910c5e5882e688aad2ceb342f9881b8d6656bddedae32bbd1ade6b129be839b147ee19e38953fba13056ac944e13a9d2b2e678c8289a099acaa42d2bff562a5c274bb62b37a89fab8e255fccb8e81e27385b2a5e2bb8c4317e206a91a15d699843a10f239695b743bd75d22566edc70bd396e9f1bd40bdd9e9b8f12e49ac6066b62b4505bc798a81b3f6887b1037f263803a8", 0xee}], 0x1, &(0x7f0000000680)=[{0xd8, 0x119, 0x1ff, "f2f50c0af0bfb0d1a92856a046eead121b9754b67a77f0fbbc84258eb9dbcd098f784bdb9c4a041fa9ec765e8badb8ef7afbd0d27302bf30e9dfac0b2895db53e9200e65d7df66ec153ae8a1c6eaef3318dfae4a322198daeb66644da44d91d5d1f79fbdfbb14046c7f92532a018b966581cc857e3bf74a17b014ceb52c42a81239bdeba7ea3ef0358ea488abc3d4a27a1c99d2e3da27e2652a2f6380f22da6b929cfb5be403828149e3ee49ac92123479df9cdd40d85f2737983d4ee088ec89e1466d7c9f34b4"}, {0xa0, 0x13a, 0x2, "cd078c7c89f9be585a37968f24ff4f8a73cd45911c31a656cf0dda668ba083063696c91f4649c467a61ad1f5873c672beb8f44ed0d06c2b748920558ccd6b1e8ca592d8fe928e1bf78c2dbab942427ab9156eb517789f06bcaf7984bca16645791414584c90d807377ab4af971c499b8c36826d2cff3b2d721648266383c30c5ac2091fd3d0ccea162b166c8cd119c"}], 0x178, 0x40}, 0x24000000) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r2, r2}, &(0x7f0000000380)=""/238, 0xee, &(0x7f0000000100)={&(0x7f0000000080)={'crct10dif\x00'}}) 2018/05/21 12:30:09 executing program 4: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0x7ff, 0x4) r0 = semget$private(0x0, 0x20000000104, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) 2018/05/21 12:30:09 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:30:09 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x6, 0x200000) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000140)={@empty, @multicast2=0xe0000002}, 0x8) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/05/21 12:30:09 executing program 2: r0 = gettid() ptrace$setopts(0xffffffffffffffff, r0, 0xfffffffffffffffd, 0x1) getpgrp(r0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000480)={0x0, 0x7}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000005c0)={r2, 0x88, &(0x7f0000000500)=[@in={0x2, 0x4e21, @rand_addr}, @in={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e21, @multicast1=0xe0000001}, @in={0x2, 0x4e22, @rand_addr=0x9}, @in6={0xa, 0x4e22, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x3}, @in6={0xa, 0x4e24, 0x8, @loopback={0x0, 0x1}, 0x1000}, @in={0x2, 0x4e21}]}, &(0x7f0000000600)=0x10) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x0}]}) r4 = socket$inet(0xa, 0x801, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f00000006c0)={'ipvs\x00'}, &(0x7f0000000680)=0xffffffffffffff36) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x100000001, {0x2, 0x4e23, @multicast2=0xe0000002}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, {0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, 0x0, 0x1ff, 0x8, 0x401, 0x8, 0x0, 0x7fffffff, 0xe5c, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000240)={0x2f, @broadcast=0xffffffff, 0x4e20, 0x3, 'wrr\x00', 0x4, 0x7, 0x6e}, 0x2c) r5 = request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000100)='\x00', 0xfffffffffffffffc) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000280)={r3, &(0x7f00000003c0)=""/120}) r6 = request_key(&(0x7f0000000140)='.dead\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000001c0)='\x00', 0xfffffffffffffffc) keyctl$reject(0x13, r5, 0x6, 0x100, r6) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000340)={0x0, {0x2, 0x0, @multicast1=0xe0000001}, {0x2, 0x0, @rand_addr}, {0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x0, 0x0, 0xfffffffffffffffe, 0x200000cbe}) 2018/05/21 12:30:10 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:30:10 executing program 6: r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x800, 0x0) ioctl$TIOCNXCL(r1, 0x540d) bind$rds(r0, &(0x7f0000000180)={0x2, 0x1000000001, @rand_addr=0x8000}, 0x10) getpeername(r0, &(0x7f0000000040)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, &(0x7f00000000c0)=0x80) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000100)={r0, 0x6}) 2018/05/21 12:30:10 executing program 5: r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$describe(0x6, r0, &(0x7f00000004c0)=""/205, 0xcd) r1 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="7f", 0x1, r2) keyctl$describe(0x6, r3, &(0x7f0000000200)=""/90, 0x5a) r4 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x6, 0x200000) ioctl$TIOCEXCL(r4, 0x540c) r5 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r2) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_DMA(r4, 0xc0406429, &(0x7f0000000800)={r6, 0x5, &(0x7f00000005c0)=[0x8f, 0x400, 0xffffffffffffff81, 0x80, 0x2], &(0x7f0000000740)=[0x8001, 0x7, 0xffffffffffff8001, 0x1, 0xffffffffffffff00, 0x80000001, 0x2, 0x200, 0x9], 0x42, 0x6, 0x1, &(0x7f0000000780)=[0x8, 0x2, 0x5, 0x7ff, 0x3, 0x100], &(0x7f00000007c0)=[0x4]}) keyctl$get_security(0x11, r2, &(0x7f0000000680)=""/168, 0xa8) keyctl$dh_compute(0x17, &(0x7f0000000040)={r5, r5, r3}, &(0x7f0000000380)=""/238, 0xee, &(0x7f0000000100)={&(0x7f0000000080)={'crct10dif\x00'}}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000840)={0xc13, 0x5, 0x1, 0x1ff, 0x20000, 0x702, 0x0, 0x1f, 0x0}, &(0x7f0000000880)=0x20) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000008c0)={r7, 0x6}, 0x8) 2018/05/21 12:30:10 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02030000160000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000004000400000000000000000000000000000000000000000007000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0xb0}, 0x1}, 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000000)) [ 790.158613] device bridge_slave_1 left promiscuous mode [ 790.164472] bridge0: port 2(bridge_slave_1) entered disabled state 2018/05/21 12:30:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x9005, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) [ 790.230885] device bridge_slave_0 left promiscuous mode [ 790.236678] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:30:10 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:30:10 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3, 0x10100) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x10) [ 790.451563] team0 (unregistering): Port device team_slave_1 removed [ 790.529733] team0 (unregistering): Port device team_slave_0 removed [ 790.590687] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 790.646361] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 790.714511] bond0 (unregistering): Released all slaves [ 790.730592] IPVS: ftp: loaded support on port[0] = 21 [ 791.866951] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.873375] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.880792] device bridge_slave_0 entered promiscuous mode [ 791.916632] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.923140] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.930314] device bridge_slave_1 entered promiscuous mode [ 791.966522] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 792.002801] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 792.104883] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 792.143358] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 792.304759] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 792.312118] team0: Port device team_slave_0 added [ 792.347331] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 792.354635] team0: Port device team_slave_1 added [ 792.389970] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 792.428990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 792.465920] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 792.473310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 792.481814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 792.514902] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 792.522276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 792.530809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 792.909604] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.916120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 792.922812] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.929244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 792.936768] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 792.959468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 794.324776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 794.457210] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 794.594242] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 794.600543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 794.608772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 794.738785] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.508154] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 795.519236] syz-executor2 cpuset=syz2 mems_allowed=0 [ 795.524462] CPU: 1 PID: 13933 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 795.531838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 795.541187] Call Trace: [ 795.543780] dump_stack+0x185/0x1d0 [ 795.547409] dump_header+0x2cc/0x16f0 [ 795.551216] ? is_console_locked+0x29/0x50 [ 795.555450] ? kmsan_report+0x4f/0x260 [ 795.559346] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 795.564810] ? ___ratelimit+0x67f/0x760 [ 795.568793] oom_kill_process+0x341/0x2160 [ 795.573045] ? mem_cgroup_scan_tasks+0x289/0x610 [ 795.577841] out_of_memory+0x1700/0x1da0 [ 795.581908] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 795.587285] ? _cond_resched+0x8b/0xd0 [ 795.591200] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 795.596388] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 795.601768] pagefault_out_of_memory+0x57/0x110 [ 795.606434] mm_fault_error+0x490/0x810 [ 795.610424] __do_page_fault+0x1272/0x1a10 [ 795.614669] ? page_fault+0x1e/0x30 [ 795.618291] do_page_fault+0xd3/0x260 [ 795.622101] ? page_fault+0x8/0x30 [ 795.625651] page_fault+0x1e/0x30 [ 795.629117] RIP: 0033:0x4071d8 [ 795.632295] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 795.637650] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 795.644914] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 795.652184] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 795.659442] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 795.666703] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 795.674151] Task in /syz2 killed as a result of limit of /syz2 [ 795.680522] memory: usage 804kB, limit 0kB, failcnt 808 [ 795.685970] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 795.692797] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 795.699025] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 795.719009] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 795.727876] [13933] 0 13933 17553 8393 118784 0 0 syz-executor2 [ 795.736785] Memory cgroup out of memory: Kill process 13933 (syz-executor2) score 8422000 or sacrifice child [ 795.746894] Killed process 13933 (syz-executor2) total-vm:70212kB, anon-rss:80kB, file-rss:33492kB, shmem-rss:0kB [ 795.774813] oom_reaper: reaped process 13933 (syz-executor2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 2018/05/21 12:30:15 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:30:15 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat\x00') ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0x400000000000003, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x21, 0x18, 0x0, 0x9, 0xfd, "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"}, @sadb_x_policy={0x8, 0x12, 0x1, 0x0, 0x0, 0x0, 0x2, {0x6, 0xff, 0x1, 0x7, 0x0, 0x9, 0x0, @in6=@dev={0xfe, 0x80, [], 0x10}, @in=@local={0xac, 0x14, 0x14, 0xaa}}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x1b0}, 0x1}, 0xfffffffffffffffc) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@reserved=0x1}) 2018/05/21 12:30:15 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:30:15 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xdaa8, 0x10000) sendto$inet6(r1, &(0x7f00000000c0)="e58ad3407012fee0529239c8c29bcc2424419d208e131249b8b37fd98aacb2b64ffeeae40e84c59de906179165496577fd7b11a729a4b1643a572c882fa66f547958f7873c589f735e220455fd061e0442e29d9ef806c87d9a", 0x59, 0x4, &(0x7f0000000040)={0xa, 0x4e21, 0x400, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, 0x1c) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) 2018/05/21 12:30:15 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x7, 0x8, 0x80000001, 0xb0, 0x14, r1, 0x7}, 0x2c) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000200)=""/116) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/05/21 12:30:15 executing program 5: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="7f", 0x1, r1) r3 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r1) r4 = memfd_create(&(0x7f0000000180)='keyring\x00', 0x2) io_setup(0x0, &(0x7f0000000280)=0x0) io_cancel(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x4, r4, &(0x7f00000002c0)="5b76785f54b76bdbd063903f4729d56cf48c59151dffd53cafae710c4e27f14cf204cc1e350786d5b2d1f8f48c6ea9fb1b961da00afcdf13fd96fd2cc96bb0a6ade71d55343801953a47e2158b20ad3d581130743a1f35835e3775ababd054817b3308543f4f75c7553c7b355f8e63b9e59cf2e93b7c3628d8cb27fd9d", 0x7d, 0x100, 0x0, 0x0, r4}, &(0x7f0000000500)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x125000, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000240)={0x3, r6}) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r3, r2}, &(0x7f0000000380)=""/238, 0xee, &(0x7f0000000100)={&(0x7f0000000080)={'crct10dif\x00'}}) 2018/05/21 12:30:15 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000040)={0x81, 0x5}) sendfile(r0, r1, &(0x7f0000000000), 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) fdatasync(r0) 2018/05/21 12:30:15 executing program 2: umount2(&(0x7f0000000000)='./file0/\x00', 0x1) mount(&(0x7f0000000180)='./file0/\x00', &(0x7f00000000c0)='./file0/', &(0x7f0000000240)='cgroup\x00', 0x0, 0x0) mount(&(0x7f0000000140)='.', &(0x7f0000000040)='.', &(0x7f0000000100)='cgroup\x00', 0x0, &(0x7f00000000c0)) 2018/05/21 12:30:16 executing program 6: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2241, 0x0) write$binfmt_elf32(r0, &(0x7f0000000b40)={{0xfffffffd, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcd3, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) 2018/05/21 12:30:16 executing program 3: r0 = accept$packet(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000016c0)=0x14) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x10080, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001740)={0x4, &(0x7f0000001700)=[{0xa7d9, 0x0, 0xfffffffffffffff9}, {0x8, 0x0, 0x2, 0xfffffffffffffe00}, {0x4, 0x1, 0x80000000, 0x100000001}, {0x3, 0x1ff, 0xf3e7, 0x4}]}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203000016000000000000000000000004000300000000000000000000000000000000000000000000000000000000000500060000000000080000000000000000000000000000000000000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a40000000000000fe8000000000000000000000000000ff000000000000000023af6a8fdd4215076436db5882e0bc8336e37f8d2128e7ad3e501c"], 0xb0}, 0x1}, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0xa9c9, 0x84000) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0xffffffff00000001) 2018/05/21 12:30:16 executing program 5: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="7f", 0x1, r1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x200000, 0x0) getsockopt$inet_mreq(r3, 0x0, 0x0, &(0x7f0000000200)={@multicast2, @multicast2}, &(0x7f0000000240)=0x8) r4 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r1) keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r4, r2}, &(0x7f0000000380)=""/238, 0xee, &(0x7f0000000100)={&(0x7f0000000080)={'crct10dif\x00'}}) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000280)) [ 796.096667] device bridge_slave_1 left promiscuous mode [ 796.102593] bridge0: port 2(bridge_slave_1) entered disabled state 2018/05/21 12:30:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x101, @remote={0xfe, 0x80, [], 0xbb}, 0x81}}, 0x9, 0x3, 0x7c, 0x9, 0x8}, &(0x7f0000000000)=0x98) io_setup(0x8001, &(0x7f0000000300)=0x0) io_submit(r2, 0x3, &(0x7f0000000640)=[&(0x7f0000000740)={0x0, 0x68526feed2e4e6d6, 0x0, 0x6, 0x0, r0, &(0x7f0000000340)="e673569d269d6b369e27a4d4f8a954e54c0c1ff8d66b7fadc6b16819a102564c34847e63d6792eda093329c9720a546d38b16e4587542c98f566794e2af62e42b47e4f0a382fc636b5de8fd3dd9b90e1cd7ec4b906d395a01c4736062f6ca685ec08764d1997145297b3bed0ac4fc7a981dc1a4fd4ebb2b79dbacadf5a1567deab48d524d3ebf81683ddee57b36407343b00d649da8a0f80486013087821fc0cf6c98d30cf7670f6", 0x3ea, 0xfc, 0x0, 0x1, r0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x8000, r0, &(0x7f0000000440)="ed30da6685e2c5a6083056c6f3abf157665dfea4ea9fb2167e4b710f77e27e0002eea04cf1be7948254af832d2eec4831592f90106c09df6276be31764fc65c0392956b3cd3e4bd7b26cf172ec1a0e252c7127b90acdb90335053cbcfbbc98ead2f08b05d22b38a0e26258ae19ebf9f4c16483a55be290834698b9e1a4381bf83937179a5d65b923d08db91d52c6846da82e92db4cd797e8ab1bbe2708652110149aa1106bb02641312d04e62796ba97", 0xb0, 0x2, 0x0, 0x0, r0}, &(0x7f0000000600)={0x0, 0xfffffffffffffffd, 0x0, 0x7, 0x1, r0, &(0x7f0000000680)="702911749b7f6af97d9fd7e37fada8dd825ca9d4ad63a3a4abaa0bf231a2d332c7f1501210e623cfe8aeb32cbc09a82fefdc04d65056270b94b61eb6a984b28c64fa22f1f953ccfbc03758785bfe8d244b2ae6f3b007e441afbbf2dfc16ee09e3d53c5772b24206c9bb7c9c5a48e47e0bc5e1b8d5586c9a9b7eee2999f3095046366aeca191a67dce63e4051cb6b22d5ad85cd383fe21d8bf0fb8c568f062ce0c226bf2ec18e7b9efb45ad", 0xab, 0x9, 0x0, 0x1, r0}]) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000280)={r1, 0x5}, &(0x7f00000002c0)=0x8) io_setup(0x8001, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) [ 796.170957] device bridge_slave_0 left promiscuous mode [ 796.176885] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:30:16 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0xa, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x7, "a4a1d5fce9017c"}, &(0x7f0000000100)=0xf) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x6f, 0xcde5664e238b20d4, 0x4, 0xffffffffffff728c, r3}, 0x10) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r4 = accept(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000000c0)=0x80) fchdir(r0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000300)=@sack_info={0x0, 0x1}, 0xc) 2018/05/21 12:30:16 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd2c, 0x3505}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x98}, 0x1}, 0x0) 2018/05/21 12:30:16 executing program 5: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x48001) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000680)=""/4096, &(0x7f0000000200)=0x1000) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) exit_group(0x0) r3 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="7f", 0x1, r2) r4 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r2) keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r4, r3}, &(0x7f0000000380)=""/238, 0xee, &(0x7f0000000100)={&(0x7f0000000080)={'crct10dif\x00'}}) [ 796.394980] team0 (unregistering): Port device team_slave_1 removed [ 796.462126] team0 (unregistering): Port device team_slave_0 removed [ 796.509233] bond0 (unregistering): Releasing backup interface bond_slave_1 2018/05/21 12:30:16 executing program 5: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/sctp\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in6, @in=@rand_addr}}, {{@in=@remote}, 0x0, @in=@rand_addr}}, &(0x7f00000002c0)=0xe8) r3 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="7f", 0x1, r1) r4 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb, r4) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x408201, 0x0) getsockname$ax25(r5, &(0x7f0000000200), &(0x7f0000000240)=0x10) r6 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r1) keyctl$dh_compute(0x17, &(0x7f0000000040)={r6, r6, r3}, &(0x7f0000000380)=""/238, 0xee, &(0x7f0000000100)={&(0x7f0000000080)={'crct10dif\x00'}}) [ 796.552533] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 796.603754] IPVS: ftp: loaded support on port[0] = 21 [ 796.653038] bond0 (unregistering): Released all slaves [ 797.904304] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.910739] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.918225] device bridge_slave_0 entered promiscuous mode [ 797.954418] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.960854] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.968440] device bridge_slave_1 entered promiscuous mode [ 798.004304] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 798.040424] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 798.144813] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 798.184948] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 798.350750] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 798.358371] team0: Port device team_slave_0 added [ 798.393560] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 798.400790] team0: Port device team_slave_1 added [ 798.436798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 798.476315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 798.515388] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 798.522659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 798.531773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 798.565603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 798.936694] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.943905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 798.950655] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.957112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 798.964692] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 799.904243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 800.330795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.461308] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 800.591268] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 800.597525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 800.605734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 800.731158] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.487342] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 801.498405] syz-executor2 cpuset=syz2 mems_allowed=0 [ 801.503643] CPU: 1 PID: 14246 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 801.511036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 801.520399] Call Trace: [ 801.523001] dump_stack+0x185/0x1d0 [ 801.526624] dump_header+0x2cc/0x16f0 [ 801.530421] ? is_console_locked+0x29/0x50 [ 801.534648] ? kmsan_report+0x4f/0x260 [ 801.538560] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 801.544019] ? ___ratelimit+0x67f/0x760 [ 801.548002] oom_kill_process+0x341/0x2160 [ 801.552231] ? mem_cgroup_scan_tasks+0x289/0x610 [ 801.556993] out_of_memory+0x1700/0x1da0 [ 801.561071] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 801.566440] ? _cond_resched+0x8b/0xd0 [ 801.570335] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 801.575521] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 801.580890] pagefault_out_of_memory+0x57/0x110 [ 801.585556] mm_fault_error+0x490/0x810 [ 801.589543] __do_page_fault+0x1272/0x1a10 [ 801.593784] ? page_fault+0x1e/0x30 [ 801.597400] do_page_fault+0xd3/0x260 [ 801.601190] ? page_fault+0x8/0x30 [ 801.604723] page_fault+0x1e/0x30 [ 801.608167] RIP: 0033:0x4071d8 [ 801.611350] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 801.616710] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 801.623974] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 801.631232] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 801.638491] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 801.645750] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 801.653448] Task in /syz2 killed as a result of limit of /syz2 [ 801.659542] memory: usage 804kB, limit 0kB, failcnt 816 [ 801.664969] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 801.671796] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 801.677999] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 801.697976] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 801.706792] [14246] 0 14246 17553 8393 114688 0 0 syz-executor2 [ 801.715719] Memory cgroup out of memory: Kill process 14246 (syz-executor2) score 8421000 or sacrifice child [ 801.725824] Killed process 14246 (syz-executor2) total-vm:70212kB, anon-rss:80kB, file-rss:33492kB, shmem-rss:0kB [ 801.753555] oom_reaper: reaped process 14246 (syz-executor2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 2018/05/21 12:30:21 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x40) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) 2018/05/21 12:30:21 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x0, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200), 0x0, 0x69}]) 2018/05/21 12:30:21 executing program 4: r0 = semget$private(0x0, 0x2, 0x280) r1 = dup(0xffffffffffffff9c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x11, 0xe0, &(0x7f0000000000)="f6e625ed57069fb8c88938e5315cd4620f", &(0x7f0000000180)=""/224, 0x80}, 0x28) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r2, 0x300, 0x70bd28, 0x25dfdbff, {0x3}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_IPPROTO={0x8, 0x3}]}, 0x34}, 0x1}, 0x20000800) semtimedop(r0, &(0x7f00000000c0)=[{0x0, 0xffffffff, 0xfffffffffffffffc}], 0x1, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) 2018/05/21 12:30:21 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:30:21 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000003c0)=0x7) sendmsg(r0, &(0x7f0000001980)={&(0x7f0000000400)=@ethernet={0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000480)="f1bc43cfe7434ba25ee93d48f9ea6b54b04ff9a1dabfe5a1faf428fe85dff0e43e4199fa6cec329d3f0b82bdc48d2146facbfe70fed57a139f7a35f410a99adfda3ff0beb136ebab9b40995b0d1b34033b37a5d8565be0103b67cf", 0x5b}, {&(0x7f0000000500)="31b0bd33c2a02f9e405617847516d0fd97bc814c5524a7b785a4af77fa8569f202e2b11128b495e5299c2e3817a581f21cdf4a7fae1f703cb7ea83b4534d3b30649a79e50bc9072d63adc995d0f3faa7feda495c6772eadbe0489b69089c3ba98fd61df7ddd8ae699ad12ea39b395a20cb640ec436fcefcf4197e2832568172d77d5c008aef08e714988e4f4903d507bbc5315cdbf7c7813501fbe4b0582ce4667a43d9d8ca82b5a0d17d042b00de6bb83aeca21d0ec197c92f274b595f637f57165d05d27c24a3b5ccac8a75d09b358e8f6e70748f943aa2eaf0c55bd24d6250fdf5239ec839d7d3ad4e0b2f3681e042316b60f870fd3a9", 0xf8}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="1c62c2322a073cf5", 0x8}, {&(0x7f0000001640)="09721af7fe0260fa16787005995644f2e5c4297bb66e48fd06c39b924529fbc81b0e271d28a2f52c825528a054b989a9d0c810b80f3ee5c530371db13363b405f08e95fe82f49e68458ea01a5fc6d7ff6ee84da8b5aca91a3770bdcaa92e9cdaf47866669d58b4faa813cf3e1074bffd92aef27756c2006080f2e0c9711fc00425faa12515cface1327685957356052580667a8568c8206df012ea6897ed4709ab7e250181777421890296dba203c042ac75e949d9", 0xb5}, {&(0x7f0000001700)="a139b62a8239880b5e09aa6cd16e6aee83d2bb1acc8407a7f29701908f83c5a9cbc380221cfc53d30529", 0x2a}, {&(0x7f0000001740)}, {&(0x7f0000001780)="6654503fb930384adb3c69b29f255aad5c2550de6ebe6f3cc10b0ac50ca67aa480b79f64e1558a5cc54bb384c8450be2b37b7387876b45114071691e3a0a6913b8cefd6b1a710456aeb32e7a3a39de4de8c31fa5a2b8e706106e92149d2fec199a9e1e0987ca152385014e011a49158ca5f808d9956fc1805336e560e17602ed02fe633bd007896d01a8e1f0174e", 0x8e}, {&(0x7f0000001840)="3a2cda6605716287846ab09e3a75509f78294a5c111e9d8cd1f4c02ac27365f6377499d70345b634afeab6fbc767a24f437df638c3fb514c2a0c97783bb1588eaef245d189135849109f6572a8", 0x4d}], 0x9, &(0x7f0000002880)=[{0x18, 0x1ff, 0x1f, "0cd92ee232"}, {0x1010, 0x116, 0x3b6e, "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"}, {0x100, 0x184, 0x8, "c592322f16ed0858514c7cf38b9fdfc57540d6f4aeed1b0c1cc6c4e6f095d3a1c84f2dacd03dc8672120f9f2288556db656b7c8664bdb4035b93375ceda81deb5551cc629420ffb8ce8dd2fe6012da3ea07592a3cc47676c88f97d3df802bc7aabe1c16743f013e5643ca09663943568a0d94c42c98e1a777c41cca1b3d64ea54ff005ae2f4849817f96ec424e987fcbe141afd856e930f91319270d61906549d533b4fac559ad790e8fc8c52a7a9d31faea9a39b859717e1bf9dbba66f4bea01db6575aae06f3fc94192e29e7b76405ac547603ad012b954a8b6dd511f811cca93f19554c313ac85b8b"}, {0xb0, 0x111, 0x8, "b40d7c7491402193b71e7790c8b4269e4aef19d2ac2ed41c1904eeceac2e355874dd69b92f5f739ad839a8178f61c48e0786ea8e81246552fc24605e2e4a4f386c8b768d513b65c2d5aaa5b925075edbcc1c187f5349754da73e9db989ef109302ec76bdb839f01515222c02f003db6dcdca66e2d33fa336bef98eccd5ee7853c57a04342d4fdff80307fb3c47be15c7536997c7ac6446561258e3645a"}, {0x28, 0x116, 0x100000000, "d06920e123daec325cbf1757fa0a7f3f41b8869c"}, {0xf8, 0x11, 0x0, "d634ec7a41c9109b3d982945b22d7aa6c288e78de623508788b8c42a1663abe6b18d0c5136af1b8042723fbcb6bc8eb433d4661a8cf259a0ea2e253b52fa5549209bebb0812635f768036dd4576384e46546b5f236b2dcedb298361866c5b697261bbde655cc0aceefed94964d1ba357b65ea4cc06be6556c7a02e12c79b6cb324f806fee85f1be2af276f7a1cbbd2264746c8049c7634155e05c091c46b30817108401a877e1b2140a9f0f5ce0f04b5e4a0b402f17830d9cf1bbbe573fe99038a2653cd2f94251c252303426b564e48d120895dd7a2b23b9c2b111d9b23409ba344ba76"}], 0x12f8, 0x20000000}, 0x8004) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000080)={'ifb0\x00', 0x10000}) r1 = semget$private(0x0, 0x0, 0x320) semop(r1, &(0x7f0000000140)=[{0x0, 0x3, 0x1800}], 0x1) sendto(r0, &(0x7f0000000300)="e32d02b8060f1c7c6f11bf36dfea608dd0c6135ebb114bc1b8aa401b5cffefe6c6dc9f71cacd95f5a930085e37bfc9d43d5d825ac5283fff080e554576d3708c93efe7fa6cd6dff36d8488cdde4a617e189cbebed38654e3a6a3ec0a910e16ef55eca8c743cc2473565c49179a0724eaac09e713de533e66e8449b73406cb88e64d0889b0d17544a396831cfae1ba7671375acbb5b2dc1de50b9bb336d9630bd1f407534e471c30c1574a2a7802432", 0xaf, 0x20008000, &(0x7f0000000200)=@llc={0x1a, 0x33f, 0x92c, 0xc89c, 0x8001, 0x40, @link_local={0x1, 0x80, 0xc2}}, 0x80) 2018/05/21 12:30:21 executing program 6: r0 = socket$inet6(0xa, 0x45, 0x7) connect$inet6(r0, &(0x7f0000000c00)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, [], 0x1}}, 0x1c) membarrier(0xab12e4603b812ef6, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind(r1, &(0x7f0000000180)=@generic={0x1d, "27e6bbbc07b9e371ed90254668518492f24bfe18eef83cf029d6034022037adbabc74ba85cf6070e1deab64064a557fb741b2eb90f8e563319bf79c4a8e843f03e37d5a96eab536c71f7543cbbbd951a438f33bad528c046d4c1b0ee1b15825185ed9dfcf6bd49fd8e6765a0bc12069340d3a77dce4e2b77e56694aae621"}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000140)={0x3, 0x7, 0x48, 0x9}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x2000, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x6, 0x860, [0x0, 0x20000200, 0x200004a0, 0x20000660], 0x0, &(0x7f0000000040), &(0x7f0000000a80)=ANY=[@ANYBLOB="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"]}, 0x8df) 2018/05/21 12:30:21 executing program 5: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="7f", 0x1, r1) r3 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r1) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r3, r2}, &(0x7f0000000380)=""/238, 0xee, &(0x7f0000000100)={&(0x7f0000000080)={'crct10dif\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000180)={r3, r2, r3}, &(0x7f0000000200)=""/136, 0x88, &(0x7f0000000300)={&(0x7f00000002c0)={'sha512\x00'}, &(0x7f00000004c0)="9697e0e772d944a0462cbb07a38fc66f984e2b4a4053d8901c3e7ca4e2d274e917b77a5cbbe31da26167d12cda181766ae73f876ab69cc84c3216ebdfcc309ea3500373a482349477fdef01ca6f4ba2613045ee8fc2c05ea9cc4fbbc4462d06446ec3e2a280dd9c1280bb2ec0fb2d80d49292b85ada710fc42423775b9a7a97a832261fdf0", 0x85}) 2018/05/21 12:30:21 executing program 2: r0 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x2610}) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x124, 0x4000) getsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000200)=""/225, &(0x7f0000000100)=0xe1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454de, &(0x7f0000000040)) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) fcntl$getflags(r0, 0x1) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000080)='veth0_to_bridge\x00') 2018/05/21 12:30:22 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3, 0x400000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000180)={{0x8, 0x0, 0x8, 0x3, "7b0ae32b52e7d6a041df68fd8e8c4f9b26fa76b63f2335df967ac0eb89299224376d9deade0b33aa48c63732"}, 0x237eb4c8, [0x101, 0x6, 0xc6, 0xe542, 0xc0d, 0x2, 0xdc0, 0x4, 0x4, 0x2, 0x971, 0xfff, 0x114, 0x1, 0x9, 0x8, 0x1, 0x5, 0xffffffffffffffff, 0xffff, 0xa1, 0xfc1, 0x4, 0x3, 0x0, 0x4, 0xfffffffffffffff9, 0x5da, 0x10000, 0x0, 0x3, 0xffffffff, 0x8936, 0x5, 0x81, 0x2, 0x3, 0x0, 0x2, 0xe98, 0x5, 0x7e, 0x1, 0x1, 0x7, 0xcf24, 0x0, 0xff, 0x1, 0x8, 0x7, 0x0, 0x101, 0xa30, 0x1, 0x7, 0x4, 0x8000, 0x6, 0x1, 0x9, 0x1, 0x1000000, 0x1800, 0x5d, 0x81, 0x5, 0x80000000, 0x2, 0x1, 0x1, 0x0, 0x3, 0x1, 0x4, 0x8000000000000000, 0x8, 0xe65, 0xffffffff7fffffff, 0x1f, 0x7, 0x7fffffff, 0x3ff, 0x1, 0x1, 0x7fff, 0x0, 0x2, 0x101, 0x800, 0xfffffffffffffffd, 0x9, 0x5, 0x3, 0x3, 0x1, 0x3, 0x7fffffff, 0x80000000, 0xd49, 0x1f, 0x42, 0x200, 0x20, 0x1, 0x6, 0x40, 0xb5f, 0x7, 0xfffffffffffffff8, 0x100000001, 0x5, 0x8, 0x4, 0xffff, 0xad, 0x2cd, 0x0, 0x3, 0x2800000000, 0x1f, 0x3f, 0x1, 0x6, 0x20, 0x3, 0x2, 0x7fffffff], {0x77359400}}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) [ 801.991859] device bridge_slave_1 left promiscuous mode [ 801.997795] bridge0: port 2(bridge_slave_1) entered disabled state 2018/05/21 12:30:22 executing program 5: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="7f", 0x1, r1) r3 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r1) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r2, r2}, &(0x7f0000000380)=""/238, 0xee, &(0x7f0000000100)={&(0x7f0000000080)={'crct10dif\x00'}}) 2018/05/21 12:30:22 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) socket$key(0xf, 0x3, 0x2) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x10, 0x80800) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0xffffffffffffffff, 0x2, 0x1, 0x1ff, &(0x7f00000000c0)}, 0x20) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000140)={0x9, 0x9, 0x6, 0x3ff, 0xb079, 0x6, 0x8, 0x100000000000, 0x10001, 0x4, 0x1}, 0xb) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) [ 802.054460] device bridge_slave_0 left promiscuous mode [ 802.060367] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:30:22 executing program 1: r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000001200)}]) r3 = shmget(0x0, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000ffa000/0x3000)=nil, 0x0) syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x7, 0x40) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/32) [ 802.253553] team0 (unregistering): Port device team_slave_1 removed 2018/05/21 12:30:22 executing program 5: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) keyctl$read(0xb, r0, &(0x7f0000000180)=""/27, 0x1b) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="7f", 0x1, r1) r3 = socket$netlink(0x10, 0x3, 0x1f) fstat(r3, &(0x7f0000000280)) r4 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r1) keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r4, r2}, &(0x7f0000000380)=""/238, 0xee, &(0x7f0000000100)={&(0x7f0000000080)={'crct10dif\x00'}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x0, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0) [ 802.295038] team0 (unregistering): Port device team_slave_0 removed [ 802.337417] bond0 (unregistering): Releasing backup interface bond_slave_1 2018/05/21 12:30:22 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) write(r0, &(0x7f00000001c0)="8104d02c45694c03e877338b", 0xc) write(r0, &(0x7f0000000080)="51f9fe3811b3a870b7da5f57a04a239409c737b5fb1353dea580a049a28d4671a7925ecec6731b75dde5755a40b6abee", 0x30) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:30:22 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x9, 0x2, 0x200, 0x7f, 0x967e, 0x4, 0x4, 0xe385, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000000c0)={r2, 0x2}, &(0x7f0000000100)=0x8) [ 802.383386] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 802.519952] bond0 (unregistering): Released all slaves 2018/05/21 12:30:22 executing program 5: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="7f", 0x1, r1) r3 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r1) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x400, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000000200)={{0x0, 0x1, 0x8000, 0x2, 0xfffffffffffff622}, 0x3, 0x66c4}) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r3, r2}, &(0x7f0000000380)=""/238, 0xee, &(0x7f0000000100)={&(0x7f0000000080)={'crct10dif\x00'}}) [ 803.266569] IPVS: ftp: loaded support on port[0] = 21 [ 803.824224] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.830667] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.838235] device bridge_slave_0 entered promiscuous mode [ 803.875526] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.881959] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.889373] device bridge_slave_1 entered promiscuous mode [ 803.925734] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 803.962102] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 804.064110] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 804.102628] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 804.268144] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 804.275598] team0: Port device team_slave_0 added [ 804.311156] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 804.318586] team0: Port device team_slave_1 added [ 804.354001] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 804.392898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 804.430549] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 804.437801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 804.446973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 804.479961] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 804.487443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 804.496702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 804.859959] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.866418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 804.873224] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.879649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.887369] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 805.855250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 806.229409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.359421] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 806.488534] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 806.494809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 806.502994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 806.627243] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.383815] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 807.394934] syz-executor2 cpuset=syz2 mems_allowed=0 [ 807.400220] CPU: 1 PID: 14578 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 807.407600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 807.416956] Call Trace: [ 807.419551] dump_stack+0x185/0x1d0 [ 807.423270] dump_header+0x2cc/0x16f0 [ 807.427099] ? is_console_locked+0x29/0x50 [ 807.431347] ? kmsan_report+0x4f/0x260 [ 807.435239] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 807.440713] ? ___ratelimit+0x67f/0x760 [ 807.444702] oom_kill_process+0x341/0x2160 [ 807.448933] ? mem_cgroup_scan_tasks+0x289/0x610 [ 807.453710] out_of_memory+0x1700/0x1da0 [ 807.457776] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 807.463149] ? _cond_resched+0x8b/0xd0 [ 807.467062] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 807.472266] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 807.477645] pagefault_out_of_memory+0x57/0x110 [ 807.482314] mm_fault_error+0x490/0x810 [ 807.486308] __do_page_fault+0x1272/0x1a10 [ 807.490559] ? page_fault+0x1e/0x30 [ 807.494179] do_page_fault+0xd3/0x260 [ 807.497974] ? page_fault+0x8/0x30 [ 807.501535] page_fault+0x1e/0x30 [ 807.504979] RIP: 0033:0x4071d8 [ 807.508155] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 807.513512] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 807.520770] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 807.528036] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 807.535310] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 807.542568] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 807.550249] Task in /syz2 killed as a result of limit of /syz2 [ 807.556475] memory: usage 804kB, limit 0kB, failcnt 824 [ 807.561907] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 807.568730] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 807.574930] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 807.594913] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 807.603745] [14578] 0 14578 17553 8392 118784 0 0 syz-executor2 [ 807.612651] Memory cgroup out of memory: Kill process 14578 (syz-executor2) score 8421000 or sacrifice child [ 807.622774] Killed process 14578 (syz-executor2) total-vm:70212kB, anon-rss:76kB, file-rss:33492kB, shmem-rss:0kB [ 807.650655] oom_reaper: reaped process 14578 (syz-executor2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 2018/05/21 12:30:27 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @rand_addr}}, 0x100000001, 0x3, 0x6, 0x9187, 0x8}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000002c0)={r2, 0x1, 0x2000000000000000, 0x7, 0x1f, 0x2}, &(0x7f0000000300)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280)={0x5, 0x208, 0x7, 0x7ff, r2}, 0x10) 2018/05/21 12:30:27 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x20080) splice(r0, &(0x7f00000001c0), r1, &(0x7f0000000200), 0x8, 0x1) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000040)) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000180), &(0x7f0000000280)=0x4) accept4$llc(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000240)=0x10, 0x800) 2018/05/21 12:30:27 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000000300)=""/155, 0x9b}], 0x1000000000000164, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000700)={{{@in6=@dev, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000800)=0xe8) sendto(r0, &(0x7f00000003c0)="6663c822e2e2a25dde072643bc2f6f4647769ecc3a749354683347fa97ff258c1d18f1cb58985b70b6cbd6b5c29565cc6462250e9bb088d3b561891e0e4b3389e17b00affd7eac14d169da22274eb4f84652a38822b897bca4e30c5cdc66dd66f23f4c9a75f60ec6b5b47496", 0x6c, 0xfffffffffffffffe, &(0x7f0000000200)=@hci={0x1f, r1, 0x2}, 0x80) 2018/05/21 12:30:27 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:30:27 executing program 5: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) keyctl$read(0xb, r0, &(0x7f0000000180)=""/27, 0x1b) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="7f", 0x1, r1) r3 = socket$netlink(0x10, 0x3, 0x1f) fstat(r3, &(0x7f0000000280)) r4 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r1) keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r4, r2}, &(0x7f0000000380)=""/238, 0xee, &(0x7f0000000100)={&(0x7f0000000080)={'crct10dif\x00'}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x0, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0) 2018/05/21 12:30:27 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000180)={0x8189151, 0x3, 'client1\x00', 0x0, "fa0d7b0ec5d373cf", "ce19ff296b9685f7c4b59a52bcedb4f8214ad70f5032cf5544c951cfff923189", 0xffff, 0x3}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000100)=0x4) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) 2018/05/21 12:30:27 executing program 6: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000687000)=0xc4b8, 0xc60ae96973f25474) r1 = accept4$inet6(r0, &(0x7f0000000000), &(0x7f0000000040)=0x1c, 0x800) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000f679f4)=0x8000010, 0x516) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') r3 = syz_genetlink_get_family_id$team(&(0x7f00000003c0)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000000500)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f00000008c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001d00)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000001d40)={@empty, @rand_addr, 0x0}, &(0x7f0000001d80)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001f00)={{{@in=@dev, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000002000)=0xe8) accept$packet(0xffffffffffffff9c, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000002080)=0x14) getsockname$packet(0xffffffffffffff9c, &(0x7f00000020c0)={0x0, 0x0, 0x0}, &(0x7f0000002100)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000005cc0)={@loopback, @multicast1, 0x0}, &(0x7f0000005d00)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000005d80)={0x0, @local, @multicast2}, &(0x7f0000005dc0)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000005e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000005e40)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000005e80)={0x0, 0x0, 0x0}, &(0x7f0000005ec0)=0x14, 0x80000) getsockname$packet(0xffffffffffffffff, &(0x7f0000005f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000005f40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000005f80)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000006080)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000007580)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000007680)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000076c0)={{{@in6=@remote, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@remote}}, &(0x7f00000077c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000007800)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000007900)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000007940)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000007a40)=0xe8) accept$packet(0xffffffffffffff9c, &(0x7f0000007a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000007ac0)=0x14) accept4$packet(0xffffffffffffff9c, &(0x7f0000007b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000007b40)=0x14, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000009140)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000009240)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000009d00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x110011}, 0xc, &(0x7f0000009cc0)={&(0x7f0000009280)={0xa10, r3, 0x135, 0x70bd2c, 0x25dfdbfc, {0x1}, [{{0x8, 0x1, r4}, {0x248, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x1c, 0x4, [{0x9, 0xffffffffffffff6d, 0x6c8880000000000, 0x3}, {0x4, 0x353a504d, 0x2, 0x2}, {0x100000001, 0x8, 0xfffffffffffffffb, 0x4}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x6527806f}}}, {0x84, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x54, 0x4, [{0x5, 0x15c, 0x7f, 0x7fff}, {0x101, 0x80a1, 0x5d96, 0x81}, {0x6, 0x101, 0x5}, {0x8, 0x5, 0x7, 0x3}, {0x1, 0x0, 0x6, 0x6}, {0x0, 0x6, 0x3f, 0x7}, {0x3, 0x9, 0x0, 0x3f}, {0x7, 0x7, 0x4d, 0x100}, {0xfffffffffffffffc, 0xfffffffffffffffe, 0xc6cd, 0x8}, {0x9f0, 0x4, 0x4, 0x5}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r7}}}]}}, {{0x8, 0x1, r8}, {0x7c, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r9}}, {0x8, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8000}}}]}}, {{0x8, 0x1, r10}, {0x84, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r11}}, {0x8, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x2}}, {0x8, 0x7}}}]}}, {{0x8, 0x1, r12}, {0x128, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r13}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x800}}, {0x8, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x37343431}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r14}, {0xe8, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r15}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x400080000000000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r16}, {0x244, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x545}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x2c, 0x4, [{0x4df, 0x9, 0xbcc0, 0x1}, {0x0, 0x6, 0x80000000, 0x3}, {0x5, 0x7, 0x80000001, 0x8}, {0x5, 0x5, 0x8, 0x8001}, {0x2, 0xffffffffffffff74, 0xffffffffffffffff}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r19}}, {0x8, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x14, 0x4, [{0x8, 0x5, 0x1, 0x4}, {0x7529, 0x3, 0x0, 0x1ff}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r20}, {0x168, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x981}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r21}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r23}}}]}}, {{0x8, 0x1, r24}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r25}, {0x74, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x12}}}]}}]}, 0xa10}, 0x1, 0x0, 0x0, 0x8000}, 0x4090) r26 = dup(r1) getsockopt$inet6_udp_int(r26, 0x11, 0x67, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$ALG_SET_KEY(r26, 0x117, 0x1, &(0x7f0000000080)="833bfadf4d35e1be0ada802f18bb9b1b18f9373244b731695353fdf59bb457c89cef876d1521ea4fea5cc8af293c9f22a17fa7717d1af82c3477453d6f67818512648f61ba99690806c6eb2eaf6412e9b3adffa713675b8fecc0f0ebfaf1f5936bdc97a2e9f7f7500865cd320b75df234020680289b1ad290729be1868d8ff352efd027c402df5f06a855a15e57ffcec", 0x90) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000501000)=""/95, &(0x7f0000f12000)=0x5f) 2018/05/21 12:30:27 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x7, &(0x7f00000001c0)="c626262c8502bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) splice(r0, &(0x7f0000000180), r0, &(0x7f0000000200), 0x87, 0xb) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0xffff, {0x2, 0x4e20, @rand_addr=0xfdc1}, {0x2, 0x4e24, @loopback=0x7f000001}, {0x2, 0x4e20}, 0x200, 0x1b10, 0x8, 0x7a8, 0x1, &(0x7f0000000080)='veth0_to_bridge\x00', 0x0, 0x1, 0x10000}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000017c0)=@add_del={0x2, &(0x7f0000001780)='bond_slave_0\x00', 0x7}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth1_to_bridge\x00', &(0x7f0000000040)=ANY=[@ANYRES16=r1]}) close(r2) close(r1) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x420000, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@ipv4, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000440)=0xe8) r6 = accept(r3, &(0x7f0000001c00)=@nfc_llcp, &(0x7f0000001c80)=0x80) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000001cc0)=0x0) stat(&(0x7f0000001d00)='./file0\x00', &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getegid() sendmsg$netlink(r3, &(0x7f0000001e40)={&(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbfe, 0x4}, 0xc, &(0x7f0000001740)=[{&(0x7f0000000480)={0x12ac, 0x3b, 0x200, 0x70bd29, 0x25dfdbfe, "", [@generic="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", @generic="a82abb407d4282ac98138a3b457d974fbf41ea4ae1d39c8e7a77ea14fdfbf6eb0b5331b40fd6be17feaae60656c6bacaae9af2e827282348c00753ef974a64d0fdb24ce0b995efeb8e29308924073d97a809eee7b86f955c34d8f2", @typed={0x14, 0x47, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}, @typed={0x8, 0x85, @fd=r3}, @typed={0x8, 0x13, @u32=0x5}, @typed={0x8, 0x3, @uid=r4}, @nested={0xa4, 0x26, [@generic="e7a0f13efd856e58f133e3a725b92420a6dea1b6f90a5235b587e4ba8442f396f4b1fe69f2c66bd7a32bb667116f0325d3ac7dda1a93129ed50ae9d2e066bb99f69bb8c592568bae76cf41386b4134a5baab99a9e855155b05b8bb0742e3f99f91f8294a653465824a898e27fd84dd43d98c1581f2de9ba7e4bd92d7bafea7c35d54c6d946f439bd75e53eee737b15f71750f9c812", @typed={0x8, 0x1e, @uid=r5}]}, @nested={0xb0, 0x56, [@typed={0xac, 0x33, @binary="89ca290cb402c0f108562ba0c988b9c249478900d773749275f3e129940f82b9c81e5479852ecd0347c7cf9a73c0c4cfa8c7f5618f947a205a0f4da7cce76ecd564219c4121e44244fd91868e418d5c26b0dc0c127a327a763dce1279a57263becacba660e2e98e34caa10977a085e99557eead215e7c258d45b06c00a829a7ab5d9a585c5a037063558b2b5d9456e7de77b62254fa125b5aebc9b637341a873f7937ded34f01dc0"}]}, @generic="c6421023b99861cad527e9f1ed18c17af61f4c2603a32301e0ebc59ae018b8c8b71151de5657d131a589cebf080576543bc4e78d8e7e08a272d24ad7b933aed7413638e4d5f34b8812591493988be37142c452a3e64c59bfa85fee738efe3c320ceb350d919f75d57d3e681296b01f55d586cfde7f7d14f624f2bf9b9db5beb4e97d83a7cd1e991b06c565e762f23355f8cbfce4cc0c3f6ffe4f764ce9b5b644259aff7a609caf1170b5ae31ab1145992998507afd4f25b6a3d4279ac4500520"]}, 0x12ac}, {&(0x7f0000002040)={0x1010, 0x20, 0x4, 0x70bd2a, 0x25dfdbfe, "", [@generic="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"]}, 0x1010}], 0x2, &(0x7f0000001dc0)=[@rights={0x18, 0x1, 0x1, [r6]}, @rights={0x20, 0x1, 0x1, [r3, r2, r1]}, @rights={0x20, 0x1, 0x1, [r3, r3, r0]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}], 0x78, 0x4004814}, 0x4800) [ 807.926927] device bridge_slave_1 left promiscuous mode [ 807.932833] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.972535] device bridge_slave_0 left promiscuous mode [ 807.978398] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:30:28 executing program 6: futex(&(0x7f000008fffc), 0x5, 0x0, &(0x7f0000f16000)={0x77359400}, &(0x7f0000a54ffc), 0x5000000) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40000, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0xfffffffffffffff8) 2018/05/21 12:30:28 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x400, 0x4, 0xffffffffffffffff, 0x1, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={r1, 0x2e, 0x10, 0x0, 0xfffffffffffff35d}, &(0x7f0000000140)=0x18) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x18, 0x8, 0xffff, 0x4, 0xa726, 0x6, 0x2}, 0x1c) accept(r0, &(0x7f0000000200)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, &(0x7f0000000280)=0x80) fcntl$notify(r0, 0x402, 0x31) exit(0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) close(r0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f0000000040)) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f00000001c0)={0x4, 0x2}) 2018/05/21 12:30:28 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) fcntl$setsig(r0, 0xa, 0x12) fchmodat(r0, &(0x7f0000000040)='./file0\x00', 0x1c) io_submit(r1, 0x2, &(0x7f00000012c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f00000001c0)="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", 0x1000, 0x2887, 0x0, 0x1, r0}, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x9, 0xfc, r0, &(0x7f0000001300)="656d9dc21b764a6c9b69de27e5de1de4e9cd4faef4dbe45337b132e3b1f8b22dbe36ae442709ad8232051a2c84cb858ec0be2b215db19501c3da896e6f8be632b0c4f36084798947bfbd0972d90cc59079951f2c4be3c7ba99ce453599e6f810ee36342f94bbca71f23b2483c8cd37d83d4de0a02ab79514c4bda51633c0de4eb9fb56aec90cc60e7d32cf133760fd1674c37bccd0843e375403125db6762d28496f53573d0bbaea9d34ec03c9510d0805b8c9e5f61cc37a4d8a6dc56d", 0xbd, 0x6, 0x0, 0x0, r0}]) 2018/05/21 12:30:28 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYRES32=r0], 0x90}, 0x1}, 0x0) io_setup(0x8, &(0x7f0000000040)=0x0) r2 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0xfffffffffffffff9, 0x101000) io_cancel(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0xfffffffeffffffff, r0, &(0x7f0000000080)="c0bc292c5b126834e2655f2468464b7792dbc702e83cf2d16aeaac3e1bc6f7285f09454fa2a5a4ea8af48e6a5b46e81dcb3f052103af9caf253b6b42dfc23bb624d9dd8c82ea39ed1067735a3dba770d2db8cf0c4b78545cbc183d9199d479f3a7a0acf2f70ab71dfb11d3ea45ba3789df417e53682d612ae1c92e69a0b291bea2d03ce599e77ff16f90a8bc2f43549185173566d3a3e21782e6cfd8fe5e2f5e68ca44957c6748f91dfe17677aced6a8dfb89b09104a3b00dd2197c67cf49dadfa396602892a", 0xc6, 0x6, 0x0, 0x1, r2}, &(0x7f0000000200)) [ 808.111285] team0 (unregistering): Port device team_slave_1 removed [ 808.167346] team0 (unregistering): Port device team_slave_0 removed [ 808.190628] Unknown ioctl 21527 [ 808.204374] Unknown ioctl 21527 2018/05/21 12:30:28 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0x2}, 0xfffffffffffffde6}, 0x1}, 0xfffffffffffffffe) [ 808.224018] bond0 (unregistering): Releasing backup interface bond_slave_1 2018/05/21 12:30:28 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000dacff8)=@assoc_value={0x0, 0x200}, 0x8) sendto$inet6(r0, &(0x7f00009f1000)='G', 0x1, 0x0, &(0x7f0000108fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x20400, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000040)={0x1, 0x3, 0x9, 0x8}) setsockopt$sock_int(r1, 0x1, 0x8000000008, &(0x7f000098effc), 0x60) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000800)=0x80, 0x4) eventfd2(0x8, 0x800) shutdown(r0, 0x0) mq_timedsend(r1, &(0x7f00000000c0)="a535b5aef70f50ba7fbe01d7f18e077bc589380f6f8d0f51b047eda59a497d21be7a60f955afb15d9021111ef5dd25d07c5283f13d7fe3b435e530c02b04906c6a2d6206e8be012032fe1299b98cd55c3bf26a6d890f857ba79bbfbd501588573ecfcae05c3b2fe0f280825ffb40975761d5fe463a22ed19be1b1e694e3a809daabebb5f6faaee1cfdb8b6d7e8c23a6db2c0763224ecf3cdd2bc9888", 0x9c, 0x6, &(0x7f0000000180)) write(r0, &(0x7f00000001c0)="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", 0x601) writev(r0, &(0x7f0000000080)=[{&(0x7f00008889ff)="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", 0xffffff65}], 0x155) [ 808.269126] bond0 (unregistering): Releasing backup interface bond_slave_0 2018/05/21 12:30:28 executing program 1: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f00000002c0)=0xe8) quotactl(0x3ff, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000300)="72818863f59f0251726077c0b17b6be5e1c0664cbbe04b2034a64f5199e2a3336fecc9ff20ab5c6f0fd4605197a2358d4f8e77f2a49298ba5b19891ab221167a1c5447923e5ae477cbdd85a9bfa437e3283d0ece472f2bbf5b30ccb88df3bcf3dd74510ecf11fa50aae237892145aaa75bcc0e065c5482c98822f50dd0649ac0dffa851ceca3f664ba9f060b404672d695bca780d264c2f50d272df340227a385418abd7ee057c9d7b579a7a50be3500d1ccc4987261fd45ff806322a935520456d06cf11658fbd576ef296887a25fea5d98589c799a0c84faf71dc1c65288d254344143630a836766bb1576d5be") r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000001200)}]) [ 808.382778] bond0 (unregistering): Released all slaves 2018/05/21 12:30:28 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) socketpair(0x8, 0x80007, 0x6df, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e22, 0xfffffffffffffc53, @local={0xfe, 0x80, [], 0xaa}, 0xdf}}}, &(0x7f0000000480)=0x84) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000700)={r1, &(0x7f00000005c0)="3e34935e47074c3aef1d48e85d2e0879f7ec1b5549c19a1b1da83af54ff6568d9e233e7c13619549bc8d57ac3911a9ec1a364c87570a8f995a7e21c3d2d9fb4e820f71526f0e6f495f4645ce00eb9936a50584ec4e7a93ff2989438aa7b0ac18e3e46ea4f2df0ee707ec4773dd86af0bc07b8037d94b753a7a494dfb52564052eadff86dd8b20155e882ff89765719317843f00c210080295851f733cff44f2adc38122accab6a133f4eb5568b55aeb25b87fa3cee007f8c93c31fa7907729fc043df784bb9cfa7110e3e6", &(0x7f00000006c0)=""/36}, 0x18) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={r2, @in={{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x7fffffff, 0xffffffffffffffc9, 0x7ff, 0x2, 0xa0}, &(0x7f0000000740)=0x98) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0xffff, 0x20000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r3, &(0x7f0000000300)="52a3949762e5605ad79d82360569a1f86ab0479eeef02176c658a059c490cc0c0469951f3af253c30e68912007aff804232717b0b36ac04a15f77a1c01e97f14754b3fdb9f76af455f52fbc55752f2174f675a670f0ccd191fe9865a2197e3dbf1ec0c8ab68dbfe19073ce6009d2078163f31259a67cb94cdae493e2e3a9f250e8add2502363306b48e9a0a8c779d87f8bbb0491fb47914042ac9359f30ba93f4f6b96678558f48a6667585c4bdad184a3622ab360c6c78539fe32e94f8bf7", &(0x7f0000000140)=""/4}, 0x18) [ 808.502269] IPVS: ftp: loaded support on port[0] = 21 2018/05/21 12:30:28 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300000a000000000000000500000000400000000000000000000000000000000000000000000000000000000000b7000015004e2000000400040000000000000000000000000000003857000000000000000000000042669e05da4df39c00000000000000000005000500000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0x94}, 0x1}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000100)={'ip_vti0\x00', {0x2, 0x4e21}}) 2018/05/21 12:30:28 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f00000001c0)=0x0) read(r0, &(0x7f0000000200)=""/199, 0xc7) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x7, r0, &(0x7f0000001200), 0xffffffffffffffca}]) [ 809.700448] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.706895] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.715107] device bridge_slave_0 entered promiscuous mode [ 809.754052] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.760568] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.767977] device bridge_slave_1 entered promiscuous mode [ 809.804533] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 809.841991] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 809.950365] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 809.991613] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 810.162507] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 810.169819] team0: Port device team_slave_0 added [ 810.206407] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 810.213717] team0: Port device team_slave_1 added [ 810.251158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 810.290993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 810.330505] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 810.337814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 810.346979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 810.380385] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 810.387650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 810.396912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 810.771651] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.778137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 810.784935] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.791363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 810.798946] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 811.808150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 812.181455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.312238] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 812.446706] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 812.452991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 812.460420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 812.585445] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.357563] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 813.368646] syz-executor2 cpuset=syz2 mems_allowed=0 [ 813.374123] CPU: 1 PID: 14902 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 813.381508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 813.390857] Call Trace: [ 813.393446] dump_stack+0x185/0x1d0 [ 813.397079] dump_header+0x2cc/0x16f0 [ 813.400882] ? is_console_locked+0x29/0x50 [ 813.405116] ? kmsan_report+0x4f/0x260 [ 813.409016] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 813.414486] ? ___ratelimit+0x67f/0x760 [ 813.418469] oom_kill_process+0x341/0x2160 [ 813.422703] ? mem_cgroup_scan_tasks+0x289/0x610 [ 813.427470] out_of_memory+0x1700/0x1da0 [ 813.431546] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 813.436928] ? _cond_resched+0x8b/0xd0 [ 813.440827] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 813.446020] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 813.451399] pagefault_out_of_memory+0x57/0x110 [ 813.456076] mm_fault_error+0x490/0x810 [ 813.460082] __do_page_fault+0x1272/0x1a10 [ 813.464320] ? page_fault+0x1e/0x30 [ 813.467942] do_page_fault+0xd3/0x260 [ 813.471737] ? page_fault+0x8/0x30 [ 813.475272] page_fault+0x1e/0x30 [ 813.478720] RIP: 0033:0x4071d8 [ 813.481907] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 813.487264] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 813.494524] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 813.501782] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 813.509050] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 813.516324] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 813.523775] Task in /syz2 killed as a result of limit of /syz2 [ 813.530035] memory: usage 804kB, limit 0kB, failcnt 832 [ 813.535542] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 813.542379] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 813.548591] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 813.568487] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 813.577260] [14902] 0 14902 17553 8394 114688 0 0 syz-executor2 [ 813.586187] Memory cgroup out of memory: Kill process 14902 (syz-executor2) score 8422000 or sacrifice child [ 813.596276] Killed process 14902 (syz-executor2) total-vm:70212kB, anon-rss:84kB, file-rss:33492kB, shmem-rss:0kB 2018/05/21 12:30:33 executing program 1: r0 = getpgid(0xffffffffffffffff) r1 = shmget(0x2, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000280)=""/218) r2 = syz_open_procfs(r0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) r4 = signalfd(r2, &(0x7f00000001c0)={0x4}, 0x8) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r2, &(0x7f0000001200)}]) fdatasync(r4) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000200)={0x100000001}, 0x4) finit_module(r2, &(0x7f0000000240)='security\x00', 0x2) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)) 2018/05/21 12:30:33 executing program 6: 2018/05/21 12:30:33 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x20) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) futex(&(0x7f00000000c0), 0x9, 0x1, &(0x7f0000000440)={r1, r2+10000000}, &(0x7f0000000480)=0x1, 0x3ff) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) r3 = msgget(0x3, 0x8) msgctl$IPC_RMID(r3, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x10000, 0x101000) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x9d, 0x20}, &(0x7f0000000400)=0xc) lseek(r4, 0x0, 0x3) r6 = add_key(&(0x7f00000001c0)='pkcs7_test\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000240)="dd6571b1bc240cfcb1795c3ffc4c040ddcd7c6ef0fc589540f3a6aa000f3cb3cc8adbeb6ff42ec8d4f2e21eb24eb124a4f804a2337807826e0259255b73ce436946f4a15313945e373cc264c731aa71aec2c8ec6a7308ed6802ecc96ba9b27d1f6d1d9aa5818270dacc889afc9fd3023706d43ce59b50d5018641621d3c66ab9248dbaab8eb40730fb6887657332f0d219b0a95c7309c1cb7cd6bc2c7d9e", 0x9e, 0xfffffffffffffffc) keyctl$read(0xb, r6, &(0x7f0000000300)=""/174, 0xae) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000100)={r5, 0x72}, &(0x7f0000000140)=0x8) 2018/05/21 12:30:33 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r1 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r1, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:30:33 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) r1 = dup2(r0, r0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @local}, &(0x7f0000000040)=0xc) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000080)={@loopback={0x0, 0x1}, r2}, 0x14) 2018/05/21 12:30:33 executing program 2: 2018/05/21 12:30:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x500, 0x70bd28, 0x25dfdbfb, {0x9}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xdc17}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}]}]}, 0x3c}, 0x1}, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x6, &(0x7f0000000140)) 2018/05/21 12:30:33 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x0, 0x7f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000080)=0x8000, 0x4) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) r2 = open(&(0x7f0000000140)='./file0\x00', 0x10000, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000300)={0x3, 0x3, 0x2, 'queue1\x00', 0x1}) setsockopt$inet6_tcp_int(r2, 0x6, 0x1f, &(0x7f0000000240)=0x5d0b, 0x4) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) 2018/05/21 12:30:33 executing program 5: 2018/05/21 12:30:33 executing program 6: [ 813.910613] device bridge_slave_1 left promiscuous mode [ 813.916551] bridge0: port 2(bridge_slave_1) entered disabled state 2018/05/21 12:30:33 executing program 6: 2018/05/21 12:30:34 executing program 5: 2018/05/21 12:30:34 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) ftruncate(r0, 0x2) [ 813.974562] device bridge_slave_0 left promiscuous mode [ 813.980537] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:30:34 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300001600000000000000000000000400030000000000000000000000000000000600000000000a0000000000000000000023040000000000000000932100000000000033a958d842c1c29900000000000000000004000400200000000000000900000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe800000000000000000"], 0xb0}, 0x1}, 0x0) 2018/05/21 12:30:34 executing program 6: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4b, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=@raw, &(0x7f00000000c0)='GPL\x00', 0x0, 0x5b, &(0x7f00000001c0)=""/91}, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) r2 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) dup3(r2, r0, 0x0) [ 814.223621] team0 (unregistering): Port device team_slave_1 removed [ 814.269413] team0 (unregistering): Port device team_slave_0 removed [ 814.289229] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 814.319316] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 814.390924] IPVS: ftp: loaded support on port[0] = 21 [ 814.410412] bond0 (unregistering): Released all slaves [ 814.428633] device syz_tun entered promiscuous mode [ 814.444940] device syz_tun left promiscuous mode [ 814.463350] device syz_tun entered promiscuous mode [ 814.479717] device syz_tun left promiscuous mode [ 815.403877] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.410307] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.417752] device bridge_slave_0 entered promiscuous mode [ 815.454634] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.461117] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.468706] device bridge_slave_1 entered promiscuous mode [ 815.505359] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 815.542363] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 815.647941] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 815.687582] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 815.727534] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 815.734531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 815.773255] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 815.780188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 815.885457] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 815.892723] team0: Port device team_slave_0 added [ 815.928580] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 815.935825] team0: Port device team_slave_1 added [ 815.972262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 816.011756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 816.049672] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 816.057244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 816.065913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 816.099136] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 816.106397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 816.115843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 816.490817] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.497417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 816.504250] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.510674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 816.518536] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 816.735569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 817.895522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.028443] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 818.157262] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 818.163517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 818.171670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 818.298437] 8021q: adding VLAN 0 to HW filter on device team0 [ 819.064597] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 819.075698] syz-executor2 cpuset=syz2 mems_allowed=0 [ 819.080998] CPU: 1 PID: 15230 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 819.088386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 819.097737] Call Trace: [ 819.100329] dump_stack+0x185/0x1d0 [ 819.103964] dump_header+0x2cc/0x16f0 [ 819.107761] ? is_console_locked+0x29/0x50 [ 819.111994] ? kmsan_report+0x4f/0x260 [ 819.115890] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 819.121356] ? ___ratelimit+0x67f/0x760 [ 819.125358] oom_kill_process+0x341/0x2160 [ 819.129599] ? mem_cgroup_scan_tasks+0x289/0x610 [ 819.134365] out_of_memory+0x1700/0x1da0 [ 819.138426] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 819.143812] ? _cond_resched+0x8b/0xd0 [ 819.147715] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 819.152920] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 819.158315] pagefault_out_of_memory+0x57/0x110 [ 819.162984] mm_fault_error+0x490/0x810 [ 819.166984] __do_page_fault+0x1272/0x1a10 [ 819.171239] ? page_fault+0x1e/0x30 [ 819.174871] do_page_fault+0xd3/0x260 [ 819.178683] ? page_fault+0x8/0x30 [ 819.182226] page_fault+0x1e/0x30 [ 819.185675] RIP: 0033:0x4071d8 [ 819.188856] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 819.194215] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 819.201476] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 819.208744] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 819.216006] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 819.223272] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 819.230932] Task in /syz2 killed as a result of limit of /syz2 [ 819.237151] memory: usage 804kB, limit 0kB, failcnt 840 [ 819.242580] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 819.249394] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 819.255593] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 819.275537] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 819.284344] [15230] 0 15230 17553 8394 118784 0 0 syz-executor2 [ 819.293336] Memory cgroup out of memory: Kill process 15230 (syz-executor2) score 8423000 or sacrifice child [ 819.303413] Killed process 15230 (syz-executor2) total-vm:70212kB, anon-rss:84kB, file-rss:33492kB, shmem-rss:0kB [ 819.331372] oom_reaper: reaped process 15230 (syz-executor2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 2018/05/21 12:30:39 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x3, 0x4e8, [0x0, 0x20000440, 0x20000628, 0x200008c8], 0x0, &(0x7f0000000040), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'ip_vti0\x00', 'team_slave_0\x00', 'lo\x00', 'ip_vti0\x00', @empty, [], @empty, [], 0x100, 0x188, 0x1b8, [@statistic={'statistic\x00', 0x18}, @helper={'helper\x00', 0x28, {{0x0, 'irc-20000\x00'}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz1\x00'}}}, @common=@mark={'mark\x00', 0x10}]}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{{{0x1b, 0x0, 0x0, 'bridge0\x00', 'bcsh0\x00', 'veth1\x00', 'sit0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @empty, [], 0x70, 0xa0, 0xd0}, [@common=@STANDARD={'\x00', 0x8}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}, {{{0x3, 0x0, 0x0, 'nr0\x00', 'vlan0\x00', 'bond_slave_1\x00', 'nr0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x138, 0x168, 0x1a0, [@ip6={'ip6\x00', 0x50, {{@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, @mcast1={0xff, 0x1, [], 0x1}}}}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}]}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8}]}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x560) 2018/05/21 12:30:39 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x4, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) 2018/05/21 12:30:39 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}, 0x1000000000000}], 0x1, 0xfffffffffffffffe, &(0x7f0000004cc0)) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x1, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/05/21 12:30:39 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000001c0)={{0x101, 0x9}, 'port0\x00', 0x1, 0x800, 0x8, 0x7fffffff, 0x2, 0xfffffffffffffffe, 0x7ff, 0x0, 0x2, 0x7}) io_setup(0x0, &(0x7f0000000280)=0x0) io_submit(r1, 0x3, &(0x7f00000005c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x7, 0x200, r0, &(0x7f00000002c0)="586ab6e6f2c36ae217c3a6e4f54bb70ac1dead5f54739066f38bd92575eca401b716a65e8a3424f9dd7992fe50acb15e2d2c4486af31b3a0cc6699647aedb692a76cd2844fe9ff287a8330238f5a7a8c8f0beaba962c10ddbf9817518d0921511029fca8f22ef23f5db8c744d2d1fde4f8b367fb7e49630785c96bd8f44121190e5143a73b5a4e915558378de3addf88b60096f6b22cceeaee7f7a84cbba707836cd0f9cfde399bfed981e18053673ee847bc099e5c6470898a60501225fd8077f1c8e3b3add71953cd76d31ee30ecacc2111a779d227dd73909c17bdcaf1c", 0xdf, 0x101, 0x0, 0x1, r0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x2, 0x3, r0, &(0x7f0000000400)="89eed0ca8fc58c18bb86f3054cd8725b07a08adc5f7c99de4136acc32fb856b54df0ab15a4f30aec9e038cccfda85ee7cb4a7c8525bbea4c31f3f071a50dd9e41de0cb528fcdf980b963652c1a6db72f6f222bf9ce609712f4af0d719a77147d2d5ba5f2cb08a00dbc2adb11569c9538b195e6b960e660cc7da37d5d94792ec96fb99a18750f755d4c1f92c9ce37628e5fe1c3a963e52bee69497f26c6037a49bbd1ac3f7132e57ddacf291b9b58322e1233fa3a9310539815973370314b2adde8268ec73818851c5e491cf2c6f487cd", 0xd0, 0x8, 0x0, 0x0, r0}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x4, r0, &(0x7f0000000540)="9649", 0x2, 0x1, 0x0, 0x1, r0}]) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) fadvise64(r2, 0x0, 0x9, 0x3) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r2, &(0x7f0000001200)}]) 2018/05/21 12:30:39 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0) 2018/05/21 12:30:39 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000000)={0x2, 0x9, 0x2, 0x3f0000000, 0xffffffff, 0x0, 0x2, 0x0, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x1ff, 0x3}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000180)={r2, 0x79, 0x6, 0xe399, 0x6, 0x5, 0x8, 0x8000, {r3, @in={{0x2, 0x4e24, @broadcast=0xffffffff}}, 0x0, 0x1, 0x1f, 0x2, 0x24}}, &(0x7f0000000240)=0xb0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) 2018/05/21 12:30:39 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r1 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r1, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:30:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000015e15)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x14], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x4], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 2018/05/21 12:30:39 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000200)=@un=@abs, 0x80) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000180)={r2, 0x3}) 2018/05/21 12:30:39 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="040400000309c14609005375c52cf7c21975e697b02f5c566b2b2ff0dac8897c6b11876d886b6621d8d207ccf73f257e55e86eb29406136fcfffffffffbe62159403c7a6", 0x44, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x4, @mcast1={0xff, 0x1, [], 0x1}, 0x1}, 0x1c) [ 819.562250] xt_helper: cannot load conntrack support for proto=7 2018/05/21 12:30:39 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xb0}, 0x1}, 0x0) r1 = open(&(0x7f0000002480)='./file0\x00', 0x305a80, 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000024c0)='reno\x00', 0x5) accept4$nfc_llcp(r1, &(0x7f0000000300), &(0x7f0000000240)=0x60, 0x80000) 2018/05/21 12:30:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080), 0x10) io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) [ 819.703613] xt_helper: cannot load conntrack support for proto=7 2018/05/21 12:30:39 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x800000018, &(0x7f0000001280)=0x503, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x800}]}, 0x10) sendmsg(r0, &(0x7f0000001440)={&(0x7f0000000140)=@in6={0xa, 0x4e21}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000ac0)="aca77dce50c362f455188dd31b9fbe92cab1917642f0fc87bb8d2a07", 0x1c}, {&(0x7f0000000bc0)="75a2a909b4c074900cfd401313dba7d1c05f9302a6118ce3f648e4e8d89d5a3ca688f18690737f63b2f7f3ac343350b9d7f578a8d05f7752d3d448602eb2cffc8cba39ffa685af966d9b704f2e7e0418b2abdfda46cbf5ea74f420a7f5c4412b292f1ff311c5e3c0edd7f2a6086523c454bd0714c8c439103461418038acc53dff7d26e7befafb23de53fb9e07afd49f0248f2761151d21f41bbb1adda301a2dec5545ce20bceb11813f9419bb65da6f49bdf55ec06a65fd8110438e415aa000f810c9c35f32aa7c602a2cf480b531677d42244a4def", 0xd6}, {&(0x7f0000000dc0)="85b695ecf195c60fa294becc25c7b378a0125d5a6eeb66bc79443bdb8fc0aa0de769037b045f984b7e664243d93a04c33a8088504920afc1ee03002851f148ac645338286ee1685994053e7878e8d44964bb760c1bd20a45b0284b37d6148d8a1ec0272a73948efe2fccfa95513daab5bdbc6e9590cdbde0fde7491bf10e0c73a559f14cb39b294e6b1e18bf6cdd46d1f9420f7e67", 0x95}, {&(0x7f0000000f40)="6616e1d7e09721a71d4884c2b99940f3b547a1c0057c445ac851e9587628b36ad3eb4192858986f3a9e065166eaf09655113024bb90d11bd0bcd27c40d8ae424a11fa260d413171897703234030dc170020bee58a5e2f4ff80f45a15febcbcccecad9973f6ca4e9865f5c5b9b9638348fa36f9910aa9f3c1988146fc951d83fc5cc7c6c1b2cf3b424a2488e404b7d12ef8a00c32321e06ea7353bd4ba2dc8f4933338cd22d58698cf6ab6b7cb2dbda0333be93f7da270a1947c50e456885b284", 0xc0}, {&(0x7f0000000040)="05e8843a6a20c71656f0529c336cb48b5d", 0x11}], 0x5}, 0x8000) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000240)="e694446313bf3fbb7da9fb7044d8d6bb7449171c7a0931f0465c2412cf80f5d557ceb62420f506ae868cac9ead69705ec96964f2ec4effd0c769d94debe11981cdf2a8a7994841b3bfa645b1cfa3879d6e3b1eacf164664d692f951d2d2f323df5c384294c059b4824ef9e3559e0ca12b114d17007978d7427d2427722cbd55690b6d2c53b43731d5eefeecdaf5b00f06fcb1bf690843fbc1e68cc725d256da47e593beb1f00328f79adc639bf9f8ff7a9dad39f52e0d12a1d074bd08969c4077fbc4be4a6d06f545cdea6d3024988b688bb7fe8a543e710684a830c2092d506f7a8c70b970c424e04722358f032204af7de5a7ee2fa11d17c00385fd95432ea5b4d93678dcdf0f09aca1a4e842c1570d8d53e481362d0e9f661ad20db9f7b0409c862be90feccad089349ca6bdd09b957006b3b22b62f13c721396efba767cecadb5a9bcf18f093b0e0aaa42e479b397ce0db2bf0efeb2435742523a5a2ffc4c3dc1e86162eab1431665eeecc098e7ad859d6f859b3d41bf32362699172f88a58560eb4cd837443363dd6c5d93aa3818d7b549a206040e781807d95f0dd810ab475a5007e2d6178180d3cdda9896aa51236451bffe19de27f73eb1b671f097cc2dba1bc0f4b7c51b7452f6e570b0152fb853c157f86d6a733942aa72a440f52dab3978ae8ee73147d9fa9b7a164ea737dc6b0e0eb8bbef9aa67288d38aa1274a22510b1dfa5bdf4016c6fcaa243f9b02912332397272c535f4603aef9c77f16f34b048e3df04b32eb83375cf9b740e6b6d51963499173b565ebe3856090c2e9df95e5f52ef2068a09365f0f241ce18356aca0b08888f1188205135ddd9d9781cec144eeeb30ab68cd31e46afc7c5d730edbf9988f481ff17055782d6ec1dee6488f7ef6ed60615aa8a0c10fd201d0c1f3bc48fb03cd533bac108ac1a7f3bc71743622eee36213008ec7314d39787aef46d3229765e57acba8ae2b6a0ddbc75f68976092219a29c2d11ea845fb3232ba90934ba9549dbfa323fabd51392c619109ce4b7759f2a335972262d9032b357f1df5aa280e27aa917c4a1107dd0e0968ccb9b1d0e11d1a38a670a1e82dc7a2bc4f75c46292b0d0dbfb4d3df934674a786c75f6d9f4067c8832061a06f7827e07d17334a9d12400b37d6f8f58eecfbe388e7ee1b1708bdf78288844d4b780dab9c83914c7ef40c4828a4296386356073cd0ea142d7e78798ce39c53978af30d6f570c0a5850bb19a1ca7b51c0097780673c719a89975bf52884ba20e30b777a36e6b3cba1ad1c73297ce20ebcb739d09b9c4e581713f461041c57b4b909422d38514f6112ddce864975b4ead6ef383d3ecb645938c611f9ac32069cf8749b559fb93f8fb945f5b51de634873ab7f4bc8b119f48192dc8e1f5e0f9c0978cddadef0d5e686bd89ada25b514b753b78436eaf4c3f6295570a0c39fb927ba9147b41b9f12d4b0b17f009aab928c080837436498f131d4ad0e0187212bbb940435b946fea98a755fcaadb01d5cae454b06d459bb69fd1d9745397d52262630bcd8423bfe3f5fcc3c2e8589e050167c7fcaf57cdfd9eaf36dad34c6effa0d387c5d06314e030eab55aacbd8d3e74a4d5f0a0901bb5b9b47489bed052401d74b774a5d373d55d4e31a0b115a13683f8174ce6159cccba8fa93b3a77d5fdbf132d998bc26483dfee0a0050ce30a30b49156a0c4fbfa963d4d428937537b591fe6524dac4b19c4fde980e5036902ab340bb953819d2f38357c1aa74f5ebda7435a3c88b5af48599b4ce781048e056abb678a484e21252f4c4ccdeb9b69ece762f1cc32737dbd175a5c0ed03c4872cb24349658a61cb2ffa5f54bdb41d2b854d8873b3af1d4f8e39a85716db12581de7df4c065c7c3144921e467030045d28036b1718186f24e66910c4542d6b5c8642e033fc6410ff4b00f40ea57662bfa81394344218744f1a33b7ca43d8930132cf3419fc7d673a644dd02b1d133fedfeded41d0de12db74f0056c6c484f6a74b459c51a3683ecb51e07456efa8339e2573cf7014e872a93e193983a583631c0f5135588e1d48d105c6a7c581a92f0805ec83f85640f1b0804ee8e085c2a01cecd19295dd3b5e8bdb44d9545760e8724228e3f8234896851fad9e3988dd1cb40cc64fa930c2352fea071ae40488521e5ba23c4aab781a07187422a1a5435101ed7be522a09703fe2174f216d087c6e4f0ec398d0ebf8605b42b9eaea01f82706408e8f7bf7c6037441fdc84d5362911f417509d26e55d4217cb5f97f4228b5598ad4ed36a76b7ab5458fe67de606766fef1fbf4af3e2e122c960c0bfeaf212be868a417a88861f362377e98aa6c5aa5ccec0f777590dd51c31ba3ccd5f81515a8d333848a437cd44720e9db2a5c5a1919be5169e5d72812b14eb4373f384648af8d4bcc2f7ca66037dd401466f1e262ccd2d90b28f1223901e08bf2624f365d7caab28498e65cb77a34b3629f6614f03a5189173bb0bf23e919768a056d021f064a4020de48e5634f9f46d963f0b31a731fe3e9250326b8ffc8012b44d2c90519a4b79646eb37b36aed484b351a8b0693dbd119fd6558a03e000d00670727e1983197dec5288279891bed3923a5fb6cf499aca1731a70e5d0f8ee44951e168fbdaa9005220907a046ec983e41aab159dbc7ba020a925299110a19eb6b92f78419324b517f11095e0c7beac9c01bdab66960ec57c6c5d7e03d1a8e9563ccb4689d9c3815d3e1c211f3d152240cda453d1913ea4bace978633d57f53e0895b8e05c09e24dce06d67313a55d59bda1f7ee6c33c18dd493cbc0a", 0x7d1}], 0x1, &(0x7f00000036c0)}, 0x0) 2018/05/21 12:30:39 executing program 5: getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x78) socketpair$packet(0x11, 0x3, 0x300, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd95a6008000000000000016683540150024001d0d1fc41180b598bc593ab6821148a730de33a49868c62b2c74247dc876ea6b7800", 0x3f}], 0x1}, 0xfffffffffffffffc) userfaultfd(0x80000) 2018/05/21 12:30:39 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) [ 819.928968] device bridge_slave_1 left promiscuous mode [ 819.934987] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.985669] device bridge_slave_0 left promiscuous mode [ 819.991477] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:30:40 executing program 5: r0 = socket(0x3, 0x4, 0x8000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x4, 0x2}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={r1, 0x9, 0x6, [0x200, 0x80000001, 0x475d, 0x1, 0x0, 0x7f]}, 0x14) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) [ 820.146786] team0 (unregistering): Port device team_slave_1 removed [ 820.174534] IPVS: ftp: loaded support on port[0] = 21 [ 820.186363] team0 (unregistering): Port device team_slave_0 removed [ 820.206503] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 820.240592] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 820.280479] bond0 (unregistering): Released all slaves [ 821.191253] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.197682] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.205236] device bridge_slave_0 entered promiscuous mode [ 821.242606] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.249128] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.256623] device bridge_slave_1 entered promiscuous mode [ 821.293550] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 821.330690] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 821.435834] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 821.475624] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 821.514354] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 821.521515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 821.659858] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 821.667239] team0: Port device team_slave_0 added [ 821.703441] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 821.710729] team0: Port device team_slave_1 added [ 821.747747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 821.787730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 821.826996] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 821.834408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 821.842848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 821.877776] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 821.885222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 821.893779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 822.266135] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.272568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.279347] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.285752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.293413] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 822.383237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 823.679227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 823.815203] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 823.947518] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 823.953831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 823.962149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 824.089330] 8021q: adding VLAN 0 to HW filter on device team0 [ 824.873811] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 824.884889] syz-executor2 cpuset=syz2 mems_allowed=0 [ 824.890162] CPU: 0 PID: 15557 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 824.897594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 824.906946] Call Trace: [ 824.909535] dump_stack+0x185/0x1d0 [ 824.913168] dump_header+0x2cc/0x16f0 [ 824.916967] ? is_console_locked+0x29/0x50 [ 824.921207] ? kmsan_report+0x4f/0x260 [ 824.925106] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 824.930578] ? ___ratelimit+0x67f/0x760 [ 824.934562] oom_kill_process+0x341/0x2160 [ 824.938795] ? mem_cgroup_scan_tasks+0x289/0x610 [ 824.943569] out_of_memory+0x1700/0x1da0 [ 824.947633] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 824.953006] ? _cond_resched+0x8b/0xd0 [ 824.956905] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 824.962091] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 824.967466] pagefault_out_of_memory+0x57/0x110 [ 824.972138] mm_fault_error+0x490/0x810 [ 824.976126] __do_page_fault+0x1272/0x1a10 [ 824.980360] ? page_fault+0x1e/0x30 [ 824.983980] do_page_fault+0xd3/0x260 [ 824.987775] ? page_fault+0x8/0x30 [ 824.991316] page_fault+0x1e/0x30 [ 824.994759] RIP: 0033:0x4071d8 [ 824.997937] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 825.003293] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 825.010553] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 825.017821] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 825.025092] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 825.032352] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 825.040121] Task in /syz2 killed as a result of limit of /syz2 [ 825.046216] memory: usage 804kB, limit 0kB, failcnt 848 [ 825.051686] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 825.058521] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 825.064735] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 825.084676] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 825.093509] [15557] 0 15557 17553 8393 118784 0 0 syz-executor2 [ 825.102419] Memory cgroup out of memory: Kill process 15557 (syz-executor2) score 8422000 or sacrifice child [ 825.112508] Killed process 15557 (syz-executor2) total-vm:70212kB, anon-rss:80kB, file-rss:33492kB, shmem-rss:0kB 2018/05/21 12:30:45 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x0, 0x73d}, 0xe1) sendto$inet6(r0, &(0x7f0000000000), 0x428a, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x100}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000001c0)={r1, 0x1, 0xcf, 0x81, 0x6, 0x40, 0x200, 0x5, {r2, @in={{0x2, 0x4e22, @multicast1=0xe0000001}}, 0x101, 0x2a3f, 0x400, 0x9}}, &(0x7f0000000280)=0xb0) 2018/05/21 12:30:45 executing program 6: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r0 = socket$nl_xfrm(0x11, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], &(0x7f0000000200)=0x8) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000080)={0x2, 0x223}) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd) socket$inet_tcp(0x2, 0x1, 0x0) 2018/05/21 12:30:45 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000080)=0x1) io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x4a0040) set_mempolicy(0x4003, &(0x7f0000000200)=0x1, 0x6) 2018/05/21 12:30:45 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x0, 0xfff, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) connect$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x1, 0x3, 0x1, 0x80, "cbd47fd8cafdac34aa5a31d42da03238b702c7124de8cc8f06aede0751011503df16ee750a8efa12db47e1362de0271885d407c01d116b6bb1ac2f81145037", 0xc}, 0x60) 2018/05/21 12:30:45 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r1 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r1, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:30:45 executing program 5: set_mempolicy(0x0, &(0x7f0000000040)=0xff, 0x7) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) 2018/05/21 12:30:45 executing program 7: r0 = open(&(0x7f0000000080)='\x00', 0x80100, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000200)={{0x80000000, 0x80000000}, {0x6, 0x8}, 0x4, 0x7}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r1, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) sendto(r1, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) sendto(r1, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/05/21 12:30:45 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) semop(r0, &(0x7f0000000000)=[{0x6, 0x3, 0x1800}, {0x3, 0x1, 0x1800}, {0x6, 0x80, 0x1000}], 0x3) 2018/05/21 12:30:45 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 'ip6_vti0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 'erspan0\x00'}}, 0x1e) r2 = dup3(r1, r1, 0x80000) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000040)=0x2) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 'gretap0\x00'}}) 2018/05/21 12:30:45 executing program 6: r0 = socket$inet(0x2, 0x8080a, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) r2 = geteuid() stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, r2, r3) setsockopt$inet_buf(r0, 0x0, 0x102, &(0x7f0000000040)="b27e817f", 0x4) 2018/05/21 12:30:45 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) [ 825.454544] device bridge_slave_1 left promiscuous mode [ 825.460465] bridge0: port 2(bridge_slave_1) entered disabled state 2018/05/21 12:30:45 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000080)) io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) [ 825.525045] device bridge_slave_0 left promiscuous mode [ 825.531158] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:30:45 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000e15000)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f00000005c0)={&(0x7f0000000000)=@sco, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000500)=""/164, 0xa4}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'vlan0\x00', {0x2, 0x4e23}}) 2018/05/21 12:30:45 executing program 5: r0 = socket(0x11, 0x100000803, 0x0) pause() r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000140)) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000000)) r2 = fcntl$getown(r0, 0x9) capset(&(0x7f0000000080)={0x19980330, r2}, &(0x7f0000000100)={0x4341, 0x1, 0x1, 0x32, 0x80000001, 0x2}) [ 825.682752] team0 (unregistering): Port device team_slave_1 removed 2018/05/21 12:30:45 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x1, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) [ 825.744676] team0 (unregistering): Port device team_slave_0 removed [ 825.764808] bond0 (unregistering): Releasing backup interface bond_slave_1 2018/05/21 12:30:45 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x800000010000000}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r2, 0x7, 0x8bc, 0x10000, 0x7fff, 0x5}, 0x14) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) [ 825.816697] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 825.950511] bond0 (unregistering): Released all slaves [ 825.990316] IPVS: ftp: loaded support on port[0] = 21 [ 827.031341] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.037780] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.045206] device bridge_slave_0 entered promiscuous mode [ 827.082124] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.088540] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.095862] device bridge_slave_1 entered promiscuous mode [ 827.132460] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 827.169836] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 827.275714] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 827.314991] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 827.353195] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 827.360391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 827.496910] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 827.504660] team0: Port device team_slave_0 added [ 827.541368] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 827.548631] team0: Port device team_slave_1 added [ 827.585697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 827.625037] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 827.663711] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 827.670956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 827.679426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 827.713156] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 827.720607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 827.729255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 828.091211] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.097631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 828.104412] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.110861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 828.118504] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 828.223223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 829.468745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.601948] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 829.731719] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 829.737998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 829.746368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 829.868972] 8021q: adding VLAN 0 to HW filter on device team0 [ 830.622650] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 830.633893] syz-executor2 cpuset=syz2 mems_allowed=0 [ 830.639149] CPU: 0 PID: 15880 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 830.646538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 830.655885] Call Trace: [ 830.658477] dump_stack+0x185/0x1d0 [ 830.662103] dump_header+0x2cc/0x16f0 [ 830.665897] ? is_console_locked+0x29/0x50 [ 830.670131] ? kmsan_report+0x4f/0x260 [ 830.674024] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 830.679496] ? ___ratelimit+0x67f/0x760 [ 830.683476] oom_kill_process+0x341/0x2160 [ 830.687706] ? mem_cgroup_scan_tasks+0x289/0x610 [ 830.692469] out_of_memory+0x1700/0x1da0 [ 830.696533] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 830.702430] ? _cond_resched+0x8b/0xd0 [ 830.706328] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 830.711552] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 830.716937] pagefault_out_of_memory+0x57/0x110 [ 830.721618] mm_fault_error+0x490/0x810 [ 830.725606] __do_page_fault+0x1272/0x1a10 [ 830.729851] ? page_fault+0x1e/0x30 [ 830.733471] do_page_fault+0xd3/0x260 [ 830.737261] ? page_fault+0x8/0x30 [ 830.740790] page_fault+0x1e/0x30 [ 830.744233] RIP: 0033:0x4071d8 [ 830.747412] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 830.752766] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 830.760028] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 830.767300] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 830.774559] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 830.781816] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 830.789208] Task in /syz2 killed as a result of limit of /syz2 [ 830.795424] memory: usage 804kB, limit 0kB, failcnt 856 [ 830.800869] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 830.807691] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 830.813898] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 830.833911] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 830.842746] [15880] 0 15880 17553 8393 114688 0 0 syz-executor2 [ 830.851651] Memory cgroup out of memory: Kill process 15880 (syz-executor2) score 8421000 or sacrifice child [ 830.861733] Killed process 15880 (syz-executor2) total-vm:70212kB, anon-rss:80kB, file-rss:33492kB, shmem-rss:0kB 2018/05/21 12:30:50 executing program 6: perf_event_open(&(0x7f0000000140)={0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x8c0) kexec_load(0xd9, 0x3, &(0x7f00000012c0)=[{&(0x7f00000000c0)="2e09ad2b85c73c661ffe4cf1ce3201f6d33fd552d57d9a8c7d4f4b8608bb3961faa252bfefb5d073800959648ae26056bd7aca68f02c9a1fdf85de325e2d234c55e298b9de09a9d2fb68a766b731a8167c55a13ee2b7bd0582a508cf0b1a9e621a1770da82aa8effd3be27068db60f2acc917e22451b717af3b1e6f349731a", 0x7f, 0x5}, {&(0x7f00000001c0)="916ea364feb298f78ccf66aa500e10b0c100a16ca4e02e466c62433d5a4037fd2eac783d9b079fb326ec96b71521262798c86db664e2784e9893d6fdd255195316a0d88578c6a5b4ebf50a72054eb735325a3afd3d86f9ca214dbdfb3c30f54ff05197877dba7ecfceef44b5ab03f3e4115015bf24fc347efff2c7e9b7a05ea3aec9028211f114bcadec62606af7fd91248fb95bfc9508df9141f684d39033450924a8c2fb25a6eb0928cd678b758dc49691b1a25aad40b3f8a9ab5a70aef91a1f1d3694332b6a8778cfb277f927132136e9441175ed08862743be3b9a6e", 0xde, 0xff, 0x9}, {&(0x7f00000002c0)="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", 0x1000, 0x5, 0x5}], 0x2) ioctl(r0, 0xc2604110, &(0x7f0000000040)="c758a632b836780046eb601a42b04e404ac485b35cbdefb03d08b66f69a6beeb15897f000000000000002e") 2018/05/21 12:30:50 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x200, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8, 0x10b001) openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x450d83) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000040)) 2018/05/21 12:30:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0xfffffffffffffffd, &(0x7f0000000280)=0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000200)=[0xd79, 0x5]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) getsockname$packet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000001c0)=0x14) fadvise64(r0, 0x0, 0x20, 0x3) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x0, 0xa6b8}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000002c0)={r2, 0x1ff}, 0x8) 2018/05/21 12:30:50 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:30:50 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000004cc0)) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) io_setup(0x0, &(0x7f0000000080)=0x0) clock_gettime(0x1, &(0x7f0000000200)={0x0, 0x0}) io_getevents(r1, 0x100, 0x2, &(0x7f0000000140)=[{}, {}], &(0x7f0000000240)={r2, r3+10000000}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x400000, 0x0) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000340)=0x100000000, &(0x7f0000000380)=0x2) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/05/21 12:30:50 executing program 4: openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(0x0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)) r0 = semget(0x0, 0x5, 0x8) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0xd5fa, 0xfffffffffffffffa, 0x2, 0x0, 0x4b6, 0x10001]) 2018/05/21 12:30:50 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000080)={0xffffffffffffff7f, 0xffffffffffffff01}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000000140), &(0x7f0000000000), 0x6, &(0x7f00002c2000/0x1000)=nil, 0x3) 2018/05/21 12:30:50 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) 2018/05/21 12:30:51 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:30:51 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2000, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) mq_timedsend(r1, &(0x7f0000000180)="ac39af0413541c677dd05803411449a0c19f55459477518fc28b63cc1335a41447abc08d997004acd16a94adb07fb4a89358c97a50a47c5f61f7d1a4fe4c133a1f061b7d975cdb6676fd7f491880bd4d89a4fbb1c4b818ef945f1c4d8491f85a6b18492384a0f68c9d949b7b84e6c249a2ac5c0315a22f750ea32f8d465ea3989820b962660a2601efa976792ddc463907a5793d7abf31c577d177129c855fe2d35fe153443c667d081390850cbe498a517e9fbc671ffd9292b02891ea11b1732bf536c614fbf34c5849e21d52d60feaee9b02afad91dda554a5e57708", 0xdd, 0x100000001, &(0x7f00000000c0)={r2, r3+10000000}) 2018/05/21 12:30:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x8) 2018/05/21 12:30:51 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) r1 = memfd_create(&(0x7f0000000000)='ppp0self\x00', 0x1) pkey_alloc(0x0, 0x1) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040)) 2018/05/21 12:30:51 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000100)=0x1, 0x4) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="29000000200019fff63d0014000000060a0000a915de0005190000040d000c000000800000f9000008", 0x29}], 0x1) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x20, 0x40000) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000080)) [ 831.130566] device bridge_slave_1 left promiscuous mode [ 831.136431] bridge0: port 2(bridge_slave_1) entered disabled state 2018/05/21 12:30:51 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000080)=""/250, 0xfa) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)=0xffffffffffffffff) [ 831.251520] device bridge_slave_0 left promiscuous mode [ 831.257342] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:30:51 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:30:51 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000100), 0x0) sendto$inet(r0, &(0x7f0000000180)="d1", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @loopback=0x7f000001}, 0x10) [ 831.431019] team0 (unregistering): Port device team_slave_1 removed 2018/05/21 12:30:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080), &(0x7f0000000280)=0x4) io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) ioctl$KDDELIO(r0, 0x4b35, 0xe51) inotify_init1(0x800) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000001c0)) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000002c0)) r2 = geteuid() quotactl(0x100000000, &(0x7f0000000300)='./file0\x00', r2, &(0x7f0000000340)="d2be8e9ce69264bd565de273050b85a5aaa131ab6787ab0d384c5007798551f9dc9b14d631f4b9daaba746a5652efa1b787dae305610a19312f4197023f41d49276bb220ca0c1e1ed39dd9d41d46ac802accf663beb405123df72f6b0efafa128253d78e93a1e066589e02ec70b7f2be655b9fde5873abbbd36d9a228e180ca9a661b75bd91dd56942876fdf63d997084734461a295d04a01b4514bdecd368b718d6188c80b61137602ef0c91a529a") [ 831.496028] team0 (unregistering): Port device team_slave_0 removed 2018/05/21 12:30:51 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0x56, "614406d8a3013ac974073d98de7c7b588f98dd3e9a898e59c75cd37655d5382db4f9eb146c228e79e024b4da125c64fdd9b4d7856d584b8b229849c2bba8f8d80ec7f534b228c88e71f766301288cc6c969c6bbd9bb7"}, &(0x7f00000000c0)=0x5e) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={r2, 0x9, 0x20}, 0xc) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300001600000000000000000000000400030000000000000000000000000000000000000200000000000000000000050029d2696c00000a000000000000000000000000000000000000000000000088000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000000500057c0daf540ae3b04ac05865f300000000000a00000000000000fe8000000000000000000000000000ff0000000000000000b347aa10453e9e05361dd242eecb1bb45dbd77ee9189ef83eed9d73a4f6c41d76b2cd160764a5410ea26ae5ce55b6f26a6ea48677afbb4653080233fd8dcaf7359a1d67f2eb10f577320d6a8ca6a327252ea7fc0bc653e65373cd9762a4ac228ae76ceef06a12e924f6112c51c2aa7f335d590ed113140efbb882c846c3ffe949574181aa034367b6b69942610afdc74eb1ae4c621bc7af56ae43ab1f070a0cfba3a379651a2a1b2bb5564f729590ed0a82fdf35b73a90ff867c654a6797c04005c01dfd4e2d3358e4580cc1cdecd6ad0917082572a0d8de49efebdad0392258ae86199588565e3756f8c04cf27a97e8482a11c5c9bd47ff11941d77a64537"], 0xb0}, 0x1}, 0x0) [ 831.553181] bond0 (unregistering): Releasing backup interface bond_slave_1 2018/05/21 12:30:51 executing program 5: add_key(&(0x7f0000000340)='rxrpc\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0x0) [ 831.630494] bond0 (unregistering): Releasing backup interface bond_slave_0 2018/05/21 12:30:51 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:30:51 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400100, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000040)={0x6, 0x3, 0x0, [{0x4912, 0x1, 0x1f, 0x1000, 0x0, 0x8000, 0x3}, {0x0, 0x2, 0x6, 0x100, 0x3ff, 0x7ff, 0x4000000000000000}, {0x8001, 0x5, 0x1, 0x6, 0x101, 0x2, 0x80000001}]}) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000140)) [ 831.769503] bond0 (unregistering): Released all slaves 2018/05/21 12:30:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000200)=0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000880)) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x5, 0x100000000, 0x10040, 0x6}, 0xffffffffffffff65) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000000)=0x2) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) io_submit(r1, 0x8, &(0x7f0000000840)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0xcdd2, r0, &(0x7f0000000240)="5a2123d8b8771abfb301f901bd5c0949bdf695db8ebedcdfc18fff52f63de4fc861c85adc3a423152d1ff97f7e301e1fd7ad6f398416b97c0a987efa9d00fdf1c862f014b600f39bbeca5fbccd929f", 0x4f, 0x90e2, 0x0, 0x1, r0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x1, r0, &(0x7f00000002c0)="c7e747528d244565f2103109d701554f53ecd22a195c5a61847b7a8f2691a457b80b4746260a18d3372ee806e12eb3", 0x2f, 0x1, 0x0, 0x1, r0}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x7, 0x100000001, r0, &(0x7f0000000340)="136e4d180f92f3f95a04eecd526ca7ecbfae94657c68f0455a66ce4a21bf429b3688efdbd09b9927e0a795e1502876e91bcd9e67874ec11a599622b5636213874766643e74511fc85d612e0ec4f0918ba294f8aa403022875ace93d10c34db5d", 0x60, 0x10000, 0x0, 0x0, r0}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x0, r0, &(0x7f0000000400)="ca2c0ff9bf41fd9c0a75e73392d1cff5b7cc740936ba1b2eedb737470dec24a240b3460521bb33caf9bc3bc8a231c66176ebca42bd53ae088a57bd967efa3381caa8e527f753554d8836c8b8ca9ec5abb767aeed56d842e10c1ac0bc2359d202d24d78c5532dd55e32b4bf34ee8ac223b798f630dc48b591e010af11def62155b81f507a3411f945ef1f1e0d00e5ea5d791fde81842a2ec1e877da7d7e2dcaed4dfbb2822125b2ead51db2053833e280542cd59b8a95b6cf", 0xb8, 0x81, 0x0, 0x0, r0}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x6c, r0, &(0x7f0000000500)="d2351a3ef0651a237e8c1cbe55fed963296dcd89461fcf12b22bd6dfeab8cb04f1ace32e5d2f4e94e995001440b6b4871b52c04b8eaf3d58739d5dd51c5df8072074caca8f", 0x45, 0x1, 0x0, 0x0, r0}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x5, r0, &(0x7f00000005c0)="88bb8ebfdf15c3e8927177056276c436a9503c15af19535977171fab0e0cd15821b4c356ca9bb7741958c3a456cbdda0d6797c8ab6f8f236e355c3d52909497290a3cf3043e18f1a5b7c75c29e268c24aa984687abbab7fde8e737c2879f1d8a54112f3f0abdebb3c973cb53ae438a1c49fb55f80d545c92a4b4bdc9674bbc03a854e0ed3e151134fd993e", 0x8b, 0x6, 0x0, 0x0, r0}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x9, 0x1f, r0, &(0x7f00000006c0)="2dfcae07b41f4e2ad1e45f75276d596f2afcea9811bed34af1376429788075f89f2c53028ce087b3caf6572f3b7e76503db69fd054bab948994fca96ef9552c03830e4406e84b23f1caf68fbce0795e3406a7aee55a67e1b12123893d3fec87a9413a653d3fe67a21fd64a7c9baf", 0x6e, 0x4a9a, 0x0, 0x0, r0}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000000780)="9425c05283e8238f7dc085b994d71d8769af5938a67ce9777e09f30305ae594501f6a5577be59d3ac871a7b0e3e2411741ba2d8560e30fde8a17d42754530ddbcd04b5745361b6", 0x47, 0xffffffffffffff80, 0x0, 0x1, r0}]) 2018/05/21 12:30:51 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@abs={0x1}, 0x6e) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x80000000004) pipe(&(0x7f0000000080)) write(r2, &(0x7f000058bfe4)="29000000140003b7ff000000040860eb0100100006a40e07fff00fd57f25ffffff0100002a00f3ff09", 0x29) [ 831.927137] IPVS: ftp: loaded support on port[0] = 21 [ 832.972165] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.978621] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.986132] device bridge_slave_0 entered promiscuous mode [ 833.023841] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.030271] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.037614] device bridge_slave_1 entered promiscuous mode [ 833.074132] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 833.111461] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 833.216888] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 833.257314] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 833.426535] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 833.433795] team0: Port device team_slave_0 added [ 833.470276] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 833.477800] team0: Port device team_slave_1 added [ 833.514600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 833.552532] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 833.591988] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 833.599453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 833.608590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 833.641552] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 833.648826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 833.657959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 834.027149] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.033582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 834.040362] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.046766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 834.054334] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 835.040639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 835.432254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 835.563285] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 835.692688] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 835.698980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 835.707155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 835.840956] 8021q: adding VLAN 0 to HW filter on device team0 [ 836.614890] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 836.625957] syz-executor2 cpuset=syz2 mems_allowed=0 [ 836.631207] CPU: 1 PID: 16226 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 836.638591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 836.647942] Call Trace: [ 836.650532] dump_stack+0x185/0x1d0 [ 836.654157] dump_header+0x2cc/0x16f0 [ 836.657954] ? is_console_locked+0x29/0x50 [ 836.662183] ? kmsan_report+0x4f/0x260 [ 836.666086] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 836.671546] ? ___ratelimit+0x67f/0x760 [ 836.675526] oom_kill_process+0x341/0x2160 [ 836.679758] ? mem_cgroup_scan_tasks+0x289/0x610 [ 836.684522] out_of_memory+0x1700/0x1da0 [ 836.688585] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 836.693968] ? _cond_resched+0x8b/0xd0 [ 836.697867] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 836.703074] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 836.708446] pagefault_out_of_memory+0x57/0x110 [ 836.713128] mm_fault_error+0x490/0x810 [ 836.717120] __do_page_fault+0x1272/0x1a10 [ 836.721358] ? page_fault+0x1e/0x30 [ 836.724976] do_page_fault+0xd3/0x260 [ 836.728784] ? page_fault+0x8/0x30 [ 836.732318] page_fault+0x1e/0x30 [ 836.735765] RIP: 0033:0x4071d8 [ 836.738942] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 836.744305] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 836.751561] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 836.758817] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 836.766081] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 836.773340] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 836.781148] Task in /syz2 killed as a result of limit of /syz2 [ 836.787236] memory: usage 804kB, limit 0kB, failcnt 864 [ 836.792665] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 836.799496] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 836.805735] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 836.825655] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 836.834473] [16226] 0 16226 17553 8392 114688 0 0 syz-executor2 [ 836.843374] Memory cgroup out of memory: Kill process 16226 (syz-executor2) score 8420000 or sacrifice child [ 836.853450] Killed process 16226 (syz-executor2) total-vm:70212kB, anon-rss:76kB, file-rss:33492kB, shmem-rss:0kB 2018/05/21 12:30:56 executing program 6: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r0, 0x8, 0x0) close(r1) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000000)='\a', 0x1}], 0x1, 0x0) setsockopt(r2, 0x7, 0x0, &(0x7f00000000c0)="969dba3bbd212fc45f838958b53136d6cd0f9727570508a573742d8b87fd", 0x1e) 2018/05/21 12:30:56 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = accept4(r0, &(0x7f0000000000)=@un=@abs, &(0x7f0000000080)=0x80, 0x800) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x1, {0x2, 0x4e21, @multicast2=0xe0000002}, {0x2, 0x4e20, @broadcast=0xffffffff}, {0x2, 0x4e22, @multicast2=0xe0000002}, 0x10, 0x100000001, 0x1000, 0x9, 0x100000001, &(0x7f00000000c0)='bridge_slave_0\x00', 0x1, 0x1, 0x5}) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) 2018/05/21 12:30:56 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x4000, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001ac0)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001b00)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000001c00)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001c40)={0x0, 0x0, 0x0}, &(0x7f0000001c80)=0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001cc0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001d00)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f0000001e00)=0xe8) r7 = getgid() sendmmsg$unix(r1, &(0x7f0000001ec0)=[{&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000300)="30df964a17c3b5a179a9933223874cc62261f171fd8be6bc92019171cb51309ca937656cc6e9592422f65f4c0a340eb7ad700ed5926c57e77454651023a85a95eba86bb90853b706a52b7d60753a0b5acf6edac8c3d6e80ac9b2355cd1286ca3ddc693c8bb327b6147b04ebed57a5501ad91b8eb54d01891d3252569e7fa8b458cbb5538dd2fc00eb866c02551e8b7b7a431e5309abef18c25bc3e9066bf6c7e6af9d8af9e23e2aeed78d679a838b6f1081edc8c668334e217ba7622c23f7d63f8be4716", 0xc4}, {&(0x7f0000000400)="1286b273a029933b9798d3d5d3bf4a84e3af71c1757978ad83c0de044e0954be4ce37888cb704d0a15cf15794d378002c93b082f00d508260fc0d2a49da45db440", 0x41}, {&(0x7f0000000140)="7b1212a07aaa911669d6add2a580c7ecb3b69b6d2449eda2feae689ee4cfb6dc194bc4d0cc8e2518387c1aaf33eb49326f50c2fdaddbd7deb9f91e6c", 0x3c}], 0x3, 0x0, 0x0, 0x800}, {&(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001700)=[{&(0x7f0000000540)="7827216edc4351eff2d7a5c2657f30eb23a514644b4161452e9036e0337fcacd781b8c9798e469e68171239f0d8fc3fbcc1ab3a2eaeed52076f4c82d62243ef2549a809a74a4474adb10977511210c7fa54185a55e1a7ef8e6b54ff1b94da38ec22b1b1762a6b53870cb1e9e25cc29bc99612fbddc10bb854f1a6db5e15ac1c3c4c4d59a11f7484e4e31c81966848df74e9030ad514ef6cd584196cc3b448663d5c681ef6c75049aa5ae788db6acb064f1d0ecd587c1928362c92a6f1a901064cb42bd7256d0f9cbea3026100ed9f2ec3594d3aaccc2ce", 0xd7}, {&(0x7f0000000640)="cf891ecbe391370fa40bc3f3f395a4bc718cc68e3154a5f97ee9fdb30461befadc6a38ee75de472b511f875d7937b3d0a647ffe2cae52d228fead71056ede421165ef28887e0225c2030fb21de43f2b7fae1667dddb7303a3f04e5bbbbdb", 0x5e}, {&(0x7f00000006c0)="8ca63256bbffd1d05f870a895f423b31999c22c24dcda9ac5cee38a01ad0c5ab514aa2cfe08fe74868176eaf28ccb354b8debb", 0x33}, {&(0x7f0000000700)="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", 0x1000}], 0x4, 0x0, 0x0, 0x1}, {&(0x7f0000001740)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001a40)=[{&(0x7f00000017c0)="b16a483cf22e7caf9890beb4bcfe985600bbc5b784c3d49cafd7b6f2baa172faba0c9c9c5d58465826fa3d154b51ab2d9bddf51091f1cf293524c81ec8e84ace", 0x40}, {&(0x7f0000001800)="92cfe6d42cedf497d58f561f05675467266ff7e84c7dbf18c29e4b8eb10e678a9298f6da1bc5f4000825bf782525f307d62eed7b7323ee88f8d0f7ce392232a9733691d22f00fc71a75d2a7d046cd95696eb44d551fece852249a285dcff38e64415edc261553410b15444bbfb88abdf3af20660e70046a5e5ea5148c05225acb2d7e8c80d7b8b208be20756934085b3590e2394312e3f0fd165c302fc7e7780b8718fba26071a8a3eeaecf30c30e57cdc3309c477e9d347b5e988053c4d5e82a5568dbbfe9a697cb2d5b4037dd2fdf764c058e80833f46388b0371790bf5a11eb05b1cfe866b9982421787597128f6fb3df", 0xf2}, {&(0x7f0000001900)="36ca10b2d6d6bb85282cf2abd3", 0xd}, {&(0x7f0000001940)="e00be1bd08d4d4bb0e546e92a2255384627c113606c1a647d752a531349a0a2b00502dbca0c25da407e3fa7b0307375beb4044f4227f7594428683e2870b2344086152b055aef6e7e916b1167336501fa2927d85107a7f3c46a5c641ce2c37b3de4ceca390ad732732633b1b3c87fc6f50168e0ca9854013eb224e51c0f1523bdd6c7d84e6c6b575e9de1fad0024ae42cf067bd798dabf6ef83d6fbc75566682c2c704f81f8cde41c0bd6d2d2c2cb0a85cc88ad36337dd6828f39610e762e092ef92d9331f086b5b8a5f4bef54f21bc84d10d076421fc63521b2d8228ebcc41e737edd24497ea65e844d332d67de7e18bc", 0xf1}, {&(0x7f0000002880)="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", 0x1000}], 0x5, &(0x7f0000001f80)=ANY=[@ANYBLOB="2800000000000100f3ff020000000000a02985b0925d65b78a1207527a0bd237e1e5103b4f2c3dd5cf76ac8e6ec76c26aa07704648a583e69b609f9e51f04973787c5fc994da52b5e7d33e9b45f3b9c541e5a91b69794aabccd2ec758e7de12258c9f8471732472f8b4d64a12d3b0887a925ce4349269cbbaf", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], 0x68, 0x4}], 0x3, 0x4000) 2018/05/21 12:30:56 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000004cc0)) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) io_setup(0x0, &(0x7f0000000080)=0x0) clock_gettime(0x1, &(0x7f0000000200)={0x0, 0x0}) io_getevents(r1, 0x100, 0x2, &(0x7f0000000140)=[{}, {}], &(0x7f0000000240)={r2, r3+10000000}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x400000, 0x0) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000340)=0x100000000, &(0x7f0000000380)=0x2) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/05/21 12:30:56 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_setup(0x3ff, &(0x7f0000000080)) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:30:56 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x400) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r1 = semget$private(0x0, 0x20000000104, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r1, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000100)={0x2, 0x2, 0x1, 0x200}, 0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x800}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000200)={r2, 0xcc, "32de9119eb26034cb7c640e5636a0a113621aa7d1a23ba41a25d14fde0971b64f7311e7c4ff657ca2bf6217605ed8bfccd5409a1f59ddc6226b6aa442763f0b16e5466fdbe94e7b3f825c87d8f8d352e2969f28095c5a7a0ffeee20aba5144d17aeaa438f80f86e0c5bb78e2ee63dd044a9e2f3c51bbfa58cd4ceddddc20846a240caa3b29c4cf81d8376f2d8a045e3965e8bf038bdfc5d238acb0a3f7f8d1ba27a87f870dd9420d469501ce38e617c8c26b77206fea0d20e0738d062146f3dc5781cc763be17b61652e65a7"}, &(0x7f0000000300)=0xd4) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000140)) 2018/05/21 12:30:56 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:30:56 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='loginuid\x00') read$eventfd(r0, &(0x7f0000000240), 0x8) sendfile(r0, r0, &(0x7f0000001380), 0x10000) read$eventfd(r0, &(0x7f00000000c0), 0x8) 2018/05/21 12:30:57 executing program 5: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create(0x420000003) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x9000200d}) shutdown(r1, 0x0) poll(&(0x7f0000000080)=[{r3}], 0x1, 0x0) [ 837.066333] device bridge_slave_1 left promiscuous mode [ 837.072200] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.105330] device bridge_slave_0 left promiscuous mode [ 837.111232] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:30:57 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x400000) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000040)) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x4000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000300)={{0x14, 0x7, 0x20, 0x5, "7f59232e79b85fac689fd865dba06800e767d3b9c7ee98e9f7d843970b2ace770fc3ebd8bc4eef138cc23169", 0xffc}, 0x7, [0x0, 0x9, 0xff, 0x4, 0x2, 0x5, 0x8, 0x3, 0x11, 0x7, 0x6, 0x1, 0x9, 0x9, 0x3, 0x4, 0x5, 0x2d22, 0x7fffffff, 0xffffffffffffff01, 0x3f, 0x6, 0x4, 0x8, 0x9e, 0x8, 0x6f, 0x2, 0x8000000008, 0xcca, 0x1ff, 0xfffffffffffffffa, 0x1, 0x80000001, 0x1ff, 0x3, 0x7, 0x1, 0x7f, 0x10000, 0x7, 0x9, 0x5, 0x7, 0x5, 0x8, 0x0, 0x31bffbfb, 0x1ff, 0x0, 0x1000ffffffff, 0x1fae, 0x9c27, 0xad2, 0x8, 0x13, 0x9, 0x3, 0x5, 0x1, 0x5, 0xa, 0x100, 0x5, 0x3, 0xd3d, 0x986a, 0x2, 0x9a, 0xe8, 0x1ff, 0x3, 0xba, 0xe66, 0x3, 0x0, 0xff, 0x778, 0x8, 0x28, 0x747, 0x10000, 0x4, 0x0, 0x1, 0x61, 0x1, 0x7, 0x5616, 0x3f, 0x2, 0x5e, 0x9, 0x5, 0x98, 0x1, 0x10000, 0x1, 0x4759, 0x2, 0x100000002, 0x1, 0x4, 0x3, 0x6, 0x100000000, 0x7, 0x10001, 0x401, 0x800, 0x95e0000000000000, 0x40, 0x9, 0x4e, 0x3, 0x0, 0x10000, 0x5, 0x157c, 0x2, 0x793, 0x2293, 0x8e, 0x7, 0x62e, 0x5, 0xffffffffffff8461, 0x9], {0x0, 0x989680}}) fcntl$setsig(r2, 0xa, 0x29) finit_module(r1, &(0x7f0000000140)='/dev/amidi#\x00', 0x1) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0xb0}, 0x1}, 0x0) r3 = inotify_add_watch(r2, &(0x7f0000000100)='./file0\x00', 0x21000002) inotify_rm_watch(r2, r3) 2018/05/21 12:30:57 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x610080, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000001c0)={0x303, 0x33}, 0x4) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000001200)}]) [ 837.230368] team0 (unregistering): Port device team_slave_1 removed [ 837.258717] team0 (unregistering): Port device team_slave_0 removed [ 837.293373] bond0 (unregistering): Releasing backup interface bond_slave_1 2018/05/21 12:30:57 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02030000160000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe80000000000000000000000000ff0000000000000000"], 0xb0}, 0x1}, 0x0) socket$key(0xf, 0x3, 0x2) fcntl$setstatus(r0, 0x4, 0x427fc) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x2, 0x2, 0x0, 0x12, 0x0, 0x70bd2d, 0x25dfdbfd, [@sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e22, @loopback=0x7f000001}, @in={0x2, 0x4e23, @rand_addr=0x6}}, @sadb_address={0x3, 0x7, 0x3c, 0xa0, 0x0, @in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}, @sadb_x_nat_t_type={0x1, 0x14, 0xffffffffffffb7a9}, @sadb_x_sa2={0x2, 0x13, 0x1ff, 0x0, 0x0, 0x70bd2c, 0x34ff}, @sadb_x_filter={0x5, 0x1a, @in6=@dev={0xfe, 0x80, [], 0x1b}, @in6=@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x10, 0x4, 0x14}]}, 0x90}, 0x1}, 0x840) [ 837.336937] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 837.444827] bond0 (unregistering): Released all slaves 2018/05/21 12:30:57 executing program 1: r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000200)='stat\x00') openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x10000, 0x0) io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000001200)}]) 2018/05/21 12:30:57 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x80000001, @dev={0xac, 0x14, 0x14, 0xe}}], 0x10) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001000)=[@in={0x2, 0x0, @loopback=0x7f000001}, @in={0x2, 0x0, @rand_addr=0x800}, @in={0x2, 0x0, @rand_addr}], 0x30) 2018/05/21 12:30:57 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xdc, 0x50100) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e20, @rand_addr=0x8001}}, 0x200, 0x4, 0x8001, 0xffffffffffff6a06, 0x80}, &(0x7f0000000180)=0x98) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) [ 837.693839] IPVS: ftp: loaded support on port[0] = 21 2018/05/21 12:30:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000080)}]) 2018/05/21 12:30:57 executing program 5: r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000200)='stat\x00') openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x10000, 0x0) io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000001200)}]) 2018/05/21 12:30:57 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'syz_tun\x00', {0x2}}) chmod(&(0x7f0000000040)='./file0\x00', 0x18) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x20400, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000000c0)={0xfffffffffffffffb, 0x3, 0x200}) 2018/05/21 12:30:57 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x8440, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000240)={0x1000, 0x8004, 0x3f, 0x81, 0x0}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000340)={r2, 0x364d}, &(0x7f0000000380)=0x8) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) name_to_handle_at(r1, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x14, 0x1, "7d0def544e33446b481620c5"}, &(0x7f0000000440), 0x1000) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$ax25_buf(r1, 0x101, 0x19, &(0x7f0000000480)="5dc72221c5ae72d6ad0e3415f5897aeb34d47caeb9a48e9d63370085432dafcc9e25473a", 0x24) r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x800) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f0000000140)={0x2, 0x4, 0x200000000006, 0xb6e, 0x13, 0x2}) 2018/05/21 12:30:57 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) socketpair(0xa, 0x3, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000180)={'filter\x00', 0x0, 0x4, 0x93, [], 0x5, &(0x7f0000000040)=[{}, {}, {}, {}, {}], &(0x7f00000000c0)=""/147}, &(0x7f0000000200)=0x78) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000240)={0x2, 0x400000000000003, 0x0, 0x0, 0x17, 0x0, 0x0, 0x40000, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_x_nat_t_port={0x1, 0x0, 0x4e22}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e20, @broadcast=0xffffffff}, @in6={0xa, 0x4e23, 0x58, @empty, 0xd0}}, @sadb_lifetime={0x4, 0x4, 0xffff000000000000, 0x2, 0x8, 0x100000001}]}, 0xb8}, 0x1}, 0x0) 2018/05/21 12:30:58 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) [ 838.013588] Unknown ioctl -1068739767 [ 838.029611] Unknown ioctl -1068739767 [ 839.088306] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.094804] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.102267] device bridge_slave_0 entered promiscuous mode [ 839.139189] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.145658] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.153214] device bridge_slave_1 entered promiscuous mode [ 839.189289] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 839.225536] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 839.330603] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 839.370427] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 839.534571] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 839.541842] team0: Port device team_slave_0 added [ 839.577755] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 839.585029] team0: Port device team_slave_1 added [ 839.621513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 839.663024] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 839.704421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 839.744636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 840.110779] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.117221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 840.123978] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.130374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 840.137980] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 840.991232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 841.503438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.636583] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 841.768138] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 841.774411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 841.782889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 841.908502] 8021q: adding VLAN 0 to HW filter on device team0 [ 842.680593] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 842.691662] syz-executor2 cpuset=syz2 mems_allowed=0 [ 842.696938] CPU: 0 PID: 16540 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 842.704307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 842.713656] Call Trace: [ 842.716246] dump_stack+0x185/0x1d0 [ 842.719875] dump_header+0x2cc/0x16f0 [ 842.723676] ? is_console_locked+0x29/0x50 [ 842.727910] ? kmsan_report+0x4f/0x260 [ 842.731803] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 842.737272] ? ___ratelimit+0x67f/0x760 [ 842.741256] oom_kill_process+0x341/0x2160 [ 842.745487] ? mem_cgroup_scan_tasks+0x289/0x610 [ 842.750254] out_of_memory+0x1700/0x1da0 [ 842.754319] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 842.759694] ? _cond_resched+0x8b/0xd0 [ 842.763604] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 842.768794] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 842.774170] pagefault_out_of_memory+0x57/0x110 [ 842.778843] mm_fault_error+0x490/0x810 [ 842.782834] __do_page_fault+0x1272/0x1a10 [ 842.787097] ? page_fault+0x1e/0x30 [ 842.790747] do_page_fault+0xd3/0x260 [ 842.794542] ? page_fault+0x8/0x30 [ 842.798087] page_fault+0x1e/0x30 [ 842.801538] RIP: 0033:0x4071d8 [ 842.804719] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 842.810084] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 842.817345] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 842.824608] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 842.831868] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 842.839135] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 842.846611] Task in /syz2 killed as a result of limit of /syz2 [ 842.852841] memory: usage 804kB, limit 0kB, failcnt 872 [ 842.858295] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 842.865133] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 842.871343] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 842.891288] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 842.900193] [16540] 0 16540 17553 8392 114688 0 0 syz-executor2 [ 842.909126] Memory cgroup out of memory: Kill process 16540 (syz-executor2) score 8420000 or sacrifice child [ 842.919259] Killed process 16540 (syz-executor2) total-vm:70212kB, anon-rss:76kB, file-rss:33492kB, shmem-rss:0kB 2018/05/21 12:31:03 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) 2018/05/21 12:31:03 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x0, 0x3, &(0x7f0000008000)=@framed={{0x18}, [], {0x95}}, &(0x7f0000008000)='syzkaller\x00', 0xd995, 0x7f, &(0x7f000000a000)=""/127}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001fb8)={0x1, 0x5, &(0x7f0000003000)=@framed={{0x18}, [@alu={0x5, 0x0, 0xb, 0x0, 0x0, 0x1}], {0x95}}, &(0x7f0000002ff6)='syzkaller\x00', 0x7e0, 0xe7, &(0x7f0000002f19)=""/231}, 0x48) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0x5, 0x5, 0x68c, {0x77359400}, 0x4a, 0x100000001}) rt_sigsuspend(&(0x7f00000000c0)={0xfff}, 0x8) 2018/05/21 12:31:03 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0xfffffffffffff5c0, &(0x7f0000000000)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:31:03 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x4000, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000140)=0x7, 0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000040)={{0x1}, 'port0\x00', 0x2, 0x400, 0x1ff, 0x9, 0x8, 0x20, 0x8000, 0x0, 0x2, 0x2138}) 2018/05/21 12:31:03 executing program 5: r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000200)='stat\x00') openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x10000, 0x0) io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000001200)}]) 2018/05/21 12:31:03 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x100000000, 0x800) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) chroot(&(0x7f0000000300)='./file0\x00') ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000340)={0x1f, 0x7, 0xa76}) stat(&(0x7f0000000140)='/\x00', &(0x7f0000000380)) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/05/21 12:31:03 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(0xffffffffffffffff, 0x5eb857) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r1 = accept4(0xffffffffffffffff, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r1, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:31:03 executing program 2: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000180)={'bridge0\x00', &(0x7f0000000200)=@ethtool_pauseparam}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x400000, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getneightbl={0x14, 0x42, 0x100, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x80) 2018/05/21 12:31:03 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(0xffffffffffffffff, 0x5eb857) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r1 = accept4(0xffffffffffffffff, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r1, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:31:03 executing program 5: r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000200)='stat\x00') openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x10000, 0x0) io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000001200)}]) 2018/05/21 12:31:03 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x7, &(0x7f0000000800)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x9, 0x0, r0, &(0x7f00000001c0)="1db970ef9f7c56161c7f8cc03c182516ba8ee9ec5da39c3f35dd5a331f56c65b0d86fc7703baec97e92c49081764a669bc298eab255b206f7230261e5991d6a7bc4609ffcd3f31f4e8380e14920d874c3f7c2826a0ef14ad2ef969692cd452", 0x5f, 0xffffffffffffffc1, 0x0, 0x0, r0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f0000000240)="a85f09df76855a08ff3c45dde4adae1d2ed23b0d28f9c777927980a827cb5c87739fd33cd405d6240a22c0adcc7c7b8a4e9db8bc342ad6c4b3948704acf953e159f0e7cbb2df622f6e21fc9e0b9e6b34a27dde8661a478876af7bb299ea6b288ed0155d34ae8afa4d7f8fdfae2b484561a7531c1a1e67b86b291564fd99027b1275096ee233be5d0b67abb7ea4f5f028984e8396f350557ebf9f620b", 0x9c, 0x1ff, 0x0, 0x1, r0}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x1, r0, &(0x7f0000000340)="8966bc4012b13ba21ba528070743a5c2402fdf62c3f2764c4924f8ede6685a93042ca3ba62c6616961bc5d11dbaa806d8f801de31c0cd04a7fcef83c83b069fa2037f6f6db064bbb97bf6c647057e10911800746b2c810ca164bd979c1198848940f7ac859ffb194cace864778c62786f2067191fa44456e9fab24a107fe3872834301989b4c389469a0de8ab7e3ea91ec0f0e367b9d05dbfddbf61f6a176c37179740d670b9956f1a00b73f", 0xac, 0x800, 0x0, 0x0, r0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x4, r0, &(0x7f0000000440)="78176f3f2a57c82836607aec9c086a6492805e1595f05de06863a0cedacbae9a2ef3068243910dcc3ecb5199136bce8abae0010c0de537899d8aab6b406a50e54538d70c55184a6070c8cd76e8b447967af4b60dd14d186697225de95052626fcd6366a484ae238080aabebb8da7c06afda9969ab745fb0147c99d061a5b1fc7bce169fb41459b141064dc6084a201616b2b0aef9282c9e8b7b0cec71046800841bfff84e78d54", 0xa7, 0xc21, 0x0, 0x1, r0}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000000540)="f426bd501ab34e68b129332f4c122a5a7289b76d3f5a148b3605da326448fb19e535c612127de28e37929331bfd29b6c85c157c5f047d90021351e24ae53c38de309e292cae5d6d14edc22d3b15b74228a42d4dd84d31c43f5afcd36928f697ed398424cb851103ea77a717afebaab73f1533e9b693f18726a84d8040bdf193d22e0c5e1722bf2ccc1bf8a9dac6823f09779f5c67ea26bd25fc46c888ccbbd5b874af537d3e956bf23e12543e7badc34551ff60f836cb6dcab", 0xb9, 0x7, 0x0, 0x1, r0}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x7, r0, &(0x7f0000000640)="8b29e790318b03bccd5166b7ed6a4fe8e72a3c378eef69506250839f0ba39a311329fa3d595b7c53", 0x28, 0x0, 0x0, 0x1, r0}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f00000006c0)="7acf6a3550242ad60f7f9c4bed9090295ffd1f11c412ac5dbdda0bf8e6598e73f753520a36b579ac45d72523e6c647d1e5a27ddf037940722c67dab79bec603298794f7a89af1a1eebce384efec68016136eb3054ec12a3e5fba9bee9fe3e556177048a0648a29866c727efb1c4898d116f3ed8419a40a3b00e9e165d49f846a8416fd31e235eb30745a5de66d3421fb5524c0e56e1749c6a625b650b4f8a786ee3361dd0e2796ddb81632bd06920bfee14994466defbb035fe7b3b240050f6ced09d1bacd5898321f265f103cbfae86d0e183ee728a30b70b3c9c", 0xdb, 0x8000, 0x0, 0x1, r0}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffff549, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) [ 843.283420] device bridge_slave_1 left promiscuous mode [ 843.289387] bridge0: port 2(bridge_slave_1) entered disabled state 2018/05/21 12:31:03 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000100)=0x7) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203000016000000000000000000000004000300a97927acf76925000000000000000000000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000400040000000000000000000000000000000000561ffd8f0631337c000000000200010000000000e0116350c980d23489000000000000000005000500000000000a00000000000000fe8000000000000000000000000000040000000000000000a90000000000000000"], 0xb0}, 0x1}, 0x0) bind(r1, &(0x7f0000000140)=@ethernet={0x306, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x80) [ 843.362046] device bridge_slave_0 left promiscuous mode [ 843.368150] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:31:03 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(0xffffffffffffffff, 0x5eb857) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r1 = accept4(0xffffffffffffffff, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r1, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:31:03 executing program 5: r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000200)='stat\x00') openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x10000, 0x0) io_submit(0x0, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000001200)}]) 2018/05/21 12:31:03 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'icmp6\x00'}, &(0x7f0000000140)=0x1e) 2018/05/21 12:31:03 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x1, &(0x7f00000001c0)=0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0xfff, 0x4) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) [ 843.561574] team0 (unregistering): Port device team_slave_1 removed [ 843.649433] team0 (unregistering): Port device team_slave_0 removed [ 843.705837] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 843.750834] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 843.823192] IPVS: ftp: loaded support on port[0] = 21 [ 843.846704] bond0 (unregistering): Released all slaves [ 844.756775] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.763210] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.770926] device bridge_slave_0 entered promiscuous mode [ 844.807954] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.814388] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.821739] device bridge_slave_1 entered promiscuous mode [ 844.858587] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 844.895841] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 845.003634] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 845.044576] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 845.082766] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 845.089765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 845.128423] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 845.135403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 845.243859] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 845.251319] team0: Port device team_slave_0 added [ 845.287731] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 845.294971] team0: Port device team_slave_1 added [ 845.331982] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 845.371960] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 845.409933] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 845.417347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 845.425800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 845.459332] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 845.466567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 845.475756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 845.846124] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.852554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 845.859340] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.865751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 845.873409] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 846.047474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 847.263344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 847.397757] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 847.528699] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 847.534985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 847.543532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 847.671498] 8021q: adding VLAN 0 to HW filter on device team0 [ 848.452908] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 848.464172] syz-executor2 cpuset=syz2 mems_allowed=0 [ 848.469437] CPU: 0 PID: 16893 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 848.476816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 848.486171] Call Trace: [ 848.488765] dump_stack+0x185/0x1d0 [ 848.492389] dump_header+0x2cc/0x16f0 [ 848.496190] ? is_console_locked+0x29/0x50 [ 848.500420] ? kmsan_report+0x4f/0x260 [ 848.504322] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 848.509784] ? ___ratelimit+0x67f/0x760 [ 848.513801] oom_kill_process+0x341/0x2160 [ 848.518034] ? mem_cgroup_scan_tasks+0x289/0x610 [ 848.522816] out_of_memory+0x1700/0x1da0 [ 848.526881] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 848.532265] ? _cond_resched+0x8b/0xd0 [ 848.536168] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 848.541362] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 848.546748] pagefault_out_of_memory+0x57/0x110 [ 848.551425] mm_fault_error+0x490/0x810 [ 848.555448] __do_page_fault+0x1272/0x1a10 [ 848.559704] ? page_fault+0x1e/0x30 [ 848.563328] do_page_fault+0xd3/0x260 [ 848.567120] ? page_fault+0x8/0x30 [ 848.570657] page_fault+0x1e/0x30 [ 848.574116] RIP: 0033:0x4071d8 [ 848.577307] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 848.582667] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 848.589939] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 848.597213] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 848.604490] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 848.611752] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 848.619547] Task in /syz2 killed as a result of limit of /syz2 [ 848.625787] memory: usage 804kB, limit 0kB, failcnt 880 [ 848.631256] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 848.638144] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 848.644385] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 848.664330] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 848.673222] [16893] 0 16893 17553 8392 118784 0 0 syz-executor2 [ 848.682144] Memory cgroup out of memory: Kill process 16893 (syz-executor2) score 8421000 or sacrifice child [ 848.692228] Killed process 16893 (syz-executor2) total-vm:70212kB, anon-rss:76kB, file-rss:33492kB, shmem-rss:0kB 2018/05/21 12:31:08 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) shmget(0x2, 0x2000, 0x21a, &(0x7f0000ffd000/0x2000)=nil) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) 2018/05/21 12:31:08 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/175, 0xaf}], 0x1, &(0x7f0000000200)=""/119, 0x77, 0x2}, 0x10102) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/05/21 12:31:08 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xbbb, 0x0) ioctl$TIOCSBRK(r1, 0x5427) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) mq_timedreceive(r1, &(0x7f0000000040)=""/192, 0xc0, 0xfffffffffffff353, 0x0) 2018/05/21 12:31:08 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x7, &(0x7f0000000800)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x9, 0x0, r0, &(0x7f00000001c0)="1db970ef9f7c56161c7f8cc03c182516ba8ee9ec5da39c3f35dd5a331f56c65b0d86fc7703baec97e92c49081764a669bc298eab255b206f7230261e5991d6a7bc4609ffcd3f31f4e8380e14920d874c3f7c2826a0ef14ad2ef969692cd452", 0x5f, 0xffffffffffffffc1, 0x0, 0x0, r0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f0000000240)="a85f09df76855a08ff3c45dde4adae1d2ed23b0d28f9c777927980a827cb5c87739fd33cd405d6240a22c0adcc7c7b8a4e9db8bc342ad6c4b3948704acf953e159f0e7cbb2df622f6e21fc9e0b9e6b34a27dde8661a478876af7bb299ea6b288ed0155d34ae8afa4d7f8fdfae2b484561a7531c1a1e67b86b291564fd99027b1275096ee233be5d0b67abb7ea4f5f028984e8396f350557ebf9f620b", 0x9c, 0x1ff, 0x0, 0x1, r0}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x1, r0, &(0x7f0000000340)="8966bc4012b13ba21ba528070743a5c2402fdf62c3f2764c4924f8ede6685a93042ca3ba62c6616961bc5d11dbaa806d8f801de31c0cd04a7fcef83c83b069fa2037f6f6db064bbb97bf6c647057e10911800746b2c810ca164bd979c1198848940f7ac859ffb194cace864778c62786f2067191fa44456e9fab24a107fe3872834301989b4c389469a0de8ab7e3ea91ec0f0e367b9d05dbfddbf61f6a176c37179740d670b9956f1a00b73f", 0xac, 0x800, 0x0, 0x0, r0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x4, r0, &(0x7f0000000440)="78176f3f2a57c82836607aec9c086a6492805e1595f05de06863a0cedacbae9a2ef3068243910dcc3ecb5199136bce8abae0010c0de537899d8aab6b406a50e54538d70c55184a6070c8cd76e8b447967af4b60dd14d186697225de95052626fcd6366a484ae238080aabebb8da7c06afda9969ab745fb0147c99d061a5b1fc7bce169fb41459b141064dc6084a201616b2b0aef9282c9e8b7b0cec71046800841bfff84e78d54", 0xa7, 0xc21, 0x0, 0x1, r0}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000000540)="f426bd501ab34e68b129332f4c122a5a7289b76d3f5a148b3605da326448fb19e535c612127de28e37929331bfd29b6c85c157c5f047d90021351e24ae53c38de309e292cae5d6d14edc22d3b15b74228a42d4dd84d31c43f5afcd36928f697ed398424cb851103ea77a717afebaab73f1533e9b693f18726a84d8040bdf193d22e0c5e1722bf2ccc1bf8a9dac6823f09779f5c67ea26bd25fc46c888ccbbd5b874af537d3e956bf23e12543e7badc34551ff60f836cb6dcab", 0xb9, 0x7, 0x0, 0x1, r0}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x7, r0, &(0x7f0000000640)="8b29e790318b03bccd5166b7ed6a4fe8e72a3c378eef69506250839f0ba39a311329fa3d595b7c53", 0x28, 0x0, 0x0, 0x1, r0}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f00000006c0)="7acf6a3550242ad60f7f9c4bed9090295ffd1f11c412ac5dbdda0bf8e6598e73f753520a36b579ac45d72523e6c647d1e5a27ddf037940722c67dab79bec603298794f7a89af1a1eebce384efec68016136eb3054ec12a3e5fba9bee9fe3e556177048a0648a29866c727efb1c4898d116f3ed8419a40a3b00e9e165d49f846a8416fd31e235eb30745a5de66d3421fb5524c0e56e1749c6a625b650b4f8a786ee3361dd0e2796ddb81632bd06920bfee14994466defbb035fe7b3b240050f6ced09d1bacd5898321f265f103cbfae86d0e183ee728a30b70b3c9c", 0xdb, 0x8000, 0x0, 0x1, r0}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffff549, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) 2018/05/21 12:31:08 executing program 2: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x80011, r1, 0x0) futex(&(0x7f0000001740), 0x3, 0x0, &(0x7f0000001780)={0x0, 0x989680}, &(0x7f00000017c0), 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='.trustedsystem\x00') 2018/05/21 12:31:08 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) pwritev(r0, &(0x7f00000013c0)=[{&(0x7f0000000280)="8a0c69a6addd608f7965ac5fa49120d2beaa2ca2b4a8bdd25bebf3e75ed49a3cd9f729c73f619ad14e262a9afdabecec4feb08b93ea1dd12f5adbfc437202470fc27e9fbc4899da1f681911bb5bd2212d744b4ecc3c3bbc03939b07a8dfd931cd5319d8961b38874259fb75d9fa7", 0x6e}, {&(0x7f0000000080)="ce9847f87b07b46d4432ad12dd4e23566a05bdb2e00648a265b0f81434a3d54520eeeee4f1f6df5efe6f64", 0x2b}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000001300)="4de3e820aba9b8526a9c9c39c17e80a5d15d2d733aea3289273c2e5ebd0cef56cb8f536c4774287fab9ec6aa74f3033fec679771a4333706711c5d1c32a502e6c99de783355573007f1b83e0a7e4352a5ea1922731971a640e700d7e752f0b07ffc06a8083be3d19873d0c9d665bb65a2aff891b29135b7ce1c0c2ec5142b49bab34ff2d", 0x84}], 0x5, 0x0) getdents64(r0, &(0x7f00000001c0)=""/171, 0xab) 2018/05/21 12:31:08 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:31:08 executing program 5: r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000200)='stat\x00') openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x10000, 0x0) io_submit(0x0, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000001200)}]) 2018/05/21 12:31:08 executing program 5: r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000200)='stat\x00') openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x10000, 0x0) io_submit(0x0, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000001200)}]) 2018/05/21 12:31:09 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) [ 849.004819] device bridge_slave_1 left promiscuous mode [ 849.010671] bridge0: port 2(bridge_slave_1) entered disabled state 2018/05/21 12:31:09 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x7, &(0x7f0000000800)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x9, 0x0, r0, &(0x7f00000001c0)="1db970ef9f7c56161c7f8cc03c182516ba8ee9ec5da39c3f35dd5a331f56c65b0d86fc7703baec97e92c49081764a669bc298eab255b206f7230261e5991d6a7bc4609ffcd3f31f4e8380e14920d874c3f7c2826a0ef14ad2ef969692cd452", 0x5f, 0xffffffffffffffc1, 0x0, 0x0, r0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f0000000240)="a85f09df76855a08ff3c45dde4adae1d2ed23b0d28f9c777927980a827cb5c87739fd33cd405d6240a22c0adcc7c7b8a4e9db8bc342ad6c4b3948704acf953e159f0e7cbb2df622f6e21fc9e0b9e6b34a27dde8661a478876af7bb299ea6b288ed0155d34ae8afa4d7f8fdfae2b484561a7531c1a1e67b86b291564fd99027b1275096ee233be5d0b67abb7ea4f5f028984e8396f350557ebf9f620b", 0x9c, 0x1ff, 0x0, 0x1, r0}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x1, r0, &(0x7f0000000340)="8966bc4012b13ba21ba528070743a5c2402fdf62c3f2764c4924f8ede6685a93042ca3ba62c6616961bc5d11dbaa806d8f801de31c0cd04a7fcef83c83b069fa2037f6f6db064bbb97bf6c647057e10911800746b2c810ca164bd979c1198848940f7ac859ffb194cace864778c62786f2067191fa44456e9fab24a107fe3872834301989b4c389469a0de8ab7e3ea91ec0f0e367b9d05dbfddbf61f6a176c37179740d670b9956f1a00b73f", 0xac, 0x800, 0x0, 0x0, r0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x4, r0, &(0x7f0000000440)="78176f3f2a57c82836607aec9c086a6492805e1595f05de06863a0cedacbae9a2ef3068243910dcc3ecb5199136bce8abae0010c0de537899d8aab6b406a50e54538d70c55184a6070c8cd76e8b447967af4b60dd14d186697225de95052626fcd6366a484ae238080aabebb8da7c06afda9969ab745fb0147c99d061a5b1fc7bce169fb41459b141064dc6084a201616b2b0aef9282c9e8b7b0cec71046800841bfff84e78d54", 0xa7, 0xc21, 0x0, 0x1, r0}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000000540)="f426bd501ab34e68b129332f4c122a5a7289b76d3f5a148b3605da326448fb19e535c612127de28e37929331bfd29b6c85c157c5f047d90021351e24ae53c38de309e292cae5d6d14edc22d3b15b74228a42d4dd84d31c43f5afcd36928f697ed398424cb851103ea77a717afebaab73f1533e9b693f18726a84d8040bdf193d22e0c5e1722bf2ccc1bf8a9dac6823f09779f5c67ea26bd25fc46c888ccbbd5b874af537d3e956bf23e12543e7badc34551ff60f836cb6dcab", 0xb9, 0x7, 0x0, 0x1, r0}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x7, r0, &(0x7f0000000640)="8b29e790318b03bccd5166b7ed6a4fe8e72a3c378eef69506250839f0ba39a311329fa3d595b7c53", 0x28, 0x0, 0x0, 0x1, r0}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f00000006c0)="7acf6a3550242ad60f7f9c4bed9090295ffd1f11c412ac5dbdda0bf8e6598e73f753520a36b579ac45d72523e6c647d1e5a27ddf037940722c67dab79bec603298794f7a89af1a1eebce384efec68016136eb3054ec12a3e5fba9bee9fe3e556177048a0648a29866c727efb1c4898d116f3ed8419a40a3b00e9e165d49f846a8416fd31e235eb30745a5de66d3421fb5524c0e56e1749c6a625b650b4f8a786ee3361dd0e2796ddb81632bd06920bfee14994466defbb035fe7b3b240050f6ced09d1bacd5898321f265f103cbfae86d0e183ee728a30b70b3c9c", 0xdb, 0x8000, 0x0, 0x1, r0}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffff549, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) 2018/05/21 12:31:09 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000000c0)={0x2, 0x400000000000003, 0x0, 0x0, 0x2000025a, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_key={0x0, 0x9, 0x0, 0x0, "b3ba58d6ea07f2fa627063d8d78d212bdd55437509711a8b51d16cd3e8376ad6d1f90d5000d43ebcb365d8ee3832766ce113d831297dba3b29170362990a4d0835e494795f888db04c605b748709ec7e822492a27a1765793c0651a02ef5491e522054a82e3103aeeb790a343918c75c99f005a975d2d33bb5bc782df59b3e1e5bbf3280660645b39e9d93ca6ef453c4861b2374d60c8ae866ddfd962ae6d86924e00e9b6c19b2d8dde1"}, @sadb_sa={0x2, 0x1}, @sadb_sa={0x0, 0x1, 0x4d3, 0xffff, 0x9, 0x27, 0x2, 0x40000001}]}, 0xb0}, 0x1}, 0x0) socketpair$inet(0x2, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000380)=0xe8) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000003c0)={r2, @local={0xac, 0x14, 0x14, 0xaa}, @rand_addr=0x401}, 0xc) setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000040)={@remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}}, 0x8) [ 849.070659] device bridge_slave_0 left promiscuous mode [ 849.077001] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:31:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) accept$inet(r0, 0x0, &(0x7f0000000080)) 2018/05/21 12:31:09 executing program 5: r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000200)='stat\x00') io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000001200)}]) [ 849.320932] team0 (unregistering): Port device team_slave_1 removed [ 849.360608] team0 (unregistering): Port device team_slave_0 removed 2018/05/21 12:31:09 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x7, &(0x7f0000000800)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x9, 0x0, r0, &(0x7f00000001c0)="1db970ef9f7c56161c7f8cc03c182516ba8ee9ec5da39c3f35dd5a331f56c65b0d86fc7703baec97e92c49081764a669bc298eab255b206f7230261e5991d6a7bc4609ffcd3f31f4e8380e14920d874c3f7c2826a0ef14ad2ef969692cd452", 0x5f, 0xffffffffffffffc1, 0x0, 0x0, r0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f0000000240)="a85f09df76855a08ff3c45dde4adae1d2ed23b0d28f9c777927980a827cb5c87739fd33cd405d6240a22c0adcc7c7b8a4e9db8bc342ad6c4b3948704acf953e159f0e7cbb2df622f6e21fc9e0b9e6b34a27dde8661a478876af7bb299ea6b288ed0155d34ae8afa4d7f8fdfae2b484561a7531c1a1e67b86b291564fd99027b1275096ee233be5d0b67abb7ea4f5f028984e8396f350557ebf9f620b", 0x9c, 0x1ff, 0x0, 0x1, r0}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x1, r0, &(0x7f0000000340)="8966bc4012b13ba21ba528070743a5c2402fdf62c3f2764c4924f8ede6685a93042ca3ba62c6616961bc5d11dbaa806d8f801de31c0cd04a7fcef83c83b069fa2037f6f6db064bbb97bf6c647057e10911800746b2c810ca164bd979c1198848940f7ac859ffb194cace864778c62786f2067191fa44456e9fab24a107fe3872834301989b4c389469a0de8ab7e3ea91ec0f0e367b9d05dbfddbf61f6a176c37179740d670b9956f1a00b73f", 0xac, 0x800, 0x0, 0x0, r0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x4, r0, &(0x7f0000000440)="78176f3f2a57c82836607aec9c086a6492805e1595f05de06863a0cedacbae9a2ef3068243910dcc3ecb5199136bce8abae0010c0de537899d8aab6b406a50e54538d70c55184a6070c8cd76e8b447967af4b60dd14d186697225de95052626fcd6366a484ae238080aabebb8da7c06afda9969ab745fb0147c99d061a5b1fc7bce169fb41459b141064dc6084a201616b2b0aef9282c9e8b7b0cec71046800841bfff84e78d54", 0xa7, 0xc21, 0x0, 0x1, r0}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000000540)="f426bd501ab34e68b129332f4c122a5a7289b76d3f5a148b3605da326448fb19e535c612127de28e37929331bfd29b6c85c157c5f047d90021351e24ae53c38de309e292cae5d6d14edc22d3b15b74228a42d4dd84d31c43f5afcd36928f697ed398424cb851103ea77a717afebaab73f1533e9b693f18726a84d8040bdf193d22e0c5e1722bf2ccc1bf8a9dac6823f09779f5c67ea26bd25fc46c888ccbbd5b874af537d3e956bf23e12543e7badc34551ff60f836cb6dcab", 0xb9, 0x7, 0x0, 0x1, r0}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x7, r0, &(0x7f0000000640)="8b29e790318b03bccd5166b7ed6a4fe8e72a3c378eef69506250839f0ba39a311329fa3d595b7c53", 0x28, 0x0, 0x0, 0x1, r0}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f00000006c0)="7acf6a3550242ad60f7f9c4bed9090295ffd1f11c412ac5dbdda0bf8e6598e73f753520a36b579ac45d72523e6c647d1e5a27ddf037940722c67dab79bec603298794f7a89af1a1eebce384efec68016136eb3054ec12a3e5fba9bee9fe3e556177048a0648a29866c727efb1c4898d116f3ed8419a40a3b00e9e165d49f846a8416fd31e235eb30745a5de66d3421fb5524c0e56e1749c6a625b650b4f8a786ee3361dd0e2796ddb81632bd06920bfee14994466defbb035fe7b3b240050f6ced09d1bacd5898321f265f103cbfae86d0e183ee728a30b70b3c9c", 0xdb, 0x8000, 0x0, 0x1, r0}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffff549, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) [ 849.417690] bond0 (unregistering): Releasing backup interface bond_slave_1 2018/05/21 12:31:09 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) [ 849.491046] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 849.690232] bond0 (unregistering): Released all slaves [ 849.771740] IPVS: ftp: loaded support on port[0] = 21 [ 850.594257] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.600692] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.608338] device bridge_slave_0 entered promiscuous mode [ 850.664376] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.670911] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.678333] device bridge_slave_1 entered promiscuous mode [ 850.730202] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 850.768373] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 850.875170] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 850.915364] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 851.086457] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 851.093774] team0: Port device team_slave_0 added [ 851.130028] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 851.137663] team0: Port device team_slave_1 added [ 851.174699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 851.214676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 851.254627] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 851.261931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 851.271298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 851.304235] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 851.311465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 851.320809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 851.693810] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.700275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.707126] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.713563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.721352] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 851.775218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 853.105385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 853.233639] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 853.363806] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 853.370196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 853.378028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 853.504877] 8021q: adding VLAN 0 to HW filter on device team0 [ 854.283973] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 854.295155] syz-executor2 cpuset=syz2 mems_allowed=0 [ 854.300443] CPU: 1 PID: 17224 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 854.307864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 854.317244] Call Trace: [ 854.319837] dump_stack+0x185/0x1d0 [ 854.323465] dump_header+0x2cc/0x16f0 [ 854.327289] ? is_console_locked+0x29/0x50 [ 854.331523] ? kmsan_report+0x4f/0x260 [ 854.336026] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 854.341496] ? ___ratelimit+0x67f/0x760 [ 854.345517] oom_kill_process+0x341/0x2160 [ 854.349752] ? mem_cgroup_scan_tasks+0x289/0x610 [ 854.354519] out_of_memory+0x1700/0x1da0 [ 854.358591] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 854.363970] ? _cond_resched+0x8b/0xd0 [ 854.367869] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 854.373108] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 854.378513] pagefault_out_of_memory+0x57/0x110 [ 854.383190] mm_fault_error+0x490/0x810 [ 854.387208] __do_page_fault+0x1272/0x1a10 [ 854.391455] ? page_fault+0x1e/0x30 [ 854.395095] do_page_fault+0xd3/0x260 [ 854.398893] ? page_fault+0x8/0x30 [ 854.402428] page_fault+0x1e/0x30 [ 854.405872] RIP: 0033:0x4071d8 [ 854.409061] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 854.414525] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 854.421796] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 854.429080] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 854.436362] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 854.443642] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 854.451555] Task in /syz2 killed as a result of limit of /syz2 [ 854.457800] memory: usage 804kB, limit 0kB, failcnt 888 [ 854.463251] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 854.470141] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 854.476368] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 854.496310] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 854.505177] [17224] 0 17224 17553 8392 114688 0 0 syz-executor2 [ 854.514146] Memory cgroup out of memory: Kill process 17224 (syz-executor2) score 8420000 or sacrifice child [ 854.524254] Killed process 17224 (syz-executor2) total-vm:70212kB, anon-rss:76kB, file-rss:33492kB, shmem-rss:0kB 2018/05/21 12:31:14 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0x6, 0x2, 0x7ff, 0x20, 0xdc]) 2018/05/21 12:31:14 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) write$cgroup_pid(r0, &(0x7f0000000080)={[0x34]}, 0x1) 2018/05/21 12:31:14 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x800) r2 = accept4$inet(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x0, @remote}, &(0x7f0000000100)=0x10, 0x80800) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000180)={'ip6tnl0\x00', {0x2, 0x4e22, @rand_addr=0x9}}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000280)=0x14) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x40000, 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x9) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080)=0x5, 0x4) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300001e00000000000000000000000400030000000000000000000000000000000000000000000000000000000000050006000000ff070a0000000000000000000000000000000000000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0xb0}, 0x1}, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x5) 2018/05/21 12:31:14 executing program 5: getpgrp(0xffffffffffffffff) io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r0, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001200)}]) 2018/05/21 12:31:14 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x7, &(0x7f0000000800)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x9, 0x0, r0, &(0x7f00000001c0)="1db970ef9f7c56161c7f8cc03c182516ba8ee9ec5da39c3f35dd5a331f56c65b0d86fc7703baec97e92c49081764a669bc298eab255b206f7230261e5991d6a7bc4609ffcd3f31f4e8380e14920d874c3f7c2826a0ef14ad2ef969692cd452", 0x5f, 0xffffffffffffffc1, 0x0, 0x0, r0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f0000000240)="a85f09df76855a08ff3c45dde4adae1d2ed23b0d28f9c777927980a827cb5c87739fd33cd405d6240a22c0adcc7c7b8a4e9db8bc342ad6c4b3948704acf953e159f0e7cbb2df622f6e21fc9e0b9e6b34a27dde8661a478876af7bb299ea6b288ed0155d34ae8afa4d7f8fdfae2b484561a7531c1a1e67b86b291564fd99027b1275096ee233be5d0b67abb7ea4f5f028984e8396f350557ebf9f620b", 0x9c, 0x1ff, 0x0, 0x1, r0}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x1, r0, &(0x7f0000000340)="8966bc4012b13ba21ba528070743a5c2402fdf62c3f2764c4924f8ede6685a93042ca3ba62c6616961bc5d11dbaa806d8f801de31c0cd04a7fcef83c83b069fa2037f6f6db064bbb97bf6c647057e10911800746b2c810ca164bd979c1198848940f7ac859ffb194cace864778c62786f2067191fa44456e9fab24a107fe3872834301989b4c389469a0de8ab7e3ea91ec0f0e367b9d05dbfddbf61f6a176c37179740d670b9956f1a00b73f", 0xac, 0x800, 0x0, 0x0, r0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x4, r0, &(0x7f0000000440)="78176f3f2a57c82836607aec9c086a6492805e1595f05de06863a0cedacbae9a2ef3068243910dcc3ecb5199136bce8abae0010c0de537899d8aab6b406a50e54538d70c55184a6070c8cd76e8b447967af4b60dd14d186697225de95052626fcd6366a484ae238080aabebb8da7c06afda9969ab745fb0147c99d061a5b1fc7bce169fb41459b141064dc6084a201616b2b0aef9282c9e8b7b0cec71046800841bfff84e78d54", 0xa7, 0xc21, 0x0, 0x1, r0}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000000540)="f426bd501ab34e68b129332f4c122a5a7289b76d3f5a148b3605da326448fb19e535c612127de28e37929331bfd29b6c85c157c5f047d90021351e24ae53c38de309e292cae5d6d14edc22d3b15b74228a42d4dd84d31c43f5afcd36928f697ed398424cb851103ea77a717afebaab73f1533e9b693f18726a84d8040bdf193d22e0c5e1722bf2ccc1bf8a9dac6823f09779f5c67ea26bd25fc46c888ccbbd5b874af537d3e956bf23e12543e7badc34551ff60f836cb6dcab", 0xb9, 0x7, 0x0, 0x1, r0}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x7, r0, &(0x7f0000000640)="8b29e790318b03bccd5166b7ed6a4fe8e72a3c378eef69506250839f0ba39a311329fa3d595b7c53", 0x28, 0x0, 0x0, 0x1, r0}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f00000006c0)="7acf6a3550242ad60f7f9c4bed9090295ffd1f11c412ac5dbdda0bf8e6598e73f753520a36b579ac45d72523e6c647d1e5a27ddf037940722c67dab79bec603298794f7a89af1a1eebce384efec68016136eb3054ec12a3e5fba9bee9fe3e556177048a0648a29866c727efb1c4898d116f3ed8419a40a3b00e9e165d49f846a8416fd31e235eb30745a5de66d3421fb5524c0e56e1749c6a625b650b4f8a786ee3361dd0e2796ddb81632bd06920bfee14994466defbb035fe7b3b240050f6ced09d1bacd5898321f265f103cbfae86d0e183ee728a30b70b3c9c", 0xdb, 0x8000, 0x0, 0x1, r0}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffff549, r0, &(0x7f0000001200)}]) 2018/05/21 12:31:14 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:31:14 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000140)) 2018/05/21 12:31:14 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="f0000000100003000000000000000000fe8000000000000000000000000000aaac14050000050000000000000000000000000000000000000000160000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff000000020000000000000000000000000000"], 0xf0}, 0x1}, 0x0) 2018/05/21 12:31:14 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x82) getpeername$netrom(r1, &(0x7f0000000400)=@full, &(0x7f0000000480)=0x48) r2 = semget(0x3, 0x0, 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000240)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xe8) socket$key(0xf, 0x3, 0x2) r6 = getegid() semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000380)={{0x8, r3, r4, r5, r6, 0x1c0, 0x6}, 0x245c203b, 0x1, 0x7}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000040)={{0x7, 0x3, 0x18d0, 0x100000001, 0x101, 0x1}, 0x2, 0x1, 0x3, 0xd16a, 0x60, "351ef3a2eefcca96eeaaa8c1649de75c1f4e2218273ff0202439debde3f2624f371743be60976632c50cc3cc1a71346a5c59a04cb8ecfab6ecdda2dc7e7a5126f0148b994808f17197f9eeefb647750b13a77fb5b855eece56d9b8c9527e3652643a96a2fa85937a34bb5065e651a5b66a18ad29700075098b842dd70f994c5a"}) signalfd4(r0, &(0x7f00000004c0)={0x435}, 0x8, 0x800) 2018/05/21 12:31:14 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffff549, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) 2018/05/21 12:31:14 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x100000001, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) [ 854.830810] device bridge_slave_1 left promiscuous mode [ 854.836719] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.867742] device bridge_slave_0 left promiscuous mode [ 854.873661] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:31:14 executing program 5: getpgrp(0xffffffffffffffff) io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r0, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001200)}]) 2018/05/21 12:31:15 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x8, 0x70bd2d, 0x25dfdbfc, {0x1}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) [ 855.087993] team0 (unregistering): Port device team_slave_1 removed 2018/05/21 12:31:15 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02030000160000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a000000000000b863a7b7000000000000000000000000ff0000000000000000"], 0xb0}, 0x1}, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x3, 0x40000) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e20, @multicast2=0xe0000002}, {0x306, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x42, {0x2, 0x4e21}, 'dummy0\x00'}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f0000000040)="c895e1e7875503c1c20dd3f840c98e1107b91c58f8ec8dd5d3f65f54442da51c851034b14527210c96468f9dfe0a36a3", 0x30) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="7383079fc71ae39609db4981409bf2c96870be8c7e761161517730843f942e06f0801c7e699b96ef12f39a0badf2911da912101eed582f3bd172407f32d5d8edd0bcab6065a6a52d7a494b991db5d8ba07c9f432d60e5b894f15533e5ab4e52649a084b2ac2240a5f133dec145df26a846f84fea3701a76fba7afd684b247ccb7440c0044b998cb6fbcd8d7d2bef29594b8d8134a95e6e5829d989f97ecfe47451e3db3412e960eec7efc59d0ebb4723a5199156f6ba77f3b1e0512aa5e5af", 0xbf}], 0x1, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3}, @iv={0x110, 0x117, 0x2, 0xf7, "1445f87e869f124c5cc313a5036c6a799e15689c16b8761accecfa885f0ceac0c511760304b87059c930c2218227f94bc81248e6f5a7383463e09ce9637ca810c3b95fca480ff23ce18214c91eba42a5f0bb89886d221ecefc1cec83b0800ed883a250050ad80ce33fa667690a20ce5f728bcfef2bcf79be51e90042f571cf984a929d372ba624d125eaf30fe579d460573b85b9f429733fcefb98a5e8e9f63150258c6bc579f05334f906515807f48b624aa05dfe5f72c741c98b48b4c6abfa06966f68dc7a398aa101df984bc3daa381b961a982747e3b03418dae0b0b0702defe6723c640974f2e0c20a6342fbb3d15a8b30128c8f5"}, @iv={0x18, 0x117, 0x2, 0x1, 'w'}, @iv={0x18, 0x117, 0x2}, @op={0x18, 0x117, 0x3}, @iv={0x48, 0x117, 0x2, 0x33, "57b1ed20d9073243e2bd50ac74b9aaccac2aa170a87e6eea9a4133f64f246bbb38ddd9c0f3c9289bfcc87e2dcffbf046462cbf"}, @assoc={0x18, 0x117, 0x4, 0x80}, @assoc={0x18, 0x117, 0x4, 0x9}], 0x1e8, 0x4810}, 0x8000) 2018/05/21 12:31:15 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffff549, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) [ 855.145926] team0 (unregistering): Port device team_slave_0 removed [ 855.180667] bond0 (unregistering): Releasing backup interface bond_slave_1 2018/05/21 12:31:15 executing program 5: getpgrp(0xffffffffffffffff) io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r0, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001200)}]) [ 855.269714] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 855.416360] bond0 (unregistering): Released all slaves [ 855.510543] IPVS: ftp: loaded support on port[0] = 21 [ 856.417657] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.424125] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.431596] device bridge_slave_0 entered promiscuous mode [ 856.468548] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.474982] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.482360] device bridge_slave_1 entered promiscuous mode [ 856.518969] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 856.557448] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 856.664689] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 856.704881] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 856.743861] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 856.751224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 856.889659] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 856.896974] team0: Port device team_slave_0 added [ 856.933516] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 856.940854] team0: Port device team_slave_1 added [ 856.978648] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 857.016027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 857.055527] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 857.062817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 857.071739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 857.105421] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 857.112694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 857.123106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 857.502472] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.508928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 857.515718] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.522179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 857.530171] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 857.615248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 858.930321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 859.064357] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 859.192801] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 859.199198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 859.206713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 859.331659] 8021q: adding VLAN 0 to HW filter on device team0 [ 860.090670] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 860.101740] syz-executor2 cpuset=syz2 mems_allowed=0 [ 860.106966] CPU: 0 PID: 17537 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 860.114343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 860.123690] Call Trace: [ 860.126280] dump_stack+0x185/0x1d0 [ 860.129903] dump_header+0x2cc/0x16f0 [ 860.133700] ? is_console_locked+0x29/0x50 [ 860.137928] ? kmsan_report+0x4f/0x260 [ 860.141822] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 860.147281] ? ___ratelimit+0x67f/0x760 [ 860.151261] oom_kill_process+0x341/0x2160 [ 860.155492] ? mem_cgroup_scan_tasks+0x289/0x610 [ 860.160258] out_of_memory+0x1700/0x1da0 [ 860.164321] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 860.169690] ? _cond_resched+0x8b/0xd0 [ 860.173585] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 860.178795] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 860.184166] pagefault_out_of_memory+0x57/0x110 [ 860.188833] mm_fault_error+0x490/0x810 [ 860.192825] __do_page_fault+0x1272/0x1a10 [ 860.197075] ? page_fault+0x1e/0x30 [ 860.200696] do_page_fault+0xd3/0x260 [ 860.204487] ? page_fault+0x8/0x30 [ 860.208019] page_fault+0x1e/0x30 [ 860.211475] RIP: 0033:0x4071d8 [ 860.214653] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 860.220010] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 860.227284] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 860.234554] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 860.241812] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 860.249079] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 860.256969] Task in /syz2 killed as a result of limit of /syz2 [ 860.263104] memory: usage 804kB, limit 0kB, failcnt 896 [ 860.268552] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 860.275368] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 860.281582] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 860.301519] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 860.310365] [17537] 0 17537 17553 8393 118784 0 0 syz-executor2 [ 860.319273] Memory cgroup out of memory: Kill process 17537 (syz-executor2) score 8422000 or sacrifice child [ 860.329341] Killed process 17537 (syz-executor2) total-vm:70212kB, anon-rss:80kB, file-rss:33492kB, shmem-rss:0kB [ 860.357357] oom_reaper: reaped process 17537 (syz-executor2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 2018/05/21 12:31:20 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@generic, &(0x7f00000000c0)=0x80) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000100)={@broadcast=0xffffffff, @local={0xac, 0x14, 0x14, 0xaa}}, 0x8) semtimedop(r0, &(0x7f0000000080)=[{0x1, 0xffffffff}], 0x2aaaa910, &(0x7f0000000180)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) 2018/05/21 12:31:20 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_RMID(r2, 0x0) ioctl$sock_bt(r1, 0x0, &(0x7f0000000300)="27c881acea57e937fd1bf25bca055209fe76f54f8c1453096fb0c239350462194ade8ef7d94da2f75a75bfa3e4936882fc72306d7e38af0ea14976d81e69663f5bf621ebb8fc6dfef08437531d18e8e5ab685789b7a796aa3a9a17f66da04665b3c9ca05763b8ab7a9fb1ea2b7d5d57a8d6606bb42489da65fb3448b2eebb1c5830ba1bc9e3a6e0624497ea397c8ebd85f82d7d273489244d9ecd876c99bf7335f75f786116f418d248ee26d81a96568d02ae45e") sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000200)=@un=@abs, 0xfffffffffffffc6e) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/05/21 12:31:20 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:31:20 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = dup(r0) ioctl$sock_ipx_SIOCAIPXITFCRT(r1, 0x89e0, &(0x7f0000000000)=0x400) setsockopt$ipx_IPX_TYPE(r1, 0x100, 0x1, &(0x7f0000000040), 0x4) r2 = getpgrp(0xffffffffffffffff) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000080)=0x3, 0x1) fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) fcntl$getownex(r1, 0x10, &(0x7f0000000180)) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) 2018/05/21 12:31:20 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) r2 = gettid() prctl$setptracer(0x59616d61, r2) socketpair$ax25(0x3, 0x0, 0x7, &(0x7f0000000080)) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x6, &(0x7f0000000280)=[{}, {}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000300)={r3, 0x1}) prctl$getname(0x10, &(0x7f00000001c0)=""/175) 2018/05/21 12:31:20 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffff549, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) 2018/05/21 12:31:20 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x10040, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000580)=ANY=[@ANYBLOB="7db7897d8646d9c5705afd0000fdff3e000000000000000000000000000000cafd6370b81fbc1573a54b0972614898c78b23ef68a3e72b6132466bfa9bd53f9e9623b418392c6a7d474912954a4353ff7ddf1e95afd1b970495d8202e1abb878fb705ec0cb34a10bd4ad734d89745df4a1ba1a1fec", @ANYRES32=0x0, @ANYPTR64=&(0x7f0000000480)=ANY=[@ANYBLOB="124ce1e7c9cd3c3b68491d77ac31298e18733d21af3258047b55519f4ff9f39a26ec0a263f82cbef6b9d3cf66239a01b7f5bfb81f0ed1c49bb24ab57fa5be8f2d71004aca78c13d65b4c48ec1d37a1afab4308a04967c4dd0339d7340401d43fc718592593528028198e0012a5fe38110d022043f97cfdfaf61cb12780c774876cc1c9a5a2150d2da2fe79ebf8ec6e6b13d9d4938b2fa636c1223bd53f57fd1dc660a25015e3a60a1fbc6297781779cfbc8b56e696b212cd3037739fa08633286f868be824c82092caaa374ebf6573bef250d8d6e74db574b0028dca7dd0dc3310b250c05e921fad6b661fb4"], @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000180)=0x5) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0x5, 0x8202, 0x7fff, 0x0, r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000100)={0x1d, r3}, 0x10) socketpair$inet6(0xa, 0x80006, 0x4, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d}, 0x10, &(0x7f00000000c0)={&(0x7f0000000280)={0x1, 0x10, 0x0, {0x77359400}, {0x0, 0x2710}, {}, 0x6, @can={{}, 0x0, 0x0, 0x0, 0x0, "5e401380a30678fe"}}, 0x48}, 0x1}, 0x0) getpeername$ipx(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000240)=0x10) bind(r4, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, 0x2, 0x3, 0x0, 0x3}}, 0x80) 2018/05/21 12:31:20 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) [ 860.655815] device bridge_slave_1 left promiscuous mode [ 860.661696] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.703783] device bridge_slave_0 left promiscuous mode [ 860.709648] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.812374] team0 (unregistering): Port device team_slave_1 removed [ 860.838668] team0 (unregistering): Port device team_slave_0 removed [ 860.851736] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 860.870576] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 860.901486] IPVS: ftp: loaded support on port[0] = 21 [ 860.920822] bond0 (unregistering): Released all slaves [ 861.854449] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.861040] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.868752] device bridge_slave_0 entered promiscuous mode [ 861.906099] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.912555] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.919929] device bridge_slave_1 entered promiscuous mode [ 861.956548] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 861.993211] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 862.098351] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 862.137759] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 862.303928] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 862.311427] team0: Port device team_slave_0 added [ 862.347738] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 862.354985] team0: Port device team_slave_1 added [ 862.391849] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 862.431161] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 862.438190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 862.446533] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 862.479401] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 862.486632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 862.495814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 862.527909] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 862.535305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 862.543809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 862.912519] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.918954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 862.925738] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.932148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 862.939835] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 863.415273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 864.322939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 864.453726] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 864.588391] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 864.594661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 864.602162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 864.730432] 8021q: adding VLAN 0 to HW filter on device team0 [ 865.503767] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 865.514982] syz-executor2 cpuset=syz2 mems_allowed=0 [ 865.520285] CPU: 0 PID: 17827 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 865.527659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 865.537020] Call Trace: [ 865.539621] dump_stack+0x185/0x1d0 [ 865.543270] dump_header+0x2cc/0x16f0 [ 865.547075] ? is_console_locked+0x29/0x50 [ 865.551306] ? kmsan_report+0x4f/0x260 [ 865.555209] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 865.560679] ? ___ratelimit+0x67f/0x760 [ 865.564668] oom_kill_process+0x341/0x2160 [ 865.568909] ? mem_cgroup_scan_tasks+0x289/0x610 [ 865.573672] out_of_memory+0x1700/0x1da0 [ 865.577737] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 865.583109] ? _cond_resched+0x8b/0xd0 [ 865.587005] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 865.592192] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 865.597566] pagefault_out_of_memory+0x57/0x110 [ 865.602237] mm_fault_error+0x490/0x810 [ 865.606230] __do_page_fault+0x1272/0x1a10 [ 865.610466] ? page_fault+0x1e/0x30 [ 865.614086] do_page_fault+0xd3/0x260 [ 865.617878] ? page_fault+0x8/0x30 [ 865.621409] page_fault+0x1e/0x30 [ 865.624858] RIP: 0033:0x4071d8 [ 865.628035] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 865.633407] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 865.640666] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 865.647925] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 865.655181] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 865.662449] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 865.670201] Task in /syz2 killed as a result of limit of /syz2 [ 865.676297] memory: usage 804kB, limit 0kB, failcnt 904 [ 865.681729] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 865.688588] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 865.694825] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 865.715396] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 865.724283] [17827] 0 17827 17553 8394 114688 0 0 syz-executor2 [ 865.733210] Memory cgroup out of memory: Kill process 17827 (syz-executor2) score 8422000 or sacrifice child [ 865.743298] Killed process 17827 (syz-executor2) total-vm:70212kB, anon-rss:84kB, file-rss:33492kB, shmem-rss:0kB 2018/05/21 12:31:25 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r0, &(0x7f0000000080), 0x0, &(0x7f0000034000)={0x77359400}) fstatfs(r1, &(0x7f0000000000)=""/24) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f00000002c0)={@generic={0x4, "57f281c4e8b6139ee14d674dc6e8bc91a0abb0c3bd9a6a7a571cf3d90ba66d06103104fa90ad56a4a7a96845282c3af29d864424346829a869d5619e8b6a09f406e6b6c158b0641a7597360c440543a639d14d971b28368aad32b1a359dfd862f38d1ec3ec4264e1aa9de11335695dc377cc249ca852b9ebe4b7734977d6"}, {&(0x7f0000000240)=""/9, 0x9}, &(0x7f0000000280), 0x4}, 0xa0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x8000, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) setsockopt$ipx_IPX_TYPE(r3, 0x100, 0x1, &(0x7f00000001c0)=0x3f, 0x4) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) r4 = gettid() ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000080)) ptrace$peek(0x1, r4, &(0x7f0000000180)) 2018/05/21 12:31:25 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000001480)={'veth1_to_bond\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}}) rt_sigpending(&(0x7f0000000080), 0x8) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) recvmsg(r0, &(0x7f0000001380)={&(0x7f0000000200)=@l2, 0x80, &(0x7f0000000140)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1, &(0x7f0000001300)=""/85, 0x55, 0x580b6784}, 0x2) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={0xffffffffffffffff, 0x2, 0x1, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000001440)) 2018/05/21 12:31:25 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_submit(0x0, 0x7, &(0x7f0000000800)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x9, 0x0, r0, &(0x7f00000001c0)="1db970ef9f7c56161c7f8cc03c182516ba8ee9ec5da39c3f35dd5a331f56c65b0d86fc7703baec97e92c49081764a669bc298eab255b206f7230261e5991d6a7bc4609ffcd3f31f4e8380e14920d874c3f7c2826a0ef14ad2ef969692cd452", 0x5f, 0xffffffffffffffc1, 0x0, 0x0, r0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f0000000240)="a85f09df76855a08ff3c45dde4adae1d2ed23b0d28f9c777927980a827cb5c87739fd33cd405d6240a22c0adcc7c7b8a4e9db8bc342ad6c4b3948704acf953e159f0e7cbb2df622f6e21fc9e0b9e6b34a27dde8661a478876af7bb299ea6b288ed0155d34ae8afa4d7f8fdfae2b484561a7531c1a1e67b86b291564fd99027b1275096ee233be5d0b67abb7ea4f5f028984e8396f350557ebf9f620b", 0x9c, 0x1ff, 0x0, 0x1, r0}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x1, r0, &(0x7f0000000340)="8966bc4012b13ba21ba528070743a5c2402fdf62c3f2764c4924f8ede6685a93042ca3ba62c6616961bc5d11dbaa806d8f801de31c0cd04a7fcef83c83b069fa2037f6f6db064bbb97bf6c647057e10911800746b2c810ca164bd979c1198848940f7ac859ffb194cace864778c62786f2067191fa44456e9fab24a107fe3872834301989b4c389469a0de8ab7e3ea91ec0f0e367b9d05dbfddbf61f6a176c37179740d670b9956f1a00b73f", 0xac, 0x800, 0x0, 0x0, r0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x4, r0, &(0x7f0000000440)="78176f3f2a57c82836607aec9c086a6492805e1595f05de06863a0cedacbae9a2ef3068243910dcc3ecb5199136bce8abae0010c0de537899d8aab6b406a50e54538d70c55184a6070c8cd76e8b447967af4b60dd14d186697225de95052626fcd6366a484ae238080aabebb8da7c06afda9969ab745fb0147c99d061a5b1fc7bce169fb41459b141064dc6084a201616b2b0aef9282c9e8b7b0cec71046800841bfff84e78d54", 0xa7, 0xc21, 0x0, 0x1, r0}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000000540)="f426bd501ab34e68b129332f4c122a5a7289b76d3f5a148b3605da326448fb19e535c612127de28e37929331bfd29b6c85c157c5f047d90021351e24ae53c38de309e292cae5d6d14edc22d3b15b74228a42d4dd84d31c43f5afcd36928f697ed398424cb851103ea77a717afebaab73f1533e9b693f18726a84d8040bdf193d22e0c5e1722bf2ccc1bf8a9dac6823f09779f5c67ea26bd25fc46c888ccbbd5b874af537d3e956bf23e12543e7badc34551ff60f836cb6dcab", 0xb9, 0x7, 0x0, 0x1, r0}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x7, r0, &(0x7f0000000640)="8b29e790318b03bccd5166b7ed6a4fe8e72a3c378eef69506250839f0ba39a311329fa3d595b7c53", 0x28, 0x0, 0x0, 0x1, r0}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f00000006c0)="7acf6a3550242ad60f7f9c4bed9090295ffd1f11c412ac5dbdda0bf8e6598e73f753520a36b579ac45d72523e6c647d1e5a27ddf037940722c67dab79bec603298794f7a89af1a1eebce384efec68016136eb3054ec12a3e5fba9bee9fe3e556177048a0648a29866c727efb1c4898d116f3ed8419a40a3b00e9e165d49f846a8416fd31e235eb30745a5de66d3421fb5524c0e56e1749c6a625b650b4f8a786ee3361dd0e2796ddb81632bd06920bfee14994466defbb035fe7b3b240050f6ced09d1bacd5898321f265f103cbfae86d0e183ee728a30b70b3c9c", 0xdb, 0x8000, 0x0, 0x1, r0}]) io_submit(0x0, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffff549, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) 2018/05/21 12:31:25 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') io_setup(0x0, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:31:25 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001040)=ANY=[@ANYBLOB="020b04010200004000000000053d0000"], 0x10}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2=0xe0000002}}]}, 0x28}, 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000002680)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000002700)={0xbce, 0x100, 0xffff, {}, 0x3f, 0xc7}) recvmmsg(r0, &(0x7f0000002580)=[{{&(0x7f0000000180)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)=""/197, 0xc5}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000000000)=""/54, 0x36}], 0x3, &(0x7f0000000340)=""/217, 0xd9, 0xffffffffcf0a1983}, 0x81}, {{&(0x7f0000000440)=@in6={0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000004c0)=""/49, 0x31}, {&(0x7f0000000500)=""/137, 0x89}, {&(0x7f00000005c0)=""/53, 0x35}, {&(0x7f0000000600)=""/172, 0xac}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/153, 0x99}, {&(0x7f0000000880)=""/177, 0xb1}, {&(0x7f0000000940)=""/94, 0x5e}], 0x8, &(0x7f0000000a40)=""/79, 0x4f, 0x10000}, 0x80000000}, {{&(0x7f0000000ac0)=@pppol2tpv3in6, 0x80, &(0x7f0000002200)=[{&(0x7f0000000b40)=""/185, 0xb9}, {&(0x7f0000000c00)=""/194, 0xc2}, {&(0x7f0000000d00)=""/132, 0x84}, {&(0x7f0000000dc0)=""/8, 0x8}, {&(0x7f0000000e00)=""/208, 0xd0}, {&(0x7f0000000f00)=""/73, 0x49}, {&(0x7f0000002080)=""/235, 0xeb}, {&(0x7f0000000f80)=""/5, 0x5}, {&(0x7f0000000fc0)=""/86, 0x56}, {&(0x7f0000002180)=""/96, 0x60}], 0xa, &(0x7f00000022c0)=""/220, 0xdc, 0x3}, 0x800}, {{&(0x7f00000023c0)=@generic, 0x80, &(0x7f0000002540)=[{&(0x7f0000002440)=""/227, 0xe3}], 0x1, 0x0, 0x0, 0x9}, 0x3}], 0x4, 0x40000120, &(0x7f00000026c0)={r1, r2+30000000}) 2018/05/21 12:31:25 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) readahead(r0, 0x0, 0x8) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000001c0)=0x2, 0x4) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x6, 0x7f, 0x9, 0x90}, 0x10) connect$rds(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/05/21 12:31:25 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200000) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000040)=""/246) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x80101, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000400)={0x401, 0x3, 0x5d, 0xffffffffffff571f}, 0x6) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x7, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xffed}, 0x1}, 0x0) 2018/05/21 12:31:25 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:31:25 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') io_setup(0x0, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:31:25 executing program 6: io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r0, 0x7, &(0x7f0000000800)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)="1db970ef9f7c56161c7f8cc03c182516ba8ee9ec5da39c3f35dd5a331f56c65b0d86fc7703baec97e92c49081764a669bc298eab255b206f7230261e5991d6a7bc4609ffcd3f31f4e8380e14920d874c3f7c2826a0ef14ad2ef969692cd452", 0x5f, 0xffffffffffffffc1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x6, 0xffffffffffffffff, &(0x7f0000000240)="a85f09df76855a08ff3c45dde4adae1d2ed23b0d28f9c777927980a827cb5c87739fd33cd405d6240a22c0adcc7c7b8a4e9db8bc342ad6c4b3948704acf953e159f0e7cbb2df622f6e21fc9e0b9e6b34a27dde8661a478876af7bb299ea6b288ed0155d34ae8afa4d7f8fdfae2b484561a7531c1a1e67b86b291564fd99027b1275096ee233be5d0b67abb7ea4f5f028984e8396f350557ebf9f620b", 0x9c, 0x1ff, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f0000000340)="8966bc4012b13ba21ba528070743a5c2402fdf62c3f2764c4924f8ede6685a93042ca3ba62c6616961bc5d11dbaa806d8f801de31c0cd04a7fcef83c83b069fa2037f6f6db064bbb97bf6c647057e10911800746b2c810ca164bd979c1198848940f7ac859ffb194cace864778c62786f2067191fa44456e9fab24a107fe3872834301989b4c389469a0de8ab7e3ea91ec0f0e367b9d05dbfddbf61f6a176c37179740d670b9956f1a00b73f", 0xac, 0x800}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x4, 0xffffffffffffffff, &(0x7f0000000440)="78176f3f2a57c82836607aec9c086a6492805e1595f05de06863a0cedacbae9a2ef3068243910dcc3ecb5199136bce8abae0010c0de537899d8aab6b406a50e54538d70c55184a6070c8cd76e8b447967af4b60dd14d186697225de95052626fcd6366a484ae238080aabebb8da7c06afda9969ab745fb0147c99d061a5b1fc7bce169fb41459b141064dc6084a201616b2b0aef9282c9e8b7b0cec71046800841bfff84e78d54", 0xa7, 0xc21, 0x0, 0x1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x3, 0xffffffffffffffff, &(0x7f0000000540)="f426bd501ab34e68b129332f4c122a5a7289b76d3f5a148b3605da326448fb19e535c612127de28e37929331bfd29b6c85c157c5f047d90021351e24ae53c38de309e292cae5d6d14edc22d3b15b74228a42d4dd84d31c43f5afcd36928f697ed398424cb851103ea77a717afebaab73f1533e9b693f18726a84d8040bdf193d22e0c5e1722bf2ccc1bf8a9dac6823f09779f5c67ea26bd25fc46c888ccbbd5b874af537d3e956bf23e12543e7badc34551ff60f836cb6dcab", 0xb9, 0x7, 0x0, 0x1}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x7, 0xffffffffffffffff, &(0x7f0000000640)="8b29e790318b03bccd5166b7ed6a4fe8e72a3c378eef69506250839f0ba39a311329fa3d595b7c53", 0x28, 0x0, 0x0, 0x1}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x3, 0xffffffffffffffff, &(0x7f00000006c0)="7acf6a3550242ad60f7f9c4bed9090295ffd1f11c412ac5dbdda0bf8e6598e73f753520a36b579ac45d72523e6c647d1e5a27ddf037940722c67dab79bec603298794f7a89af1a1eebce384efec68016136eb3054ec12a3e5fba9bee9fe3e556177048a0648a29866c727efb1c4898d116f3ed8419a40a3b00e9e165d49f846a8416fd31e235eb30745a5de66d3421fb5524c0e56e1749c6a625b650b4f8a786ee3361dd0e2796ddb81632bd06920bfee14994466defbb035fe7b3b240050f6ced09d1bacd5898321f265f103cbfae86d0e183ee728a30b70b3c9c", 0xdb, 0x8000, 0x0, 0x1}]) io_submit(r0, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffff549, 0xffffffffffffffff, &(0x7f0000001200)}]) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) 2018/05/21 12:31:26 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/122) ioctl$VT_DISALLOCATE(r0, 0x5608) io_setup(0xff, &(0x7f00000000c0)=0x0) io_submit(r1, 0x6, &(0x7f00000015c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0xff, r0, &(0x7f0000000100)="05b4a4eddd7b15a5baf5660619cc89add0c3fdfafb7848c29098cb5e9e865f051dd617d0df339849b38ad811494cadddb7456343e1fa", 0x36, 0xff, 0x0, 0x1, r0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x80000001, r0, &(0x7f00000001c0)="c7ddf11d51e46d1eb478ea9a85c0c6f5a375d418e7aa529910e48f5961fe8808ad00837e7723f2da3fdb72d86f83c626f85d79573a411c1e77456954bc08d41a9475c34fe95418340cf087f77c9db095464fd45d25f0795f8e4e32cd2feb358473801a74bad6771cd8ba43f16eab4760a93f0dd4f4f2b421443943a5fac49d4bdcacfc", 0x83, 0x2, 0x0, 0x1, r0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x8, r0, &(0x7f00000002c0)="1841531c8b527f94da61c575d22c186601e5341e28871f4d0122cf10188aa8ffd9dbbb02cbf4ff22f59bc3607bd48132f3801e209038e7fb7fbf8032a216665683f486621540f26d33ac60b7caa2e7d783ee9a014229e3869c93c32adfd6bdc95c1702739676ea3d0e65d3d461a76980d7914d2c8941a77bd87031c8577918b395e77d81d0b326dbc1aa90a2b028bd1991a94c05f2044360d905792028d926356c83b79909291af8db8798cf625c2ec8af4121a4a7c7497901", 0xb9, 0x9, 0x0, 0x0, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xf, 0x1, r0, &(0x7f00000003c0)="527afeb3b18a07e3105a6c101aebabf16cf44853a475aed03a1b57264a6fa82ec2f95ac72aff63880d692fcddc2374dc522a2d6390f84a5b6d3b1b8ceaafbb9cfcc004a960af84c8f15cca8a78", 0x4d, 0x1, 0x0, 0x0, r0}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x7, 0x1, r0, &(0x7f0000000480)="5e0fbde510249c25ce4c83166789c8511cc99b952b5cc62da3eb60e273489b89258112782e982b89713e408490b22f6230cffc4346ae3b08604b1d2338014c352fd38c8e5e7e92a9506560a12da38ca631ca2fad6b6b3f058c8b92b626099128557022b7bfb4f9331011d330681c7cdc4d227cc11f73b7442bfa3e4612734b761f12c2f9acb797b6e7c34f1fb0039a6d605cfcbdc4d5f3698796508591f4c40340fcf9def427edc6b6a926c1fdc5d9a9e8803a4a9c882e9231154629fd1d6e38eb711f236f6f5b576030263f970a5c704e38e6325aa82d6a72a6aa821563e7047965cf271192a9c26aff8d6a6c4c0a0aee919de64e7eabbc36b3384a7c2db854210d9a914e53323eb591bee5b99fadbe39a2a1e36f7bad94c085306fd07fca1c6da71c1b2a06be8ca276187949742dd0a84e0931c530bafb9a8ac9e8846a8deb65fcc3fc653b49ff69db1f9e552c816a55c00b738ade3d12dbf27bc7f7b1971309460b211b9e18a0bc572d7a8daaf82b29979a053e5c48bc5eefe890f9c4337e4fe39967ff2ed88b198ca2a7c7e90499a3a8536a748428c97e3f3d67d246eb18ee31102299867f840b38be0e9f239e100833013c3fce2d67e7df834cf76a489143f1aa55427810c761937274f2ac5f8fdd9338699d71df340bf92062e461f5e4542452688bb34c3462963a163d6ba3607ee135043a986edf10bc798c1e1dd711edfeec0af6696a56aea2a7819e21a366245b29f2b898c3db6d788b18ace39e1147460cd1b14b9e227012af5dd261781577dbe337a814b679289e361c23aa23b29999abd3bb3e2c2a8eea415a55fddf9ef2bc420c671fcbc377bcd41dab0225df7a13a61c9827030c5e5f09e350c002b3dca5db377ee2ccbb8b1d39a1c329341ead3b10c89d69e5b9fb9e7479432927644d4c26df153b3738d636b0dba8131f346d3037b2e8072d782edfe16b0a5eed1ce21edf7b8ed88b0b0f9eeee517314cf3812bebc0f038023d78ba0feb68734695b4c0b3cac8fabd3bc19fda84e73d227ea29f8ce4203428c6f85a18d0667ece564150e2173e7f1cd3cab31ccc0b016ee35c77c02a2c285f2589367e7751f8c7bf922748889224fb9c6cf4cca59e0c598fd8447f996213ef230b93b822230954ed4a2d786679deb611c91b94c5c1ba65f27a4602f4ca51d72079b609a2692db41143377ff95267fb63dec635be870e5100ac8c4d915f9a5d815535a18dbd59c05e821cf7169746bbc4918fced9631bdc705bf8c1053d3c6e6e31a4968316f1f9dc6db66dd6f958648043c487f9e3d0148c6011488c1a5f3aa014f6d40607297e75f579a4c2902619086aaaa6d81ca171f663ee3ffb1aa67847623d187b8f105d758b1b302a1c39f5602c604b09b09bf296794d27b3f8a085d6c86446a16decd6c627f609016948fea60636c1eb165196bd8751737b9dbd03270b89c1bbf0a91277175db4fff8598f46040c8275e19a890ab03c7d8b00a3ec5c2fde69be51fd9c362211ad1c0a4148fb1c2cf69c8419eea8129c960419c61318a70332d230641ae3d3b04b3c8d3831e7ddf24327bf403fa1102f417562bdbeaa068648d3df2b75765cd57f06292275cafae04e4d715b6b07a58feda96136692cd641eda03bdb31544b3e30691af3b6970d68c0b92d3aa39275188a29152683f36b851eddf6c26f0648a31db0abe622b15de91480082d09f8889c963ce994337867738df7991e544d9c3f25bedde66104649cdedba4c42e0ab19be4ce9302f2f0ffa1d98e32d7ff40e29f2d3cee30d95c0c783feeb58d2044f65ea8f20996c12c85e7a1cc49046d79db67cd015428c912c5fa6fd9ed3c9d94a2021ea538fa96070114f7ebe9282f3eca64074586bddeaefb0a6250fc747c3ed5aff6ce513208415535fc5c1a53702ff9f4b3d5833599ddccc4d03ed49f47775b93da7765ed5dbb1d5b6a941f86ffd2c959b8d39a5e592a9ed22be7e038ba4ebbdb6ee11a1945805db2037257c549b5351df56788184733476b06ae5ba0cdac9a4d33fabbf1142f4e170b29e7e14ce6caf512dc90108961baa044a6ec48c31b9396347d4a086877e7fe76d1dac98c8c1580b22d83a458c407364df113768faf465d4462fb4c5593a8fb1ff4cc9ea09cc11e72de27f88336b5869abc5e466360512b2b489c28d1ee52e17f4718330216bd9b203919229f2bd62cc0be6dbbfbd1671b62e8a8cd702c50de75ffe94ab128b0d32c3ade2d5ac3684c1da786dcbea88cf217ffe60b93a61242acd03dd33aa334dfb05f174fd90e77172013adb111f7816c6f5192875da5678d80c0e8e6175fd50f92d2d1f43462c7a0d14c2ea991b00f46e5b87786ba890807917ce57c6fdd5f68f87922621462ac534f878b456d5b52cc220f2d9b30ef367a3e37127584a15ce68ac132edd9f122913fca6a27825c160b6b75994fba8fe8027323d261be1ff0129c5e9fbfd26258364ce82c45d0311b022a1464ecd12f06f5d789cd44cadaee76c75f56b2e463fb69b54d2f6f3116b44b488704aaeceebcd364907fce4cac036fdbd62ebfda2ed766628775222c8bb253d80ace4c9b079f632359dcc20997108dda40cf09d1d4c82eba1ac3185463c494a2c03dd01e5a6541da507f861ca148b92e052fc067a01f5230615d5e173102ddd1b9f6d87b5ff519e36a171b2aec5f4f6ec4795b9a229fd6666dfc857bba61f3b4cbcd68fc3676bf8bbb745ee85c15168c6b765534b6936b588ef161bb458c553749ac2aa36a98a9b06adbfb74664f05a1a644c679fcb407b812d75aede034375eefae90a8f74d8c265e5169f94bb5cedf05d3f279596213e9545c8caf79fb5ff3b677e54030155ba8a3ad75fb064f1169b22cac1f199b0da3322a9af06528217083516be1327a06939d2e7b56fb0cc727d8988e0ca68e007a50d942e9e04237ec26df9737c22d4e383c5101ae410b64815bae2711a33ded5437cf6c724ff554efd68c249c7ad0e82386b964b516823772cab9c007d3e0fffe3996e2e66dcd7401ca2e01afba819e9949945f74d5cd2317ebdc9504518cb5d7512512ec9208c1371691e987ea0115d650b7aeae2b8e8e2e92f8272c6482946712973207744e2c1572760afc47f9403b95612c05f0243db54e9985391b81b8bd5e1becf3f6d3bf57342da26ce18a34c7a0f9efb9c2f0c7092fe4e3f270971ed85408e31a08929a87568c8e7c8261f490ced1cb690fe2f4d815198c48ed8365e334e81bd14dd37120974e5d9c5693d945b6a7ae3c4d4bb3e2a2712a5d03c4b9d1fdc4b1d76d06773cc127531df4a902244cb29762d9f2df958ce5b1fa8ff87a3664822233ca433679e548805617981476217b994660c5bdb44688708898e4853552f6eb7a6a61cabe7774a5aec3a745907e07e38eeadda84a308a082f8621e3260f6bc0ea2628a52de537789da3b5af0eb4142eaafc1fe201072062be5019bb3099690c1272c0314e6b63178291a65de4e699b3d44f2e7d314533deaa1c9929a199f4795e07cef6f6ab2614e52e346522d57945d853454183d090c8c50cb8f1a1c42674a91bb6a593d798e019692f23d94db3f03f2f1e1e05fdacc04510edba8282308c11f5641a3d8440bcf6e09734cfbe305d8220537417655ec75a505e4bec1c10948f7184a9a390321921aa90ea182367bdfd8c3be57c0fb4a1ac8008925780d962115e38e5960d7226e110eaa01de3da7d2882dcade8a5916899f2243b46a0bc6cff6f82364005b26aa3029e782264cd4de6863189a35705814b3dc4219569c1f0c4d121cacf2ac8c1cb5cd5592077101a02f68baa00dc0d491bda910ae7de20877e9f510fb98e2bbcdd8f383c42e9fd1e2294aa32fb072b6bea6291a5967bc88021a1c330486047e2982cbb337336f9684e2b2be5e1d3412a6671e40bb748e866d8e1147d5714ba18b2c6218e425872d49f38a9e4388bfec4459bfd9636717fba658d5b34917c08a8083e502950e4ae357d35321968d60a79d778995492eaaa245455dfaaa94507caa8e48425ece60cca577f388ed987742589b9c9693f200682c68f27c23c089d30230e759961284c4271f35211fbaf99bb146575ced406ffabcbfbf4fd4436022ebf2ccc6af1ee4ff9ba4a2264d9b1300f6e68bc7075e716a5baedfe6d4bcbaa2375f53fe86e470123cab6b0b757b5dbc250c3d60bbda29a44e5462c0490495c6360b3ee082c627867e8445d065641feb455c1156e8f39d57888845f68aa6fadda2e91a822239e5f576afe4a0e61d2697669b910e242def7e48f77d059cb194bdece1c21f3bfcb769263f7c4168477777968cb815227ab6484475f69f7509ba38055ebf9e27ccf24540a930a8d7ac45ab3c5a168f1c2445d0c3d4c2c29c58febefa80cdebc2a0c3083779a96637b390dccd660d525e9125ab6e50d25cb6571688d8eb9dda2b6f21146b1e5ae2dc0e8c9e34010c8f71b92b55d38d60d90953c6c909bab9a448c056481cc1e700b62a3fe5d7e1d78b9870283df6a3ef4c5f50ccb51b9fe53d493dda41332f6d37a7cff6c57a47e88966847aa1282039c47c5c9dbbdd23b63f4ef9820c2c7c1f415aa22b1f65685ef35a9e9cf77d66a7a9d0b08aba2b6f33a38d35d86bcfeba0e02c0b0f1f917f2b33d8ce48f23288cc91938299334d33e12315a52f8f9da1b21d136d86266b8602708d1e053f432b5067da4b0345508a108c33c24ca8719f19264ff7c068de3e6918f5e454f45f5cec352eec1a6f2e080d4db27bbacab3769310dfd06ba52618c179504127208658b17ee783551bf93f8ee187e5ce6faee8ef25d576435ad298c4f131336ac76d40d193fa9c991d221913918dbc9c832936bf07667a0b6440935002c2f3729b9d6acc819516a6da6410242649f93ccda5fa3cdcd4c6931550b826892f59a5f6ba359b90f831a308f651917eabfb58a1b06d51498f65f84f023470938fbee44ebbebbbf394cad50712222efe123f9e389c2f8ce534f3b17190a7264b01fe90241a9fc2759ce6bd367ee57da21858d085adad94320ce14ebe3f7aa4ad0d3f497de3f0720b11a933cc31aa768546b49473b388fbb5cbea36489171d1097fc119c530b785a3dd4ad56351f8b09b42ebd9cb9443fdd252557380fabf06216b91f9f3c2307c2fd2748e5896e827fd7617ba5d6ff29a19c66efaeb98b144a15c3e3e02e5a578643f9fae58b99226fcce2388ab70ade9b9403037c56738982fc5c39d5067ebf95b506528f5e50e7f12b385fbba0536d0f43525e37440717282c76fa49b1e8846f333fb5f6c00ee9251e8506e0115051867af74dfe70a02e11327c7413c3f21465aad562ef209bbd8c963d6070100a2ec622dc4a0ace8e9adb77e3a6d84dc8b6bdc3601b8dd1185d47f78dc4fc35377d77a4593ac278e576ee43692fa08b5d762008eaaad2be1f5b9f3968f4b65ea0341dcad3cc8993490adc113d3bc01da5b32dc7646a451b7d5155e3f583cd9b0d1a7b1aedc5a66e28d2c99599bee1c5450e59154eb88b0b4ebe21bc69b2187a5744d9f9d68aaf9ee9958a51b8b470d88b06a7464d9b44b65b93d7873a8e6afa1fedbc86bf0088c9722ab2cd11317e7f85cd318956aaf55cd64865aab809e40d6fb0cd92bcc0a4f1eb687cf53eab68202c6b5c8779a41eca3df52fa6885df43740dae1c6977462204d5efc3955327cb41f6a913043881f1f01da46edfc44a7a62fe28bcc4a8ba7f9559ceabbce671946bcd348178c4af14cd1d1ff7b0ab08137f096840a2d9270995480f03c91ed2fa08ff1", 0x1000, 0x9, 0x0, 0x1, r0}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffe, r0, &(0x7f00000014c0)="e075195f6d6a78243dabb639eb000a20c4821673077d027c84508ee10175ccf8c4779834734986c12d95c603f44f22a218bb9f892e282a3a9c83b6988ef5b10190588278f6f38c134dca4551e9f69affefa968476265e9b1255cd46b2bd498d7e17673792a91331635a8557bdfe08badebc3bf62f256e08fbaa14d395f1ec95746071532aef4dba14a12736b40dd71e381684ace07c377285da9df880bf38a698b4f8fc61edac17dfffc42bc2a", 0xad, 0xb, 0x0, 0x1, r0}]) semget$private(0x0, 0x4, 0x8) r2 = semget$private(0x0, 0x20000000104, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r2, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)) 2018/05/21 12:31:26 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0x80000000}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x0, 0x200) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000040)={0xfff}, 0x1) [ 866.069502] device bridge_slave_1 left promiscuous mode [ 866.075417] bridge0: port 2(bridge_slave_1) entered disabled state 2018/05/21 12:31:26 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x1, &(0x7f0000000000)=0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r2, 0x8}, &(0x7f0000000240)=0x8) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000280)) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) [ 866.151149] device bridge_slave_0 left promiscuous mode [ 866.156975] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.330657] team0 (unregistering): Port device team_slave_1 removed [ 866.377923] team0 (unregistering): Port device team_slave_0 removed [ 866.401469] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 866.432379] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 866.454784] IPVS: ftp: loaded support on port[0] = 21 [ 866.481712] bond0 (unregistering): Released all slaves [ 867.473437] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.479867] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.487835] device bridge_slave_0 entered promiscuous mode [ 867.525333] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.531760] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.539286] device bridge_slave_1 entered promiscuous mode [ 867.576965] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 867.614269] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 867.719389] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 867.759370] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 867.828783] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 867.835802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 867.941819] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 867.949217] team0: Port device team_slave_0 added [ 867.984741] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 867.991991] team0: Port device team_slave_1 added [ 868.028770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 868.068621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 868.107964] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 868.115478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 868.124193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 868.157991] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 868.165430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 868.173917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 868.544938] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.551371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 868.558178] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.564597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 868.572273] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 868.833239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 869.944865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 870.075904] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 870.207372] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 870.213692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 870.222132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 870.348011] 8021q: adding VLAN 0 to HW filter on device team0 [ 871.117224] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 871.128276] syz-executor2 cpuset=syz2 mems_allowed=0 [ 871.133499] CPU: 0 PID: 18131 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 871.140876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 871.150226] Call Trace: [ 871.152819] dump_stack+0x185/0x1d0 [ 871.156445] dump_header+0x2cc/0x16f0 [ 871.160242] ? is_console_locked+0x29/0x50 [ 871.164476] ? kmsan_report+0x4f/0x260 [ 871.168372] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 871.173835] ? ___ratelimit+0x67f/0x760 [ 871.177819] oom_kill_process+0x341/0x2160 [ 871.182086] ? mem_cgroup_scan_tasks+0x289/0x610 [ 871.186880] out_of_memory+0x1700/0x1da0 [ 871.190953] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 871.196328] ? _cond_resched+0x8b/0xd0 [ 871.200233] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 871.205431] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 871.210817] pagefault_out_of_memory+0x57/0x110 [ 871.215484] mm_fault_error+0x490/0x810 [ 871.219477] __do_page_fault+0x1272/0x1a10 [ 871.223717] ? page_fault+0x1e/0x30 [ 871.227339] do_page_fault+0xd3/0x260 [ 871.231147] ? page_fault+0x8/0x30 [ 871.234698] page_fault+0x1e/0x30 [ 871.238144] RIP: 0033:0x4071d8 [ 871.241322] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 871.246680] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 871.253936] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 871.261200] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 871.268465] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 871.275727] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 871.283183] Task in /syz2 killed as a result of limit of /syz2 [ 871.289398] memory: usage 804kB, limit 0kB, failcnt 912 [ 871.294829] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 871.301651] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 871.307875] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 871.327861] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 871.336703] [18131] 0 18131 17553 8392 114688 0 0 syz-executor2 [ 871.345614] Memory cgroup out of memory: Kill process 18131 (syz-executor2) score 8420000 or sacrifice child [ 871.355699] Killed process 18131 (syz-executor2) total-vm:70212kB, anon-rss:76kB, file-rss:33492kB, shmem-rss:0kB [ 871.383379] oom_reaper: reaped process 18131 (syz-executor2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 2018/05/21 12:31:31 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') io_setup(0x0, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:31:31 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x0, &(0x7f0000000000)=0x0) io_submit(r1, 0x7, &(0x7f0000000800)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x9, 0x0, r0, &(0x7f00000001c0)="1db970ef9f7c56161c7f8cc03c182516ba8ee9ec5da39c3f35dd5a331f56c65b0d86fc7703baec97e92c49081764a669bc298eab255b206f7230261e5991d6a7bc4609ffcd3f31f4e8380e14920d874c3f7c2826a0ef14ad2ef969692cd452", 0x5f, 0xffffffffffffffc1, 0x0, 0x0, r0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f0000000240)="a85f09df76855a08ff3c45dde4adae1d2ed23b0d28f9c777927980a827cb5c87739fd33cd405d6240a22c0adcc7c7b8a4e9db8bc342ad6c4b3948704acf953e159f0e7cbb2df622f6e21fc9e0b9e6b34a27dde8661a478876af7bb299ea6b288ed0155d34ae8afa4d7f8fdfae2b484561a7531c1a1e67b86b291564fd99027b1275096ee233be5d0b67abb7ea4f5f028984e8396f350557ebf9f620b", 0x9c, 0x1ff, 0x0, 0x1, r0}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x1, r0, &(0x7f0000000340)="8966bc4012b13ba21ba528070743a5c2402fdf62c3f2764c4924f8ede6685a93042ca3ba62c6616961bc5d11dbaa806d8f801de31c0cd04a7fcef83c83b069fa2037f6f6db064bbb97bf6c647057e10911800746b2c810ca164bd979c1198848940f7ac859ffb194cace864778c62786f2067191fa44456e9fab24a107fe3872834301989b4c389469a0de8ab7e3ea91ec0f0e367b9d05dbfddbf61f6a176c37179740d670b9956f1a00b73f", 0xac, 0x800, 0x0, 0x0, r0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x4, r0, &(0x7f0000000440)="78176f3f2a57c82836607aec9c086a6492805e1595f05de06863a0cedacbae9a2ef3068243910dcc3ecb5199136bce8abae0010c0de537899d8aab6b406a50e54538d70c55184a6070c8cd76e8b447967af4b60dd14d186697225de95052626fcd6366a484ae238080aabebb8da7c06afda9969ab745fb0147c99d061a5b1fc7bce169fb41459b141064dc6084a201616b2b0aef9282c9e8b7b0cec71046800841bfff84e78d54", 0xa7, 0xc21, 0x0, 0x1, r0}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000000540)="f426bd501ab34e68b129332f4c122a5a7289b76d3f5a148b3605da326448fb19e535c612127de28e37929331bfd29b6c85c157c5f047d90021351e24ae53c38de309e292cae5d6d14edc22d3b15b74228a42d4dd84d31c43f5afcd36928f697ed398424cb851103ea77a717afebaab73f1533e9b693f18726a84d8040bdf193d22e0c5e1722bf2ccc1bf8a9dac6823f09779f5c67ea26bd25fc46c888ccbbd5b874af537d3e956bf23e12543e7badc34551ff60f836cb6dcab", 0xb9, 0x7, 0x0, 0x1, r0}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x7, r0, &(0x7f0000000640)="8b29e790318b03bccd5166b7ed6a4fe8e72a3c378eef69506250839f0ba39a311329fa3d595b7c53", 0x28, 0x0, 0x0, 0x1, r0}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f00000006c0)="7acf6a3550242ad60f7f9c4bed9090295ffd1f11c412ac5dbdda0bf8e6598e73f753520a36b579ac45d72523e6c647d1e5a27ddf037940722c67dab79bec603298794f7a89af1a1eebce384efec68016136eb3054ec12a3e5fba9bee9fe3e556177048a0648a29866c727efb1c4898d116f3ed8419a40a3b00e9e165d49f846a8416fd31e235eb30745a5de66d3421fb5524c0e56e1749c6a625b650b4f8a786ee3361dd0e2796ddb81632bd06920bfee14994466defbb035fe7b3b240050f6ced09d1bacd5898321f265f103cbfae86d0e183ee728a30b70b3c9c", 0xdb, 0x8000, 0x0, 0x1, r0}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffff549, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) 2018/05/21 12:31:31 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x9, 0x30}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r2, 0x1}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000280)={0x8, [0x4, 0x800, 0x40, 0x40, 0x80000000, 0x8001, 0x7, 0x80000000]}, 0x14) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:31:31 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:31:31 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x20, 0xb65, 0x380000000000000, 0x2, 0x4b, 0x4, 0xfffffffffffff1e8, 0x7f, 0x7, 0x101}) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) 2018/05/21 12:31:31 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x20000) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) recvmmsg(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/202, 0xca}, {&(0x7f0000000140)=""/11, 0xb}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/184, 0xb8}, {&(0x7f0000000580)=""/196, 0xc4}, {&(0x7f0000000680)=""/251, 0xfb}], 0x6, &(0x7f0000000780)=""/139, 0x8b, 0x6}, 0xffffffff}, {{&(0x7f0000000840), 0x80, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/145, 0x91}, {&(0x7f0000000980)=""/183, 0xb7}], 0x2, &(0x7f0000000a80)=""/180, 0xb4, 0xfffffffffffffffa}, 0x8}, {{&(0x7f0000000b40)=@nfc_llcp, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000bc0)}, {&(0x7f0000000c00)=""/254, 0xfe}, {&(0x7f0000000d00)=""/19, 0x13}, {&(0x7f0000000d40)=""/79, 0x4f}, {&(0x7f0000000dc0)=""/237, 0xed}, {&(0x7f0000000ec0)=""/195, 0xc3}, {&(0x7f0000000fc0)=""/42, 0x2a}, {&(0x7f0000001000)=""/177, 0xb1}], 0x8, &(0x7f0000001140)=""/230, 0xe6}, 0x7}], 0x3, 0x1, &(0x7f0000001300)={0x77359400}) 2018/05/21 12:31:31 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)) 2018/05/21 12:31:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x1) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x301000, 0x41) write$fuse(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="28000000010000001c000000000000000200000000000000000000000000002c3f00000000000000"], 0x28) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1c02}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @multicast1=0xe0000001}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xd}}, 0x0, {0x2, 0x0, @rand_addr}, 'syzkaller0\x00'}) 2018/05/21 12:31:31 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(0x0, 0x7, &(0x7f0000000800)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x9, 0x0, r0, &(0x7f00000001c0)="1db970ef9f7c56161c7f8cc03c182516ba8ee9ec5da39c3f35dd5a331f56c65b0d86fc7703baec97e92c49081764a669bc298eab255b206f7230261e5991d6a7bc4609ffcd3f31f4e8380e14920d874c3f7c2826a0ef14ad2ef969692cd452", 0x5f, 0xffffffffffffffc1, 0x0, 0x0, r0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f0000000240)="a85f09df76855a08ff3c45dde4adae1d2ed23b0d28f9c777927980a827cb5c87739fd33cd405d6240a22c0adcc7c7b8a4e9db8bc342ad6c4b3948704acf953e159f0e7cbb2df622f6e21fc9e0b9e6b34a27dde8661a478876af7bb299ea6b288ed0155d34ae8afa4d7f8fdfae2b484561a7531c1a1e67b86b291564fd99027b1275096ee233be5d0b67abb7ea4f5f028984e8396f350557ebf9f620b", 0x9c, 0x1ff, 0x0, 0x1, r0}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x1, r0, &(0x7f0000000340)="8966bc4012b13ba21ba528070743a5c2402fdf62c3f2764c4924f8ede6685a93042ca3ba62c6616961bc5d11dbaa806d8f801de31c0cd04a7fcef83c83b069fa2037f6f6db064bbb97bf6c647057e10911800746b2c810ca164bd979c1198848940f7ac859ffb194cace864778c62786f2067191fa44456e9fab24a107fe3872834301989b4c389469a0de8ab7e3ea91ec0f0e367b9d05dbfddbf61f6a176c37179740d670b9956f1a00b73f", 0xac, 0x800, 0x0, 0x0, r0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x4, r0, &(0x7f0000000440)="78176f3f2a57c82836607aec9c086a6492805e1595f05de06863a0cedacbae9a2ef3068243910dcc3ecb5199136bce8abae0010c0de537899d8aab6b406a50e54538d70c55184a6070c8cd76e8b447967af4b60dd14d186697225de95052626fcd6366a484ae238080aabebb8da7c06afda9969ab745fb0147c99d061a5b1fc7bce169fb41459b141064dc6084a201616b2b0aef9282c9e8b7b0cec71046800841bfff84e78d54", 0xa7, 0xc21, 0x0, 0x1, r0}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000000540)="f426bd501ab34e68b129332f4c122a5a7289b76d3f5a148b3605da326448fb19e535c612127de28e37929331bfd29b6c85c157c5f047d90021351e24ae53c38de309e292cae5d6d14edc22d3b15b74228a42d4dd84d31c43f5afcd36928f697ed398424cb851103ea77a717afebaab73f1533e9b693f18726a84d8040bdf193d22e0c5e1722bf2ccc1bf8a9dac6823f09779f5c67ea26bd25fc46c888ccbbd5b874af537d3e956bf23e12543e7badc34551ff60f836cb6dcab", 0xb9, 0x7, 0x0, 0x1, r0}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x7, r0, &(0x7f0000000640)="8b29e790318b03bccd5166b7ed6a4fe8e72a3c378eef69506250839f0ba39a311329fa3d595b7c53", 0x28, 0x0, 0x0, 0x1, r0}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f00000006c0)="7acf6a3550242ad60f7f9c4bed9090295ffd1f11c412ac5dbdda0bf8e6598e73f753520a36b579ac45d72523e6c647d1e5a27ddf037940722c67dab79bec603298794f7a89af1a1eebce384efec68016136eb3054ec12a3e5fba9bee9fe3e556177048a0648a29866c727efb1c4898d116f3ed8419a40a3b00e9e165d49f846a8416fd31e235eb30745a5de66d3421fb5524c0e56e1749c6a625b650b4f8a786ee3361dd0e2796ddb81632bd06920bfee14994466defbb035fe7b3b240050f6ced09d1bacd5898321f265f103cbfae86d0e183ee728a30b70b3c9c", 0xdb, 0x8000, 0x0, 0x1, r0}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffff549, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) 2018/05/21 12:31:31 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(0x0, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:31:31 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) fanotify_mark(r0, 0x60, 0x8000000, r0, &(0x7f0000000080)='./file0\x00') io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) [ 871.700740] device bridge_slave_1 left promiscuous mode [ 871.706684] bridge0: port 2(bridge_slave_1) entered disabled state 2018/05/21 12:31:31 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) [ 871.774663] device bridge_slave_0 left promiscuous mode [ 871.780605] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:31:31 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(0x0, 0x7, &(0x7f0000000800)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x9, 0x0, r0, &(0x7f00000001c0)="1db970ef9f7c56161c7f8cc03c182516ba8ee9ec5da39c3f35dd5a331f56c65b0d86fc7703baec97e92c49081764a669bc298eab255b206f7230261e5991d6a7bc4609ffcd3f31f4e8380e14920d874c3f7c2826a0ef14ad2ef969692cd452", 0x5f, 0xffffffffffffffc1, 0x0, 0x0, r0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f0000000240)="a85f09df76855a08ff3c45dde4adae1d2ed23b0d28f9c777927980a827cb5c87739fd33cd405d6240a22c0adcc7c7b8a4e9db8bc342ad6c4b3948704acf953e159f0e7cbb2df622f6e21fc9e0b9e6b34a27dde8661a478876af7bb299ea6b288ed0155d34ae8afa4d7f8fdfae2b484561a7531c1a1e67b86b291564fd99027b1275096ee233be5d0b67abb7ea4f5f028984e8396f350557ebf9f620b", 0x9c, 0x1ff, 0x0, 0x1, r0}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x1, r0, &(0x7f0000000340)="8966bc4012b13ba21ba528070743a5c2402fdf62c3f2764c4924f8ede6685a93042ca3ba62c6616961bc5d11dbaa806d8f801de31c0cd04a7fcef83c83b069fa2037f6f6db064bbb97bf6c647057e10911800746b2c810ca164bd979c1198848940f7ac859ffb194cace864778c62786f2067191fa44456e9fab24a107fe3872834301989b4c389469a0de8ab7e3ea91ec0f0e367b9d05dbfddbf61f6a176c37179740d670b9956f1a00b73f", 0xac, 0x800, 0x0, 0x0, r0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x4, r0, &(0x7f0000000440)="78176f3f2a57c82836607aec9c086a6492805e1595f05de06863a0cedacbae9a2ef3068243910dcc3ecb5199136bce8abae0010c0de537899d8aab6b406a50e54538d70c55184a6070c8cd76e8b447967af4b60dd14d186697225de95052626fcd6366a484ae238080aabebb8da7c06afda9969ab745fb0147c99d061a5b1fc7bce169fb41459b141064dc6084a201616b2b0aef9282c9e8b7b0cec71046800841bfff84e78d54", 0xa7, 0xc21, 0x0, 0x1, r0}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000000540)="f426bd501ab34e68b129332f4c122a5a7289b76d3f5a148b3605da326448fb19e535c612127de28e37929331bfd29b6c85c157c5f047d90021351e24ae53c38de309e292cae5d6d14edc22d3b15b74228a42d4dd84d31c43f5afcd36928f697ed398424cb851103ea77a717afebaab73f1533e9b693f18726a84d8040bdf193d22e0c5e1722bf2ccc1bf8a9dac6823f09779f5c67ea26bd25fc46c888ccbbd5b874af537d3e956bf23e12543e7badc34551ff60f836cb6dcab", 0xb9, 0x7, 0x0, 0x1, r0}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x7, r0, &(0x7f0000000640)="8b29e790318b03bccd5166b7ed6a4fe8e72a3c378eef69506250839f0ba39a311329fa3d595b7c53", 0x28, 0x0, 0x0, 0x1, r0}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f00000006c0)="7acf6a3550242ad60f7f9c4bed9090295ffd1f11c412ac5dbdda0bf8e6598e73f753520a36b579ac45d72523e6c647d1e5a27ddf037940722c67dab79bec603298794f7a89af1a1eebce384efec68016136eb3054ec12a3e5fba9bee9fe3e556177048a0648a29866c727efb1c4898d116f3ed8419a40a3b00e9e165d49f846a8416fd31e235eb30745a5de66d3421fb5524c0e56e1749c6a625b650b4f8a786ee3361dd0e2796ddb81632bd06920bfee14994466defbb035fe7b3b240050f6ced09d1bacd5898321f265f103cbfae86d0e183ee728a30b70b3c9c", 0xdb, 0x8000, 0x0, 0x1, r0}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffff549, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) 2018/05/21 12:31:32 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(0x0, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) [ 871.967269] team0 (unregistering): Port device team_slave_1 removed 2018/05/21 12:31:32 executing program 1: r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x15}, 0x7fffffff}], 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") sendto$unix(r1, &(0x7f0000007c40)="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", 0x6b1, 0x20000010, &(0x7f0000005a00)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/16, 0x10}, {&(0x7f00000001c0)=""/112, 0x70}, {&(0x7f00000002c0)=""/116, 0x74}, {&(0x7f0000000340)=""/23, 0x17}, {&(0x7f0000000380)=""/137, 0x89}, {&(0x7f0000000440)=""/222, 0xde}, {&(0x7f0000000540)=""/29, 0x1d}], 0x7, &(0x7f0000000600)=""/174, 0xae}, 0x7ff}, {{&(0x7f00000006c0)=@nfc, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000740)=""/236, 0xec}, {&(0x7f0000000840)=""/157, 0x9d}, {&(0x7f0000000900)=""/85, 0x55}, {&(0x7f0000000980)=""/36, 0x24}, {&(0x7f00000009c0)=""/222, 0xde}], 0x5, &(0x7f0000000b40)=""/13, 0xd, 0x1b74}, 0xfe5f}, {{&(0x7f0000000b80)=@un=@abs, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000c00)=""/100, 0x64}, {&(0x7f0000000c80)=""/74, 0x4a}, {&(0x7f0000000d00)=""/24, 0x18}, {&(0x7f0000000d40)=""/110, 0x6e}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/22, 0x16}, {&(0x7f0000000e00)=""/111, 0x6f}, {&(0x7f0000000e80)=""/117, 0x163}], 0x8, 0x0, 0x0, 0x1}, 0xfffffffffffffff9}, {{&(0x7f0000000f80)=@hci={0x0, 0x0}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001000)=""/57, 0x39}, {&(0x7f0000001040)=""/84, 0x54}], 0x2, &(0x7f0000001100)=""/191, 0xbf, 0xf6ca}, 0x200}, {{&(0x7f00000011c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001240)=""/120, 0x78}, {&(0x7f00000012c0)=""/95, 0x5f}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x3, &(0x7f0000001380)=""/148, 0x94, 0xffffffff}, 0xfc0}, {{&(0x7f0000003480)=@ax25, 0x80, &(0x7f0000003540)=[{&(0x7f0000003500)=""/25, 0x19}], 0x1, 0x0, 0x0, 0x7fff}, 0x9}, {{&(0x7f0000003580)=@nfc_llcp, 0x80, &(0x7f0000004740)=[{&(0x7f0000003600)=""/203, 0xcb}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x6}, 0xad}], 0x7, 0x10000, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000004a00)={{0xa, 0x4e22, 0xb5af, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x7ff}, {0xa, 0x4e21, 0x9, @loopback={0x0, 0x1}, 0x101}, 0x17373dd2, [0x94f, 0x10000, 0x8000, 0x7, 0x5, 0x3, 0x1, 0x80000000]}, 0x5c) bind$can_raw(r1, &(0x7f0000004940)={0x1d, r2}, 0x10) fdatasync(r3) io_setup(0x3, &(0x7f0000005c00)=0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000049c0)={0x1, &(0x7f0000004980)=[{0x1, 0xba4, 0xfff, 0x5f}]}) sendmsg$nl_route(r1, &(0x7f0000005bc0)={&(0x7f0000005b00)={0x10}, 0xc, &(0x7f0000005b80)={&(0x7f0000005b40)=ANY=[@ANYBLOB="140000004200000404000000fedbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$int_out(r3, 0x5462, &(0x7f0000005a80)) io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000001200)}]) getsockopt$inet_int(r3, 0x0, 0x37, &(0x7f0000000000), &(0x7f0000005ac0)=0x4) [ 872.029372] team0 (unregistering): Port device team_slave_0 removed [ 872.031917] IPVS: ftp: loaded support on port[0] = 21 [ 872.103268] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 872.148630] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 872.210214] bond0 (unregistering): Released all slaves [ 873.209767] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.216225] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.223681] device bridge_slave_0 entered promiscuous mode [ 873.260644] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.267128] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.274577] device bridge_slave_1 entered promiscuous mode [ 873.311760] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 873.348955] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 873.455219] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 873.495683] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 873.534497] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 873.541487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 873.580046] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 873.587164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 873.692838] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 873.700202] team0: Port device team_slave_0 added [ 873.736937] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 873.744337] team0: Port device team_slave_1 added [ 873.781765] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 873.821923] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 873.860677] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 873.867995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 873.877167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 873.911868] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 873.919222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 873.927735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 874.301108] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.307555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 874.314352] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.320777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 874.328706] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 874.434687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 875.728229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 875.862166] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 875.993393] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 875.999781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 876.007912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 876.137369] 8021q: adding VLAN 0 to HW filter on device team0 [ 876.907969] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 876.919102] syz-executor2 cpuset=syz2 mems_allowed=0 [ 876.924388] CPU: 1 PID: 18430 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 876.931769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 876.941117] Call Trace: [ 876.943732] dump_stack+0x185/0x1d0 [ 876.947353] dump_header+0x2cc/0x16f0 [ 876.951147] ? is_console_locked+0x29/0x50 [ 876.955379] ? kmsan_report+0x4f/0x260 [ 876.959272] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 876.964735] ? ___ratelimit+0x67f/0x760 [ 876.968720] oom_kill_process+0x341/0x2160 [ 876.972948] ? mem_cgroup_scan_tasks+0x289/0x610 [ 876.977723] out_of_memory+0x1700/0x1da0 [ 876.981791] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 876.987159] ? _cond_resched+0x8b/0xd0 [ 876.991069] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 876.996257] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 877.001627] pagefault_out_of_memory+0x57/0x110 [ 877.006297] mm_fault_error+0x490/0x810 [ 877.010301] __do_page_fault+0x1272/0x1a10 [ 877.014557] ? page_fault+0x1e/0x30 [ 877.018180] do_page_fault+0xd3/0x260 [ 877.021979] ? page_fault+0x8/0x30 [ 877.025529] page_fault+0x1e/0x30 [ 877.028974] RIP: 0033:0x4071d8 [ 877.032153] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 877.037512] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 877.044781] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 877.052048] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 877.059319] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 877.066584] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 877.074311] Task in /syz2 killed as a result of limit of /syz2 [ 877.080386] memory: usage 804kB, limit 0kB, failcnt 920 [ 877.085831] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 877.092649] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 877.098862] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 877.118860] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 877.127676] [18430] 0 18430 17553 8394 118784 0 0 syz-executor2 [ 877.136589] Memory cgroup out of memory: Kill process 18430 (syz-executor2) score 8423000 or sacrifice child [ 877.146788] Killed process 18430 (syz-executor2) total-vm:70212kB, anon-rss:84kB, file-rss:33492kB, shmem-rss:0kB 2018/05/21 12:31:37 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) getpeername(r0, &(0x7f0000000400)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, &(0x7f0000000480)=0x80) inotify_add_watch(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x183) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000004c0)={0x0, 0x1f, 0x4}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000540)={r2, @in6={{0xa, 0x4e21, 0x8000, @loopback={0x0, 0x1}, 0x9}}, 0x1, 0xa, 0x3, 0x7fff, 0x9}, &(0x7f0000000600)=0x98) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@nat={'nat\x00', 0x1b, 0x5, 0x678, 0x498, 0x2a8, 0xffffffff, 0x2a8, 0x2a8, 0x5a8, 0x5a8, 0xffffffff, 0x5a8, 0x5a8, 0x5, &(0x7f0000000680), {[{{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, [0xff, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xff, 0xff000000, 0xffffffff], 'veth1_to_bridge\x00', 'ip_vti0\x00', {}, {0xff}, 0x29, 0x6, 0x2, 0x20}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hl={0x28, 'hl\x00', 0x0, {0x2, 0x93a}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x19, @ipv6=@loopback={0x0, 0x1}, @ipv6=@remote={0xfe, 0x80, [], 0xbb}, @icmp_id=0x65, @port=0x4e21}}}, {{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @remote={0xfe, 0x80, [], 0xbb}, [0xff, 0xff000000, 0xffffffff, 0xffffff00], [0xff000000, 0x0, 0xffffff00, 0xffffff00], 'bridge_slave_1\x00', 'bcsh0\x00', {}, {0xff}, 0x3c, 0x7, 0x1, 0x20}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@frag={0x30, 'frag\x00', 0x0, {0x3, 0x1, 0x6, 0x12, 0x1}}, @common=@srh={0x30, 'srh\x00', 0x0, {0x2e, 0x0, 0x6, 0x7, 0x7, 0x24}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xa, @ipv4, @ipv4=@dev={0xac, 0x14, 0x14, 0xa}, @gre_key=0x8000, @gre_key}}}, {{@ipv6={@remote={0xfe, 0x80, [], 0xbb}, @loopback={0x0, 0x1}, [0xffffff00, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffff00, 0xff000000, 0xffffffff], 'veth0_to_team\x00', 'bridge_slave_0\x00', {}, {}, 0x84, 0xff, 0x2, 0x60}, 0x0, 0xc8, 0x1f0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xfffffffffffffe00, 'system_u:object_r:xconsole_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xc8, 0x110}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x2, @ipv6=@mcast2={0xff, 0x2, [], 0x1}, @ipv6=@loopback={0x0, 0x1}, @icmp_id=0x66, @port=0x4e24}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x6d8) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xb0}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x2, 0x0, 0x9, 0x6, 0x2c, 0x0, 0x70bd26, 0x25dfdbfb, [@sadb_x_filter={0x5, 0x1a, @in=@remote={0xac, 0x14, 0x14, 0xbb}, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x19, 0x0, 0x14}, @sadb_sa={0x2, 0x1, 0x4d4, 0x6, 0xffffffff, 0x8, 0x2, 0x1}, @sadb_ident={0x2, 0xa, 0xfffffffffffffc01, 0x0, 0x1}, @sadb_x_sec_ctx={0x4, 0x18, 0x4, 0x10000, 0x16, "8a2e447ad910a3be3a2b3308523a3d593d0c3d89a0ac"}, @sadb_x_sec_ctx={0xb, 0x18, 0x2be8, 0x5, 0x4e, "4c0166ffe40ee31c22dddb0d65f51445b22768f47dce895213772150e58aa6e69b404ae32766e43decdb16a9cd7c300ea6d5f6ac543456cd20cf7e6b47a375cb97c966f600c4e03d36376ecb4515"}, @sadb_key={0xe, 0x9, 0x340, 0x0, "3397c0933923457aebc19d2876cae09fe1ac7451da8f9eba723dc6f0dde5b70f3ee973ddefc3a928c041e779fb5fca638508557d1108e7756642cd5faf4a79734c40613663e1fc038c73210b9e873f5b0d177550a1a9f7fa68fc843d1078aef12011c011e5d53b94"}, @sadb_x_sa2={0x2, 0x13, 0x1000, 0x0, 0x0, 0x70bd2d, 0x3507}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d3}]}, 0x160}, 0x1}, 0x8810) r3 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_LOCK(r3, 0xb) 2018/05/21 12:31:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f00000000c0)={0x2, 0x7fff}) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="057ef020a7530334ecd29c32cf5939e66e0010768b07498251cbeeb321ca5588690a205a1c77e853d5729b1a31efce78933c19fbfe197d8ab7ab4cd530415db738a8a1c6a6aa6451b7d607139794ad4d2d97ad4ae9"], 0x2) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) 2018/05/21 12:31:37 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_setup(0x8, &(0x7f0000000080)) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:31:37 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:31:37 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x2}, {0x1, 0xa338, 0x1000}, {0x0, 0x7ff, 0x1000}], 0x3, &(0x7f00000000c0)={r1, r2+10000000}) 2018/05/21 12:31:37 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(0x0, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:31:37 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x48000, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000200)=""/102, &(0x7f0000000140)=0x66) 2018/05/21 12:31:37 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(0x0, 0x7, &(0x7f0000000800)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x9, 0x0, r0, &(0x7f00000001c0)="1db970ef9f7c56161c7f8cc03c182516ba8ee9ec5da39c3f35dd5a331f56c65b0d86fc7703baec97e92c49081764a669bc298eab255b206f7230261e5991d6a7bc4609ffcd3f31f4e8380e14920d874c3f7c2826a0ef14ad2ef969692cd452", 0x5f, 0xffffffffffffffc1, 0x0, 0x0, r0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f0000000240)="a85f09df76855a08ff3c45dde4adae1d2ed23b0d28f9c777927980a827cb5c87739fd33cd405d6240a22c0adcc7c7b8a4e9db8bc342ad6c4b3948704acf953e159f0e7cbb2df622f6e21fc9e0b9e6b34a27dde8661a478876af7bb299ea6b288ed0155d34ae8afa4d7f8fdfae2b484561a7531c1a1e67b86b291564fd99027b1275096ee233be5d0b67abb7ea4f5f028984e8396f350557ebf9f620b", 0x9c, 0x1ff, 0x0, 0x1, r0}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x1, r0, &(0x7f0000000340)="8966bc4012b13ba21ba528070743a5c2402fdf62c3f2764c4924f8ede6685a93042ca3ba62c6616961bc5d11dbaa806d8f801de31c0cd04a7fcef83c83b069fa2037f6f6db064bbb97bf6c647057e10911800746b2c810ca164bd979c1198848940f7ac859ffb194cace864778c62786f2067191fa44456e9fab24a107fe3872834301989b4c389469a0de8ab7e3ea91ec0f0e367b9d05dbfddbf61f6a176c37179740d670b9956f1a00b73f", 0xac, 0x800, 0x0, 0x0, r0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x4, r0, &(0x7f0000000440)="78176f3f2a57c82836607aec9c086a6492805e1595f05de06863a0cedacbae9a2ef3068243910dcc3ecb5199136bce8abae0010c0de537899d8aab6b406a50e54538d70c55184a6070c8cd76e8b447967af4b60dd14d186697225de95052626fcd6366a484ae238080aabebb8da7c06afda9969ab745fb0147c99d061a5b1fc7bce169fb41459b141064dc6084a201616b2b0aef9282c9e8b7b0cec71046800841bfff84e78d54", 0xa7, 0xc21, 0x0, 0x1, r0}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000000540)="f426bd501ab34e68b129332f4c122a5a7289b76d3f5a148b3605da326448fb19e535c612127de28e37929331bfd29b6c85c157c5f047d90021351e24ae53c38de309e292cae5d6d14edc22d3b15b74228a42d4dd84d31c43f5afcd36928f697ed398424cb851103ea77a717afebaab73f1533e9b693f18726a84d8040bdf193d22e0c5e1722bf2ccc1bf8a9dac6823f09779f5c67ea26bd25fc46c888ccbbd5b874af537d3e956bf23e12543e7badc34551ff60f836cb6dcab", 0xb9, 0x7, 0x0, 0x1, r0}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x7, r0, &(0x7f0000000640)="8b29e790318b03bccd5166b7ed6a4fe8e72a3c378eef69506250839f0ba39a311329fa3d595b7c53", 0x28, 0x0, 0x0, 0x1, r0}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f00000006c0)="7acf6a3550242ad60f7f9c4bed9090295ffd1f11c412ac5dbdda0bf8e6598e73f753520a36b579ac45d72523e6c647d1e5a27ddf037940722c67dab79bec603298794f7a89af1a1eebce384efec68016136eb3054ec12a3e5fba9bee9fe3e556177048a0648a29866c727efb1c4898d116f3ed8419a40a3b00e9e165d49f846a8416fd31e235eb30745a5de66d3421fb5524c0e56e1749c6a625b650b4f8a786ee3361dd0e2796ddb81632bd06920bfee14994466defbb035fe7b3b240050f6ced09d1bacd5898321f265f103cbfae86d0e183ee728a30b70b3c9c", 0xdb, 0x8000, 0x0, 0x1, r0}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffff549, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) 2018/05/21 12:31:37 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x800, 0x0) sendto(r0, &(0x7f0000000080)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x9, 0x200000) accept$packet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x14) 2018/05/21 12:31:37 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x6, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f0000000240)="a85f09df76855a08ff3c45dde4adae1d2ed23b0d28f9c777927980a827cb5c87739fd33cd405d6240a22c0adcc7c7b8a4e9db8bc342ad6c4b3948704acf953e159f0e7cbb2df622f6e21fc9e0b9e6b34a27dde8661a478876af7bb299ea6b288ed0155d34ae8afa4d7f8fdfae2b484561a7531c1a1e67b86b291564fd99027b1275096ee233be5d0b67abb7ea4f5f028984e8396f350557ebf9f620b", 0x9c, 0x1ff, 0x0, 0x1, r0}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x1, r0, &(0x7f0000000340)="8966bc4012b13ba21ba528070743a5c2402fdf62c3f2764c4924f8ede6685a93042ca3ba62c6616961bc5d11dbaa806d8f801de31c0cd04a7fcef83c83b069fa2037f6f6db064bbb97bf6c647057e10911800746b2c810ca164bd979c1198848940f7ac859ffb194cace864778c62786f2067191fa44456e9fab24a107fe3872834301989b4c389469a0de8ab7e3ea91ec0f0e367b9d05dbfddbf61f6a176c37179740d670b9956f1a00b73f", 0xac, 0x800, 0x0, 0x0, r0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x4, r0, &(0x7f0000000440)="78176f3f2a57c82836607aec9c086a6492805e1595f05de06863a0cedacbae9a2ef3068243910dcc3ecb5199136bce8abae0010c0de537899d8aab6b406a50e54538d70c55184a6070c8cd76e8b447967af4b60dd14d186697225de95052626fcd6366a484ae238080aabebb8da7c06afda9969ab745fb0147c99d061a5b1fc7bce169fb41459b141064dc6084a201616b2b0aef9282c9e8b7b0cec71046800841bfff84e78d54", 0xa7, 0xc21, 0x0, 0x1, r0}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000000540)="f426bd501ab34e68b129332f4c122a5a7289b76d3f5a148b3605da326448fb19e535c612127de28e37929331bfd29b6c85c157c5f047d90021351e24ae53c38de309e292cae5d6d14edc22d3b15b74228a42d4dd84d31c43f5afcd36928f697ed398424cb851103ea77a717afebaab73f1533e9b693f18726a84d8040bdf193d22e0c5e1722bf2ccc1bf8a9dac6823f09779f5c67ea26bd25fc46c888ccbbd5b874af537d3e956bf23e12543e7badc34551ff60f836cb6dcab", 0xb9, 0x7, 0x0, 0x1, r0}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x7, r0, &(0x7f0000000640)="8b29e790318b03bccd5166b7ed6a4fe8e72a3c378eef69506250839f0ba39a311329fa3d595b7c53", 0x28, 0x0, 0x0, 0x1, r0}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f00000006c0)="7acf6a3550242ad60f7f9c4bed9090295ffd1f11c412ac5dbdda0bf8e6598e73f753520a36b579ac45d72523e6c647d1e5a27ddf037940722c67dab79bec603298794f7a89af1a1eebce384efec68016136eb3054ec12a3e5fba9bee9fe3e556177048a0648a29866c727efb1c4898d116f3ed8419a40a3b00e9e165d49f846a8416fd31e235eb30745a5de66d3421fb5524c0e56e1749c6a625b650b4f8a786ee3361dd0e2796ddb81632bd06920bfee14994466defbb035fe7b3b240050f6ced09d1bacd5898321f265f103cbfae86d0e183ee728a30b70b3c9c", 0xdb, 0x8000, 0x0, 0x1, r0}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffff549, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) 2018/05/21 12:31:37 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4000, 0x0) epoll_wait(r1, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0xf7) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) 2018/05/21 12:31:37 executing program 5: syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r0, 0x0, &(0x7f0000001440)) [ 877.469768] device bridge_slave_1 left promiscuous mode [ 877.475769] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.538731] device bridge_slave_0 left promiscuous mode [ 877.544634] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:31:37 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000001c0)=0x4) 2018/05/21 12:31:37 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='dummy0\x00') 2018/05/21 12:31:37 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x5, &(0x7f0000000800)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x1, r0, &(0x7f0000000340)="8966bc4012b13ba21ba528070743a5c2402fdf62c3f2764c4924f8ede6685a93042ca3ba62c6616961bc5d11dbaa806d8f801de31c0cd04a7fcef83c83b069fa2037f6f6db064bbb97bf6c647057e10911800746b2c810ca164bd979c1198848940f7ac859ffb194cace864778c62786f2067191fa44456e9fab24a107fe3872834301989b4c389469a0de8ab7e3ea91ec0f0e367b9d05dbfddbf61f6a176c37179740d670b9956f1a00b73f", 0xac, 0x800, 0x0, 0x0, r0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x4, r0, &(0x7f0000000440)="78176f3f2a57c82836607aec9c086a6492805e1595f05de06863a0cedacbae9a2ef3068243910dcc3ecb5199136bce8abae0010c0de537899d8aab6b406a50e54538d70c55184a6070c8cd76e8b447967af4b60dd14d186697225de95052626fcd6366a484ae238080aabebb8da7c06afda9969ab745fb0147c99d061a5b1fc7bce169fb41459b141064dc6084a201616b2b0aef9282c9e8b7b0cec71046800841bfff84e78d54", 0xa7, 0xc21, 0x0, 0x1, r0}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000000540)="f426bd501ab34e68b129332f4c122a5a7289b76d3f5a148b3605da326448fb19e535c612127de28e37929331bfd29b6c85c157c5f047d90021351e24ae53c38de309e292cae5d6d14edc22d3b15b74228a42d4dd84d31c43f5afcd36928f697ed398424cb851103ea77a717afebaab73f1533e9b693f18726a84d8040bdf193d22e0c5e1722bf2ccc1bf8a9dac6823f09779f5c67ea26bd25fc46c888ccbbd5b874af537d3e956bf23e12543e7badc34551ff60f836cb6dcab", 0xb9, 0x7, 0x0, 0x1, r0}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x7, r0, &(0x7f0000000640)="8b29e790318b03bccd5166b7ed6a4fe8e72a3c378eef69506250839f0ba39a311329fa3d595b7c53", 0x28, 0x0, 0x0, 0x1, r0}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f00000006c0)="7acf6a3550242ad60f7f9c4bed9090295ffd1f11c412ac5dbdda0bf8e6598e73f753520a36b579ac45d72523e6c647d1e5a27ddf037940722c67dab79bec603298794f7a89af1a1eebce384efec68016136eb3054ec12a3e5fba9bee9fe3e556177048a0648a29866c727efb1c4898d116f3ed8419a40a3b00e9e165d49f846a8416fd31e235eb30745a5de66d3421fb5524c0e56e1749c6a625b650b4f8a786ee3361dd0e2796ddb81632bd06920bfee14994466defbb035fe7b3b240050f6ced09d1bacd5898321f265f103cbfae86d0e183ee728a30b70b3c9c", 0xdb, 0x8000, 0x0, 0x1, r0}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffff549, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) [ 877.756829] team0 (unregistering): Port device team_slave_1 removed 2018/05/21 12:31:37 executing program 5: syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r0, 0x0, &(0x7f0000001440)) [ 877.824644] team0 (unregistering): Port device team_slave_0 removed [ 877.887876] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 877.918343] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 878.022826] IPVS: ftp: loaded support on port[0] = 21 [ 878.066727] bond0 (unregistering): Released all slaves [ 879.047746] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.054203] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.061578] device bridge_slave_0 entered promiscuous mode [ 879.098791] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.105382] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.112818] device bridge_slave_1 entered promiscuous mode [ 879.149899] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 879.189658] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 879.296569] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 879.336018] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 879.374305] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 879.381476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 879.520691] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 879.527952] team0: Port device team_slave_0 added [ 879.564726] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 879.572016] team0: Port device team_slave_1 added [ 879.608500] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 879.647974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 879.686383] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 879.693661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 879.702967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 879.736222] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 879.743494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 879.752739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 880.120907] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.127352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 880.134168] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.140582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 880.148151] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 880.255252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 881.527700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 881.660841] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 881.791419] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 881.797687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 881.805814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 881.933669] 8021q: adding VLAN 0 to HW filter on device team0 [ 882.706580] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 882.717725] syz-executor2 cpuset=syz2 mems_allowed=0 [ 882.723131] CPU: 1 PID: 18755 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 882.730516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 882.739876] Call Trace: [ 882.742475] dump_stack+0x185/0x1d0 [ 882.746101] dump_header+0x2cc/0x16f0 [ 882.749901] ? is_console_locked+0x29/0x50 [ 882.754136] ? kmsan_report+0x4f/0x260 [ 882.758028] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 882.763501] ? ___ratelimit+0x67f/0x760 [ 882.767484] oom_kill_process+0x341/0x2160 [ 882.771727] ? mem_cgroup_scan_tasks+0x289/0x610 [ 882.776493] out_of_memory+0x1700/0x1da0 [ 882.780566] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 882.785944] ? _cond_resched+0x8b/0xd0 [ 882.789841] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 882.795026] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 882.800410] pagefault_out_of_memory+0x57/0x110 [ 882.805096] mm_fault_error+0x490/0x810 [ 882.809126] __do_page_fault+0x1272/0x1a10 [ 882.813370] ? page_fault+0x1e/0x30 [ 882.816988] do_page_fault+0xd3/0x260 [ 882.820781] ? page_fault+0x8/0x30 [ 882.824311] page_fault+0x1e/0x30 [ 882.827759] RIP: 0033:0x4071d8 [ 882.830943] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 882.836299] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 882.843563] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 882.850834] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 882.858094] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 882.865356] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 882.872729] Task in /syz2 killed as a result of limit of /syz2 [ 882.878943] memory: usage 804kB, limit 0kB, failcnt 928 [ 882.884389] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 882.891209] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 882.897409] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 882.917349] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 882.926204] [18755] 0 18755 17553 8393 118784 0 0 syz-executor2 [ 882.935127] Memory cgroup out of memory: Kill process 18755 (syz-executor2) score 8422000 or sacrifice child [ 882.945203] Killed process 18755 (syz-executor2) total-vm:70212kB, anon-rss:80kB, file-rss:33492kB, shmem-rss:0kB [ 882.972855] oom_reaper: reaped process 18755 (syz-executor2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 2018/05/21 12:31:43 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x140) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) 2018/05/21 12:31:43 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x4, &(0x7f0000000800)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x4, r0, &(0x7f0000000440)="78176f3f2a57c82836607aec9c086a6492805e1595f05de06863a0cedacbae9a2ef3068243910dcc3ecb5199136bce8abae0010c0de537899d8aab6b406a50e54538d70c55184a6070c8cd76e8b447967af4b60dd14d186697225de95052626fcd6366a484ae238080aabebb8da7c06afda9969ab745fb0147c99d061a5b1fc7bce169fb41459b141064dc6084a201616b2b0aef9282c9e8b7b0cec71046800841bfff84e78d54", 0xa7, 0xc21, 0x0, 0x1, r0}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000000540)="f426bd501ab34e68b129332f4c122a5a7289b76d3f5a148b3605da326448fb19e535c612127de28e37929331bfd29b6c85c157c5f047d90021351e24ae53c38de309e292cae5d6d14edc22d3b15b74228a42d4dd84d31c43f5afcd36928f697ed398424cb851103ea77a717afebaab73f1533e9b693f18726a84d8040bdf193d22e0c5e1722bf2ccc1bf8a9dac6823f09779f5c67ea26bd25fc46c888ccbbd5b874af537d3e956bf23e12543e7badc34551ff60f836cb6dcab", 0xb9, 0x7, 0x0, 0x1, r0}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x7, r0, &(0x7f0000000640)="8b29e790318b03bccd5166b7ed6a4fe8e72a3c378eef69506250839f0ba39a311329fa3d595b7c53", 0x28, 0x0, 0x0, 0x1, r0}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f00000006c0)="7acf6a3550242ad60f7f9c4bed9090295ffd1f11c412ac5dbdda0bf8e6598e73f753520a36b579ac45d72523e6c647d1e5a27ddf037940722c67dab79bec603298794f7a89af1a1eebce384efec68016136eb3054ec12a3e5fba9bee9fe3e556177048a0648a29866c727efb1c4898d116f3ed8419a40a3b00e9e165d49f846a8416fd31e235eb30745a5de66d3421fb5524c0e56e1749c6a625b650b4f8a786ee3361dd0e2796ddb81632bd06920bfee14994466defbb035fe7b3b240050f6ced09d1bacd5898321f265f103cbfae86d0e183ee728a30b70b3c9c", 0xdb, 0x8000, 0x0, 0x1, r0}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffff549, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) 2018/05/21 12:31:43 executing program 5: syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r0, 0x0, &(0x7f0000001440)) 2018/05/21 12:31:43 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:31:43 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'ip6gretap0\x00', 0x8}) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000000)) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02030000160000000000000000000000070003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000000000000000000000000c9d300000000000000000000000004000400000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000520000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0xb0}, 0x1}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x24000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f00000000c0)={{0x5, 0x7}, 'port1\x00', 0x26, 0x110000, 0x5, 0x5, 0x74, 0x0, 0x6e, 0x0, 0x4, 0x2}) 2018/05/21 12:31:43 executing program 7: getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', &(0x7f0000000300)=""/200, 0xc8) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x7, 0x1f, 0x5, 0x81}, {0x5, 0x3, 0xffffffff, 0x7fff}, {0x4, 0x9, 0x3, 0x2}]}, 0x10) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/05/21 12:31:43 executing program 2: 2018/05/21 12:31:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f00000001c0)=""/4096) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000011c0), &(0x7f0000001200)=0x4) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) [ 883.198602] device bridge_slave_1 left promiscuous mode [ 883.204535] bridge0: port 2(bridge_slave_1) entered disabled state 2018/05/21 12:31:43 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x3, &(0x7f0000000800)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000000540)="f426bd501ab34e68b129332f4c122a5a7289b76d3f5a148b3605da326448fb19e535c612127de28e37929331bfd29b6c85c157c5f047d90021351e24ae53c38de309e292cae5d6d14edc22d3b15b74228a42d4dd84d31c43f5afcd36928f697ed398424cb851103ea77a717afebaab73f1533e9b693f18726a84d8040bdf193d22e0c5e1722bf2ccc1bf8a9dac6823f09779f5c67ea26bd25fc46c888ccbbd5b874af537d3e956bf23e12543e7badc34551ff60f836cb6dcab", 0xb9, 0x7, 0x0, 0x1, r0}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x7, r0, &(0x7f0000000640)="8b29e790318b03bccd5166b7ed6a4fe8e72a3c378eef69506250839f0ba39a311329fa3d595b7c53", 0x28, 0x0, 0x0, 0x1, r0}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f00000006c0)="7acf6a3550242ad60f7f9c4bed9090295ffd1f11c412ac5dbdda0bf8e6598e73f753520a36b579ac45d72523e6c647d1e5a27ddf037940722c67dab79bec603298794f7a89af1a1eebce384efec68016136eb3054ec12a3e5fba9bee9fe3e556177048a0648a29866c727efb1c4898d116f3ed8419a40a3b00e9e165d49f846a8416fd31e235eb30745a5de66d3421fb5524c0e56e1749c6a625b650b4f8a786ee3361dd0e2796ddb81632bd06920bfee14994466defbb035fe7b3b240050f6ced09d1bacd5898321f265f103cbfae86d0e183ee728a30b70b3c9c", 0xdb, 0x8000, 0x0, 0x1, r0}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffff549, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) [ 883.254390] device bridge_slave_0 left promiscuous mode [ 883.260344] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:31:43 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1=0xe0000001, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0xff}, 0x0, @in=@multicast2=0xe0000002}}, 0xe8) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4000000000004e22, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) setsockopt(r0, 0x0, 0x2, &(0x7f0000000000)="9925299b4d44e5d61eb84fa47f0d97332ec1bf188aa0060aeee1a9b85f2a56f60122c856fdd611b8f42805fe207b203b298b3be23d8ab99b495d28e7afff76eafb02450fe0b7fc1ee3d9c69c890aa1d8c5f460d83129f9271600a56e21b0805b5ba911a64e41b4159e15c4b57151f1f15fbaf3aa1a3cecf065d0da97b517f435bcb0f369879ad67dac51a8132feb4390eaff65bf5caea26e8622242467eebfbad68fe8e634709dd64dfbf8d8a1f54121f9cf44798a14b962f61b793b04c3b5f24e6dabb4884564a1252db953bdf6c89e", 0xd0) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x400000000000003, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x4d3, 0x7, 0x6, 0x52, 0x1, 0x40000000}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_x_nat_t_type={0x1, 0x14, 0x8001}]}, 0x80}, 0x1}, 0x0) 2018/05/21 12:31:43 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001200)}]) 2018/05/21 12:31:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='timers\x00') io_setup(0xa0, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) [ 883.465497] team0 (unregistering): Port device team_slave_1 removed 2018/05/21 12:31:43 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300001600000000000000000000000400030000000000000000000000ecffffff000000000000000000000000000005000600000000000a0000000000000000000000000000000000000000000008000000000000000004000400000068000000000000000000000000000000000000040000000000000200010000000000000000000000000005000500000000000a00000000000000fe3ceb18d968cc212520b7c0688000000000000000000000"], 0xb0}, 0x1}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20000, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000040)) [ 883.517014] team0 (unregistering): Port device team_slave_0 removed [ 883.550281] bond0 (unregistering): Releasing backup interface bond_slave_1 2018/05/21 12:31:43 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x2, &(0x7f0000000800)=[&(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x7, r0, &(0x7f0000000640)="8b29e790318b03bccd5166b7ed6a4fe8e72a3c378eef69506250839f0ba39a311329fa3d595b7c53", 0x28, 0x0, 0x0, 0x1, r0}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f00000006c0)="7acf6a3550242ad60f7f9c4bed9090295ffd1f11c412ac5dbdda0bf8e6598e73f753520a36b579ac45d72523e6c647d1e5a27ddf037940722c67dab79bec603298794f7a89af1a1eebce384efec68016136eb3054ec12a3e5fba9bee9fe3e556177048a0648a29866c727efb1c4898d116f3ed8419a40a3b00e9e165d49f846a8416fd31e235eb30745a5de66d3421fb5524c0e56e1749c6a625b650b4f8a786ee3361dd0e2796ddb81632bd06920bfee14994466defbb035fe7b3b240050f6ced09d1bacd5898321f265f103cbfae86d0e183ee728a30b70b3c9c", 0xdb, 0x8000, 0x0, 0x1, r0}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffff549, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) [ 883.609897] bond0 (unregistering): Releasing backup interface bond_slave_0 2018/05/21 12:31:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) fcntl$setlease(r0, 0x400, 0x3) 2018/05/21 12:31:43 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001200)}]) [ 883.764338] bond0 (unregistering): Released all slaves [ 883.861621] IPVS: ftp: loaded support on port[0] = 21 [ 884.883634] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.890154] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.897720] device bridge_slave_0 entered promiscuous mode [ 884.935159] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.941611] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.949261] device bridge_slave_1 entered promiscuous mode [ 884.986233] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 885.023885] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 885.132773] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 885.172634] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 885.211189] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 885.218933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 885.353875] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 885.361317] team0: Port device team_slave_0 added [ 885.398720] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 885.406023] team0: Port device team_slave_1 added [ 885.443539] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 885.481628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 885.521456] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 885.528697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 885.537451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 885.571452] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 885.578705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 885.587434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 885.958954] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.965434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 885.972247] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.978677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 885.986565] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 886.095404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 887.376859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 887.507137] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 887.639328] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 887.645585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 887.653697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 887.780315] 8021q: adding VLAN 0 to HW filter on device team0 [ 888.560816] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 888.571902] syz-executor2 cpuset=syz2 mems_allowed=0 [ 888.577171] CPU: 0 PID: 19073 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 888.584581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 888.593948] Call Trace: [ 888.596563] dump_stack+0x185/0x1d0 [ 888.600211] dump_header+0x2cc/0x16f0 [ 888.604046] ? is_console_locked+0x29/0x50 [ 888.608324] ? kmsan_report+0x4f/0x260 [ 888.612259] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 888.617731] ? ___ratelimit+0x67f/0x760 [ 888.621723] oom_kill_process+0x341/0x2160 [ 888.625963] ? mem_cgroup_scan_tasks+0x289/0x610 [ 888.630729] out_of_memory+0x1700/0x1da0 [ 888.635002] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 888.640378] ? _cond_resched+0x8b/0xd0 [ 888.644288] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 888.649483] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 888.654864] pagefault_out_of_memory+0x57/0x110 [ 888.659548] mm_fault_error+0x490/0x810 [ 888.663555] __do_page_fault+0x1272/0x1a10 [ 888.667802] ? page_fault+0x1e/0x30 [ 888.671424] do_page_fault+0xd3/0x260 [ 888.675303] ? page_fault+0x8/0x30 [ 888.678835] page_fault+0x1e/0x30 [ 888.682283] RIP: 0033:0x4071d8 [ 888.685459] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 888.690832] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 888.698095] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 888.705357] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 888.712619] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 888.719879] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 888.727348] Task in /syz2 killed as a result of limit of /syz2 [ 888.733576] memory: usage 804kB, limit 0kB, failcnt 936 [ 888.739148] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 888.745954] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 888.752165] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 888.772133] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 888.780983] [19073] 0 19073 17553 8393 114688 0 0 syz-executor2 [ 888.789899] Memory cgroup out of memory: Kill process 19073 (syz-executor2) score 8421000 or sacrifice child [ 888.799988] Killed process 19073 (syz-executor2) total-vm:70212kB, anon-rss:80kB, file-rss:33492kB, shmem-rss:0kB [ 888.828243] oom_reaper: reaped process 19073 (syz-executor2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 2018/05/21 12:31:48 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7fffffff, 0x2000) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @broadcast=0xffffffff}, 0x10) 2018/05/21 12:31:48 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001200)}]) 2018/05/21 12:31:48 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(0xffffffffffffffff, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:31:48 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0xc0000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x800, 0x2, 'client0\x00', 0x6, "11b8348d6e732508", "50fb7877f00357e608a6bac7e960b3440afc08effa4ba7fee766b5ed45c74d57", 0x10000, 0x10000}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x8000) io_setup(0x8001, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000001200)}]) 2018/05/21 12:31:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00'}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001c00070f000000000000000007000000", @ANYBLOB="ffff02000a000200aaaaaeaaaaaa0000"], 0x2}, 0x1}, 0x0) 2018/05/21 12:31:48 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f00000006c0)="7acf6a3550242ad60f7f9c4bed9090295ffd1f11c412ac5dbdda0bf8e6598e73f753520a36b579ac45d72523e6c647d1e5a27ddf037940722c67dab79bec603298794f7a89af1a1eebce384efec68016136eb3054ec12a3e5fba9bee9fe3e556177048a0648a29866c727efb1c4898d116f3ed8419a40a3b00e9e165d49f846a8416fd31e235eb30745a5de66d3421fb5524c0e56e1749c6a625b650b4f8a786ee3361dd0e2796ddb81632bd06920bfee14994466defbb035fe7b3b240050f6ced09d1bacd5898321f265f103cbfae86d0e183ee728a30b70b3c9c", 0xdb, 0x8000, 0x0, 0x1, r0}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffff549, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) 2018/05/21 12:31:48 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) connect$inet6(r1, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000), 0x4) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') recvmmsg(r1, &(0x7f0000002340)=[{{&(0x7f0000000a40)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000002180), 0x0, &(0x7f0000002240)=""/202, 0xca}}], 0x1, 0x0, &(0x7f0000002400)={0x0, 0x989680}) accept$packet(0xffffffffffffff9c, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000002940)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000029c0)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002ac0)={@local, @multicast1}, &(0x7f0000002b00)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002dc0)={0x0, @rand_addr, @rand_addr}, &(0x7f0000002e00)=0xc) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000002e80)=0x14, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002ec0)={{{@in=@broadcast, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000002fc0)=0xe8) recvmsg(0xffffffffffffffff, &(0x7f00000032c0)={&(0x7f0000003000)=@hci, 0x80, &(0x7f0000003180), 0x0, &(0x7f00000031c0)=""/235, 0xeb}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000003300)={@empty, @dev}, &(0x7f0000003340)=0xc) semop(r0, &(0x7f0000000240)=[{0x1, 0x7fff, 0x1000}], 0x1) write(r1, &(0x7f00000002c0)="a5", 0x1) shutdown(0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000b80), 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={0x0, 0xfffffffffffffffd}, &(0x7f00000001c0)=0x8) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000300)={0x401, 0x4, 0x9, 0x9, 0x9, 0x1000}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000280)) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x8, 0x202, 0x2, 0x3, 0x20, 0x4, 0x1e40fe24, r4}, 0x20) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) 2018/05/21 12:31:48 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r0, &(0x7f0000000480)={&(0x7f0000000300)=@nfc_llcp, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)=""/13, 0xd}, {&(0x7f0000000380)=""/64, 0x40}, {&(0x7f00000003c0)=""/8, 0x8}], 0x3, &(0x7f0000000440)=""/16, 0x10, 0x8000}, 0x12042) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) r1 = shmget(0x2, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) migrate_pages(r2, 0x0, &(0x7f0000000140)=0xfffffffffffffffb, &(0x7f0000000200)=0x1f) shmctl$SHM_UNLOCK(r1, 0xc) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) [ 889.076485] device bridge_slave_1 left promiscuous mode [ 889.082437] bridge0: port 2(bridge_slave_1) entered disabled state 2018/05/21 12:31:49 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(0xffffffffffffffff, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) [ 889.128617] device bridge_slave_0 left promiscuous mode [ 889.134548] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:31:49 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02030000160000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000200010000000000008000000000000005000500000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0xb0}, 0x1}, 0x0) 2018/05/21 12:31:49 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f00000006c0)="7acf6a3550242ad60f7f9c4bed9090295ffd1f11c412ac5dbdda0bf8e6598e73f753520a36b579ac45d72523e6c647d1e5a27ddf037940722c67dab79bec603298794f7a89af1a1eebce384efec68016136eb3054ec12a3e5fba9bee9fe3e556177048a0648a29866c727efb1c4898d116f3ed8419a40a3b00e9e165d49f846a8416fd31e235eb30745a5de66d3421fb5524c0e56e1749c6a625b650b4f8a786ee3361dd0e2796ddb81632bd06920bfee14994466defbb035fe7b3b240050f6ced09d1bacd5898321f265f103cbfae86d0e183ee728a30b70b3c9c", 0xdb, 0x8000, 0x0, 0x1, r0}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffff549, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) 2018/05/21 12:31:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000080)=ANY=[@ANYBLOB="1d000080270000000000000008000000000000000800000004000000000200ee"]) io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:31:49 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) [ 889.361967] team0 (unregistering): Port device team_slave_1 removed 2018/05/21 12:31:49 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(0xffffffffffffffff, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) [ 889.408491] team0 (unregistering): Port device team_slave_0 removed 2018/05/21 12:31:49 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x0, &(0x7f0000000800)) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffff549, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) [ 889.494689] bond0 (unregistering): Releasing backup interface bond_slave_1 2018/05/21 12:31:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) socket$inet_udp(0x2, 0x2, 0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) [ 889.554145] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 889.726433] IPVS: ftp: loaded support on port[0] = 21 [ 889.727475] bond0 (unregistering): Released all slaves [ 890.690967] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.697438] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.704899] device bridge_slave_0 entered promiscuous mode [ 890.743531] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.749968] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.757453] device bridge_slave_1 entered promiscuous mode [ 890.794387] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 890.832502] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 890.941102] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 890.981332] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 891.020607] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 891.027859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 891.171170] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 891.178751] team0: Port device team_slave_0 added [ 891.215329] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 891.222624] team0: Port device team_slave_1 added [ 891.260000] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 891.300986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 891.340118] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 891.347430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 891.356138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 891.390731] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 891.398508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 891.406991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 891.786871] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.793310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 891.800218] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.806633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 891.814737] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 891.904217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 893.215356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 893.347517] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 893.477478] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 893.483765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 893.491996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 893.619674] 8021q: adding VLAN 0 to HW filter on device team0 [ 894.395889] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 894.406936] syz-executor2 cpuset=syz2 mems_allowed=0 [ 894.412184] CPU: 1 PID: 19398 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 894.419575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 894.428925] Call Trace: [ 894.431537] dump_stack+0x185/0x1d0 [ 894.435191] dump_header+0x2cc/0x16f0 [ 894.438993] ? is_console_locked+0x29/0x50 [ 894.443227] ? kmsan_report+0x4f/0x260 [ 894.447261] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 894.452737] ? ___ratelimit+0x67f/0x760 [ 894.456728] oom_kill_process+0x341/0x2160 [ 894.460961] ? mem_cgroup_scan_tasks+0x289/0x610 [ 894.465733] out_of_memory+0x1700/0x1da0 [ 894.469802] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 894.475195] ? _cond_resched+0x8b/0xd0 [ 894.479108] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 894.484329] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 894.489709] pagefault_out_of_memory+0x57/0x110 [ 894.494377] mm_fault_error+0x490/0x810 [ 894.498391] __do_page_fault+0x1272/0x1a10 [ 894.502637] ? page_fault+0x1e/0x30 [ 894.506260] do_page_fault+0xd3/0x260 [ 894.510071] ? page_fault+0x8/0x30 [ 894.513614] page_fault+0x1e/0x30 [ 894.517070] RIP: 0033:0x4071d8 [ 894.520264] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 894.525623] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 894.532886] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 894.540157] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 894.548068] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 894.555358] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 894.562812] Task in /syz2 killed as a result of limit of /syz2 [ 894.569050] memory: usage 804kB, limit 0kB, failcnt 944 [ 894.574541] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 894.581390] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 894.587776] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 894.607680] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 894.616443] [19398] 0 19398 17553 8392 114688 0 0 syz-executor2 [ 894.625360] Memory cgroup out of memory: Kill process 19398 (syz-executor2) score 8420000 or sacrifice child [ 894.636039] Killed process 19398 (syz-executor2) total-vm:70212kB, anon-rss:76kB, file-rss:33492kB, shmem-rss:0kB [ 894.664170] oom_reaper: reaped process 19398 (syz-executor2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 2018/05/21 12:31:54 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x0, &(0x7f0000000800)) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffff549, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) 2018/05/21 12:31:54 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) timer_create(0x0, &(0x7f0000001080)={0x0, 0x36, 0x0, @thr={&(0x7f0000000000)="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", &(0x7f0000001000)="d537f8bd13b71c978db8515e93a4a11bc20f10d04887ff979de7db2eb05cea68d43a6c266ef282ab4a0bf4ad61723482526b31720aab1b167aede00bcaba4db74705d8ed27ca9143c743937b880034fc7c0354a687794cec1b"}}, &(0x7f00000010c0)) 2018/05/21 12:31:54 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:31:54 executing program 7: openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x8000, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x401, 0x400600) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000300)={0x0, 0x20, 0x82, 0x0, 0x8000, 0x3, 0x4c36, 0x1, {0x0, @in={{0x2, 0x4e22, @rand_addr=0x4dc}}, 0x7, 0x100000000, 0x100, 0x6, 0x9}}, &(0x7f0000000140)=0xb0) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={r2, 0x7, 0x10001, 0x1}, 0x10) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/05/21 12:31:54 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xffff, 0x80) io_setup(0xc940, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x3ff, r0, &(0x7f0000000200)="23bbee3e9487f2971fd9e303774561232d01e225b61497c3edcc2112d6f357ae263fd3c9707131e3f2041ce73832aeb963a2bf93362dfb5d51df394fc7d9e66e9590ef9c63eb2710620e1badb2ef43bfa9e1f87b5b06f7cf1cb12fa5a2a42f47e77c719cdbf85407d2d688dc913eb9fbc73e5b4a3d4b3c3fb960eee9fc12d75f8fb2c01845c12f0529fff168735c6b22df8f40ce309b27c22767284ee15d1a8c22fd82051640993420f5bb412b08db6cd290", 0xb2, 0x2, 0x0, 0x1, r0}]) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r2, &(0x7f0000001200)}]) 2018/05/21 12:31:54 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) 2018/05/21 12:31:54 executing program 2 (fault-call:2 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:31:54 executing program 5: unshare(0x2000400) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10}, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x440001, 0x0) 2018/05/21 12:31:54 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x1000, 0xff}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e21, 0x6, @local={0xfe, 0x80, [], 0xaa}, 0x6}}, 0x5, 0x5, 0xffffffff, 0x7f}, &(0x7f0000000280)=0x98) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {}, {}]}) ioctl$int_in(r0, 0x80000080045017, &(0x7f0000000000)) 2018/05/21 12:31:55 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40000, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="02030000160000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000000000000000000000100000ff00000000000000002695f178269cbf32e99fbbf82dc03ff1cd349a1cb71e82f2cb14864e9234810e7d88c6b080ae83ff5f6b1a157d32e0c62f9b34ffcbdd5300d40bc78e13c5c6e7060a265d13576cc3276496c4eb3e8797b57ae0b61a0a38560365e67d9003d3560263ef365b3ccd1b5f5a597f69e15d1c746c7a6f17d905b8c64874f53b29a16ebf751666fe1fb9bc6c3e8dad273742aa3fed22"], 0xb0}, 0x1}, 0x0) [ 894.975426] device bridge_slave_1 left promiscuous mode [ 894.981345] bridge0: port 2(bridge_slave_1) entered disabled state 2018/05/21 12:31:55 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x0, &(0x7f0000000800)) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffff549, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) [ 895.057618] device bridge_slave_0 left promiscuous mode [ 895.063489] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.201808] team0 (unregistering): Port device team_slave_1 removed 2018/05/21 12:31:55 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x2000000000000123, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:31:55 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x3, r0, &(0x7f00000006c0)="7acf6a3550242ad60f7f9c4bed9090295ffd1f11c412ac5dbdda0bf8e6598e73f753520a36b579ac45d72523e6c647d1e5a27ddf037940722c67dab79bec603298794f7a89af1a1eebce384efec68016136eb3054ec12a3e5fba9bee9fe3e556177048a0648a29866c727efb1c4898d116f3ed8419a40a3b00e9e165d49f846a8416fd31e235eb30745a5de66d3421fb5524c0e56e1749c6a625b650b4f8a786ee3361dd0e2796ddb81632bd06920bfee14994466defbb035fe7b3b240050f6ced09d1bacd5898321f265f103cbfae86d0e183ee728a30b70b3c9c", 0xdb, 0x8000, 0x0, 0x1, r0}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffff549, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) 2018/05/21 12:31:55 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000000)={0x2, 0x3, 0x400, 0x7, 0x21e, 0x0, 0x70bd2b, 0x25dfdbff, [@sadb_x_sec_ctx={0xb, 0x18, 0x10001, 0x7, 0x4a, "7d9d3801c02f0977ac12c38284fcc0adb69274d277473a06eac569e0ca4e6480292b94e055e6cf8617e4d4f9977e3a77d9afde1506fed14a7275a44091962b01c3b3bc4570f0db5ef424"}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd28, 0x3500}, @sadb_x_sec_ctx={0x201, 0x18, 0x9, 0x2, 0x1000, "912cfa32e8f973d0d06912cc2c9f7f0c84635b3289fca37b49b2d831f5722ff1926c46bcfc172c5de2283386590bf97a4044ee14ac1f39d840796af7a5f77e5b251eb007ecb97c807343da07730609ca9dac581928d4d5f381e0019ebd21493ad590982a42ab812e2bd8feaa789829f0ee815a0092caaa200f8dfa31d6c53233ffc050192403cbdde81db2fdff16c2218415f4ea01a3b6280e872e8e6a639080a977dcfb4408915554994de75bd63fb6649d470cd07efe1a736a152f16349b2153499e88d1a6981d168c9ff2c3337856097be9ea6ceae45bf92b81ebb1563c30f1f7d89c03eeeb7d4d8837336eda7d241f0afa7ee50c8e371389ac73d480aaf199b536f0d73961f85aaffed8d804d71a135f61944fa017f5c39b7d981bbfd3011a02eb21e30aaa277ba81df24773a510b8c2087abcc7f57f5db734fa146dd0c34bf42847e29ee520de4aa0c70afd64428289b474f32b401336ee2490227e3f60ce0283d5a92ca82cf6e4d038f9f9ee659930ea179424099da298536dc1519de1b736f54f3cbb6c18e084a36030f67fee9f3e4efe405c46761cf7604e19d697b2476a666d848390d8e310985316d66363221bc5a9efe6f2ff64a37aa991ed72c24ffe9586beb8d94fbd606ef01d0bf17ba5a2dadccae822f11df7e0999f1a61a0eaf09ee9c60e38837ac8226b8727005a37b4442219a126ec3e7d92afe0809dffa91bcba834788061af5ac4b35d99ea8bbce719b61a03cd424d417f84efbcd9d0b1929ad86eff7e2cfcc26dc80b91631492b12dece596c6f0986b837ce76b5fb38e32526e817a8e9210c25816a110835f654b533b0c1bc6ac7ffb2a77dfe51ef56e7dbb9d6e66fb107c49bb502fa18ac3c329350dd24da8f1dece16c5aa29eb81d2e0ece62fc082ebc6d61eac78baccdd26a54aa26e7694ac924b7b4958af52a40c4f463ab7bdddb9b9f6ffd35523a1355ea0838e41597611b9e4ae5674601039f4ba45085570151ed8624df241bade6143a9ff275069d9e8dcb79145b64f3ef13cf6bbffe095c60a0fd0f4dfb0613ce5b6dfdb9f8c7d37460aa9578cce17a7aad113b0882aabf67a868c65ee861f37029cf0279c263392f4ccc48adbe8f9ba3dd45a70ea5db221e4cfed3343b86813e34c9b7c06c2525a78587dae1f1e48c1540c6a4d30dad0141479d09ff25764907ebd89b1387a10b1a11cbd352c974c011c149b3c2b746e14215c7dd3027cb7ff3155cf120b3e865cbfacfae2d60f03a3a5c5ae4b18177d752399fcc15d395039a343db5aa9ae243fdfa3fad13319487e17d24eed2d40549773f732128646bcf1d52ec1c43966f7d014a8de87225194836f37e2752dbbe9856cf6891ca85063c6aa69dfd2da2c5e0eb8b62bcf0e44df9c959738f93ce3bd82b96d8018c13b363edd308af5fc5c260ce2026f1f0eb64713844f1c4c60221c551a57a3fc6e62317bc9c597bc9f6f1daa5a1d0035f6dbf9e186013177e65400834f543ab5a7e6d97460e0af373ad37fa43fdcaf87d35e1908fdd3ea844315fad5d5417be835461ea2f809508d67d201bd52910c7f7f73f463399a8832e6b0fa7161fce07093c681d7bd032d51562f42b06162db02c3be5688b0c3efa8800abdb3588119c2ed6873183556f39b31aede6e0d8e1d79a8c89803c8d69649dc233cb750a2fb1173439da7e363268afa480700166e21aaf26b65b25f52ea5f32a062084d5d632fb7c4dc5846996cef487b63db643a0c4fc7d13be4988a56c6029aae4ad48ed5d748c910bdc23be2db68b277691404e9ca70718ddb4b2d76c5acb939dfc5d902427431577d7224d3ab8db9982e0fff06fa71cf736a70840b9f1110843c82bd6bf377b0ba5a24300059c74f2de86007e67f6bf624cbb1569cae17d0998ab30fd08f37359bfebedcaf8a10c04c41e07e9807b74dedc8740bb9d8b812c87b43dff6fa069eaaf7002ac224591942ee3d2686bb588c80bfac187418af0950277f4f961eba2bd239d54c40f66ad265350bd62f38e03629c7249fa3247602c2f2e8dd2d0fd00c5817c05188cec4edd5ded30dd828a9bf45b9bc7e9f51ff685d285c94422327a96a97072f64f59db8fc21b4473f3a3fbb67811df5e58406c6f0867460fb6989170adf2773e5ff7427da8eedcf5f08f19147288f11290f1cbc49eb6047176f112d6263090df1b02ba48a4e87a361249408b5c7b4549a0166773f0424981bae4ad4951ed34f56e5cc701e3cf2ae8d7938574d50f15d2a3d3c84d1e756e020a8bba13502fb3c4b980a3ddc7c8d222edf457f481f4edb290fac2d166698837b076ae8c9b68e0bc85848d5bd23994415ecd6ff8031f832a1a879599c924378db2da23201e19f5b4faeeb2fad8f032ed7697dd334cf0dc0d0840b65a83a7687be657effd822d0742d0af677bf1584f45cad83c57092b149836e7ebf5e36dab47e6bee2b9703bde9d0f6804218be8b389705e27d311b5bf7d7e4005a6b55a3cd0a2da2b2d39cd811901633e534fd1491d9a432221ad2b6bdbdc222b1de2a31e9e1d34b8e392b8bb69c235823bd605982f209db76dfc1b5f36d23508dadd7acebd318e87161fc612044e37cc952a43f30e8e37f86b92da82a15587f7bbaf3cbc786d5434914108bd43892efb4eee6ec3fab9119497c81307101f852441da2568f65a2119dfcbb442286b6c9455c26659f7decd6de53393b99abda68cc113fe104388c9d9059a562f98b69f8a742fc9a29f74724c7feb2383b0a677f84b9619fd4be0e9e18d2f2acbc4ae14557a788b80f8e75b26bc74d2d894ce51dbff203f47aef634c2ebc70bd736edc88c1ad9c5c6170d7f86fea431b31018000d169980e21575130b5b606679bed41b76590762bd306eb63cc79f73c7b350618f6d71cda42a1aab08a39db243e8b81aff78fb23809128a929148f5aa2b079b8bb54c1af59ca619b3450ee7f11ae80adb4daf611feb2512d44ff37ff146a54ba96d4fc7043b9a71fb8a66e0a18e298a7f5a0aa7c32bd077678b72a422b4e3544e399f4f2e04aebcbe7bac868e21222d9ddd92a546b7b4faabc665b010de24ec2e094a80be814dc8c16bfc2789917f774a870904ed6e7d71e4ebe04b028c36c8eeca8e98ddbbd1b2e95acaf9ee84d414a45b004783cdb3038ee73721ced5ccf70e5cbe400b3416f95e7b225658f6e295badae28b480967c562cc5fb4a25e1ce7362554f114388e130af9518a9f6be0ecafad606dc6e58ad4256484c3c63820f8a75f9f07feea3884ea3cee4a6b69862b7ed80b5b1137f0246f201dea24a8ad0a400e2e6a67b77501b52a9406de7a2188dda474d8528ca18896e46169dec8ffe86547a2522f2a19c7c4a7eccb90825dd830dd6a6458dedfcc93165d1c9e5f514b3b5e843b91a4fe1c06a0b6fe5abed73c780c9af9d1200e89339e3d6179fb4472bb4ab53e9019d09d6b0cc3c7d154c1a1b681ad89b1a765cc4e7a99a5519feafff3047ad4cc7444c1baf8fb6c1f3b1e267cdcb07bd7884ceafb66dbfa6bf07c2759c2fd56d7e970c4a18ba27c44548c953c6b8224df8920ecd7b2b55def04d04b61cc1ac38f80960556bb71c2ae2dc8148e7821ee1a0b7fb3da08ac89c6a9d25f71690eff4284f429ecf7573180101965504ee758168c60eaf0b2891cd4b84ea4ea70db00d6009a3c522b90da5e938535cbeeaa8bcbd78e6e70a06db038e0fb2159473c82faa9ded23d4debc905cb0ab64ef6bece2535157c943d9e2847c58975ce08fa45a7f9889057cdf1815b29e10043cb11bd45a32e91ad4f956029625a63f1c5269095773ac1cf41852e7b620620c06aacd52ab62ba4ec5e8cb40e769f6b0e0648b1c54c196057b45b3b337a296a59fdac3dff9cebab4c2c9d1e2003906d601c2cdf7f86440b66a7ec6a1b8d1e1a04eb68440e8be31b8b073bb35a6841ba9e86ec41a62c51e257d3d93eef6e7c1bd26ad008320df17af03607744ee4f6b6df1d11ffa9ebbe690da4029b0d9bbd77bb72b092cdf5888210241925074c0728c10e8ef38c2c86be661308e212b64d097ecdfc240a3dc6fd09b2e033397b7abb5a1fdfbfc35aeb9967c22b0c1c18cdaacfbab50368847e0337c210b10125c4b116eefdbcb85dba00b982880a92cef1074dda640c7d971ef8b175b816290834220f72367874bba4e4bb425574db4beb3707659e781c3700d1a631aa63f67a4b6c6762bddcff447eef4bd9291c376b4fd048796aa090a519ad76b4d1f99a85c665c9de393de2fdb8f24b022af8dcf83f0979fb16fd008e1078a9a30966656000d965b92af85dde284f284ece0d071c0af73c4c109ee80bf9a05df1782bddda6e6f1f4d3f9d7c76ceac73eca326af6d0b73939098e888f6d6bacfe89f6e8b8ac2173ab9c8877b3dba2a0db2a05d7a93e2449343326e7cad195e701b71f8e6e301afd598918ca5a0421cb87b748e60018f08347c0efacb430dc5a2144bf2b6ef783f13debaf7885dae6bfb8ff490c21b8a1400fe4613481848aab2429e5cc3e072dc7829da3a0c18d47124414f17a9ae3dff11b9fd01500329158529f38d55d66c457f44e89822fb0a3e1e91fab02f003199622530e21215c1122dea0271e1c1e11ed843bf129a1935707a68352c237b860a31da9b7ee1108e6642e063535a365c30cea08bac753a50e0b92ed285c86c81c043118e55af888315aeb403dd84a78718fd84fdd5ea016c5055b82caca50744c76ccc8b3e3968211bd8100ac3293fda6b8fbf6f186fcd013d62bc53bbfcaaa4c703a2fdd7125f5946324965fbc6bc4e81ca7f84d89ace9070324a5a606762fed31aa6a1c49a971b3353c0efc37357b86f26457cb8e689ad1b6aa4af588d746734b1c47187ed11dfbe8f14b5fbddca444c228ff1d340cfd7aebebb25b01211eaf0a9754de478d315dd2404758892236a981ff178c15c3b9d91d7b03510a622813c003447511da0fe41012e43fcd5f3b2478760e1e940cc157a94b5f5943fd3c92ff83c4f3caab911e6e6327e5f34579e957c6752103985f54aa997553f9f466e63966c19a8e3760bf6116492c90014d9e92301ee8e992d78cfeed8d13b48d477d09268248e7b03aee30426b1c6316c6d0da5a5096d3cf25b6d1e0309e6bc69485466a5bd6fa78045abe16c23b81bfc8309802d9b5bb53bae819400576d18d0b48acddb1d6de4936eed61aa75383ad5d21d2159431d3a69438e1ff7e69f307eca4bffbe2e04aebd447c0409123be3508ba1ed7a4bedc5a73bed7130722f8ebf0ed89055fd6e81592d48ca2fb30c9414c0bf893b02f285bbf0ce589993d68a222c9e152deb43046a003fa522a3ecff1e61941bba2bcfaecb0bf9d0f5bf06186008b246ce742a018877c8bd3211b975b1af4258d3775c557e2b35283549280e7257af4f7a68a214629a7a739c25aa160b8ceda87f053ba3edb42a880c14c1ca31ad3c0f54e300a35a40a5b9f149b3fc29f25013517abfa7b074294b3a53d542b8779ee84024ea7dcb599d4e8157641d189a17f5f25132aaf760fed9b3f1ec259dbdc71b0f834ae338505c3697dddb14a0e9b10ecbb1086e50e4c3a68e571b3f7f9c3fe9ac987d855c841c9f29ba10df0bea590b6ed79dd1b0faa63957c50ee587188e43eb515e4c1eed6d37d72c38ecdd40d958142e983c12ca5f92248f1a6e92e8db662bff9d89a0ee448e485c072d429153e391e6d1cdb1856be3557b3160665313588c4218e08e899b0e85f19dd15dac2b4137a2b4fad8373583e2e324ca5fa258b7a6b8ef2f6a5c4f399dbedc4c"}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e21, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x4}, @in={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}, @sadb_lifetime={0x4, 0x2, 0xff, 0x1, 0x6, 0x2}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d3}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e22}]}, 0x10f0}, 0x1}, 0x10) [ 895.264523] team0 (unregistering): Port device team_slave_0 removed [ 895.296208] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 895.366247] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 895.496709] IPVS: ftp: loaded support on port[0] = 21 [ 895.517610] bond0 (unregistering): Released all slaves 2018/05/21 12:31:55 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000580)="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") io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e22, @multicast1=0xe0000001}}, [0x0, 0x3f, 0x81, 0x8, 0x40, 0x7f, 0x1, 0x4, 0xfffffffffffffffb, 0x4, 0x1839, 0xfffffffffffeffff, 0x2, 0x401, 0x5]}, &(0x7f0000000080)=0x100) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={r2, 0x1}, 0xc) [ 896.584666] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.591151] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.598677] device bridge_slave_0 entered promiscuous mode [ 896.636016] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.642461] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.649849] device bridge_slave_1 entered promiscuous mode [ 896.686675] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 896.723874] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 896.831045] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 896.871424] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 897.041572] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 897.048860] team0: Port device team_slave_0 added [ 897.085553] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 897.092871] team0: Port device team_slave_1 added [ 897.129839] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 897.170672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 897.209888] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 897.217259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 897.226253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 897.259809] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 897.267148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 897.275696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 897.653006] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.659437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 897.666252] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.672659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 897.680468] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 897.744230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 899.077235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 899.209448] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 899.341720] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 899.348007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 899.356448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 899.482750] 8021q: adding VLAN 0 to HW filter on device team0 [ 900.265386] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 900.276601] syz-executor2 cpuset=syz2 mems_allowed=0 [ 900.281926] CPU: 0 PID: 19703 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 900.289436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 900.298817] Call Trace: [ 900.301454] dump_stack+0x185/0x1d0 [ 900.305121] dump_header+0x2cc/0x16f0 [ 900.308956] ? is_console_locked+0x29/0x50 [ 900.313237] ? kmsan_report+0x4f/0x260 [ 900.317174] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 900.322705] ? ___ratelimit+0x67f/0x760 [ 900.326718] oom_kill_process+0x341/0x2160 [ 900.330988] ? mem_cgroup_scan_tasks+0x289/0x610 [ 900.335804] out_of_memory+0x1700/0x1da0 [ 900.340004] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 900.345435] ? _cond_resched+0x8b/0xd0 [ 900.350179] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 900.355412] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 900.360834] pagefault_out_of_memory+0x57/0x110 [ 900.365543] mm_fault_error+0x490/0x810 [ 900.369580] __do_page_fault+0x1272/0x1a10 [ 900.373865] ? page_fault+0x1e/0x30 [ 900.377529] do_page_fault+0xd3/0x260 [ 900.381364] ? page_fault+0x8/0x30 [ 900.384942] page_fault+0x1e/0x30 [ 900.388416] RIP: 0033:0x4071d8 [ 900.391617] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 900.397011] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 900.404300] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 900.411592] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 900.418881] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 900.426187] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 900.434101] Task in /syz2 killed as a result of limit of /syz2 [ 900.440235] memory: usage 804kB, limit 0kB, failcnt 952 [ 900.445692] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 900.452534] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 900.458758] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 900.478722] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 900.487597] [19703] 0 19703 17553 8392 118784 0 0 syz-executor2 [ 900.496563] Memory cgroup out of memory: Kill process 19703 (syz-executor2) score 8421000 or sacrifice child [ 900.506659] Killed process 19703 (syz-executor2) total-vm:70212kB, anon-rss:76kB, file-rss:33492kB, shmem-rss:0kB [ 900.548058] oom_reaper: reaped process 19703 (syz-executor2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 2018/05/21 12:32:00 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x400000, 0x0) getsockopt$nfc_llcp(r1, 0x118, 0x3, &(0x7f0000000300)=""/141, 0xfffffffffffffe31) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000200)=@pptp={0x18, 0x2, {0x1, @broadcast=0xffffffff}}, 0x80) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cpuset\x00') ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000040)={{0x26, 0xdad, 0x400, 0x4, 0x3, 0xaa8e}, 0xeb58, 0x1, 0x9}) 2018/05/21 12:32:00 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000006c0)="7acf6a3550242ad60f7f9c4bed9090295ffd1f11c412ac5dbdda0bf8e6598e73f753520a36b579ac45d72523e6c647d1e5a27ddf037940722c67dab79bec603298794f7a89af1a1eebce384efec68016136eb3054ec12a3e5fba9bee9fe3e556177048a0648a29866c727efb1c4898d116f3ed8419a40a3b00e9e165d49f846a8416fd31e235eb30745a5de66d3421fb5524c0e56e1749c6a625b650b4f8a786ee3361dd0e2796ddb81632bd06920bfee14994466defbb035fe7b3b240050f6ced09d1bacd5898321f265f103cbfae86d0e183ee728a30b70b3c9c", 0xdb, 0x8000, 0x0, 0x1, r0}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffff549, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) 2018/05/21 12:32:00 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:32:00 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40000, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0xb0}, 0x1}, 0x0) 2018/05/21 12:32:00 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r1, &(0x7f00000000c0)=""/81, 0x51) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x1}, {0x3, 0x0, 0x1000}], 0x1c7, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) 2018/05/21 12:32:00 executing program 2 (fault-call:2 fault-nth:1): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:32:00 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6a, 0x4100) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @loopback=0x7f000001}}, 0x3, 0x4}, &(0x7f00000001c0)=0x90) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000240)=@int=0x20, 0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x4, 0x4}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r2, 0xfa59}, 0x8) 2018/05/21 12:32:00 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x2, @multicast1=0xe0000001}}, 0x1e) 2018/05/21 12:32:00 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0xc000, 0x0) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f00000000c0)={0x8001, 0x80000000}) fcntl$setown(r1, 0x8, r2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) 2018/05/21 12:32:00 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) eventfd(0x1ff) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200), 0x0, 0x0, 0x0, 0x0, r0}]) [ 900.806505] device bridge_slave_1 left promiscuous mode [ 900.812376] bridge0: port 2(bridge_slave_1) entered disabled state 2018/05/21 12:32:00 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) close(r0) r2 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000000c0)={0x200, {{0x2, 0x4e24, @multicast2=0xe0000002}}, {{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x108) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r3 = socket(0xa, 0x2, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'nr0\x00', 0xe13aefcdb390371b}) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) pipe(&(0x7f0000000040)) 2018/05/21 12:32:00 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f00000006c0)="7acf6a3550242ad60f7f9c4bed9090295ffd1f11c412ac5dbdda0bf8e6598e73f753520a36b579ac45d72523e6c647d1e5a27ddf037940722c67dab79bec603298794f7a89af1a1eebce384efec68016136eb3054ec12a3e5fba9bee9fe3e556177048a0648a29866c727efb1c4898d116f3ed8419a40a3b00e9e165d49f846a8416fd31e235eb30745a5de66d3421fb5524c0e56e1749c6a625b650b4f8a786ee3361dd0e2796ddb81632bd06920bfee14994466defbb035fe7b3b240050f6ced09d1bacd5898321f265f103cbfae86d0e183ee728a30b70b3c9c", 0xdb, 0x8000, 0x0, 0x1, r0}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffff549, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) [ 900.869552] device bridge_slave_0 left promiscuous mode [ 900.875368] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:32:00 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000100)={r2}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)=0x8001) socketpair(0xa, 0x80805, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000040)={0xb, 0x3f, 0x9, 0x1000, 0xce5, 0x1, 0x1e07, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x200, 0xffe000000000000, 0xfffffffffffffbff}) [ 901.102667] team0 (unregistering): Port device team_slave_1 removed 2018/05/21 12:32:01 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1, r0}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffff549, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) 2018/05/21 12:32:01 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f00000001c0)={{0x2, 0x9e0557686488b6d1, 0x200000000, 0x1, 0x401}, 0x2, 0xb4}) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x6, 0x1) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) [ 901.149528] team0 (unregistering): Port device team_slave_0 removed [ 901.209989] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 901.273635] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 901.422839] bond0 (unregistering): Released all slaves [ 901.426038] IPVS: ftp: loaded support on port[0] = 21 [ 902.448234] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.454676] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.462322] device bridge_slave_0 entered promiscuous mode [ 902.499885] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.506322] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.513692] device bridge_slave_1 entered promiscuous mode [ 902.550454] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 902.588201] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 902.695406] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 902.735360] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 902.904021] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 902.911703] team0: Port device team_slave_0 added [ 902.948250] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 902.955816] team0: Port device team_slave_1 added [ 902.993127] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 903.032896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 903.071699] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 903.078974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 903.088464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 903.121015] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 903.128523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 903.137785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 903.501756] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.508214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 903.514981] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.521385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 903.529382] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 903.615229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 904.903210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 905.036046] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 905.168005] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 905.174616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 905.182786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 905.307944] 8021q: adding VLAN 0 to HW filter on device team0 [ 906.094626] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 906.105832] syz-executor2 cpuset=syz2 mems_allowed=0 [ 906.111184] CPU: 1 PID: 20035 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 906.118570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 906.127930] Call Trace: [ 906.130536] dump_stack+0x185/0x1d0 [ 906.134174] dump_header+0x2cc/0x16f0 [ 906.138001] ? is_console_locked+0x29/0x50 [ 906.142239] ? kmsan_report+0x4f/0x260 [ 906.146160] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 906.151643] ? ___ratelimit+0x67f/0x760 [ 906.155636] oom_kill_process+0x341/0x2160 [ 906.159883] ? mem_cgroup_scan_tasks+0x289/0x610 [ 906.164677] out_of_memory+0x1700/0x1da0 [ 906.168770] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 906.174163] ? _cond_resched+0x8b/0xd0 [ 906.178087] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 906.183297] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 906.188691] pagefault_out_of_memory+0x57/0x110 [ 906.193386] mm_fault_error+0x490/0x810 [ 906.197383] __do_page_fault+0x1272/0x1a10 [ 906.201627] ? page_fault+0x1e/0x30 [ 906.205253] do_page_fault+0xd3/0x260 [ 906.209064] ? page_fault+0x8/0x30 [ 906.212615] page_fault+0x1e/0x30 [ 906.216072] RIP: 0033:0x4071d8 [ 906.219266] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 906.224629] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 906.231893] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 906.239157] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 906.246422] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 906.253690] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 906.261162] Task in /syz2 killed as a result of limit of /syz2 [ 906.267396] memory: usage 804kB, limit 0kB, failcnt 960 [ 906.272855] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 906.279697] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 906.285917] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 906.305904] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 906.314755] [20035] 0 20035 17553 8393 114688 0 0 syz-executor2 [ 906.323665] Memory cgroup out of memory: Kill process 20035 (syz-executor2) score 8421000 or sacrifice child [ 906.333754] Killed process 20035 (syz-executor2) total-vm:70212kB, anon-rss:80kB, file-rss:33492kB, shmem-rss:0kB [ 906.361598] oom_reaper: reaped process 20035 (syz-executor2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 2018/05/21 12:32:06 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) close(r0) r2 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000000c0)={0x200, {{0x2, 0x4e24, @multicast2=0xe0000002}}, {{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x108) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r3 = socket(0xa, 0x2, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'nr0\x00', 0xe13aefcdb390371b}) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) pipe(&(0x7f0000000040)) 2018/05/21 12:32:06 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02030000160000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000040004000000000000000000000000000000000000000000000000000000000002ff010000000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0x4c}, 0x1}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40001, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x9], 0x1, 0x2, 0x7, 0x7, 0x4, 0x6, {0x800, 0x226, 0xe7d, 0x8c7, 0x6, 0x3, 0x3, 0x4, 0x9, 0x7, 0x9, 0xfffffffffffffc00, 0x80000001, 0x4, "71f7a6c51618e47a0475eb90335bdd8ebf5777f3ee4dfff3275e4e813f2105fa"}}) 2018/05/21 12:32:06 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x6, &(0x7f00000001c0)=0x1) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:32:06 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:32:06 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000400)={0x0, 0xffffffffffffffc1, 0x16e5}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000480)={r2, 0x6}, &(0x7f00000004c0)=0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00', r3}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', r3}) getsockopt$inet6_tcp_buf(r1, 0x6, 0xf, &(0x7f0000000500)=""/244, &(0x7f0000000600)=0xf4) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/05/21 12:32:06 executing program 2 (fault-call:2 fault-nth:2): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:32:06 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x20802) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000040)={0x303, 0x33}, 0x4) accept$alg(r1, 0x0, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) 2018/05/21 12:32:06 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x1, r0}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffff549, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) 2018/05/21 12:32:06 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x2080, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000100)={0x1, 0x58e, 0x89, 0x9, 0x8c, 0xfffffffffffffff9, 0x6, 0x1ff, 0x80, 0xffffffffffffff09}) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) 2018/05/21 12:32:06 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000280)={0xffffffffffffa9c2, 0x1, 0x8000, 0xc597, 0x8, 0x1, 0x7fff, 0x5, 0x0}, &(0x7f00000002c0)=0x20) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000300)=@sack_info={r1, 0x5, 0x9}, &(0x7f0000000340)=0xc) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r2, &(0x7f0000001200)}]) 2018/05/21 12:32:06 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f00000006c0)="7acf6a3550242ad60f7f9c4bed9090295ffd1f11c412ac5dbdda0bf8e6598e73f753520a36b579ac45d72523e6c647d1e5a27ddf037940722c67dab79bec603298794f7a89af1a1eebce384efec68016136eb3054ec12a3e5fba9bee9fe3e556177048a0648a29866c727efb1c4898d116f3ed8419a40a3b00e9e165d49f846a8416fd31e235eb30745a5de66d3421fb5524c0e56e1749c6a625b650b4f8a786ee3361dd0e2796ddb81632bd06920bfee14994466defbb035fe7b3b240050f6ced09d1bacd5898321f265f103cbfae86d0e183ee728a30b70b3c9c", 0xdb, 0x8000, 0x0, 0x1, r0}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffff549, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) 2018/05/21 12:32:06 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x0, r0}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffff549, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) [ 906.697188] device bridge_slave_1 left promiscuous mode [ 906.703250] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.793392] device bridge_slave_0 left promiscuous mode [ 906.799517] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:32:06 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000006c0)='/dev/usbmon#\x00', 0x7, 0x100) getsockopt$sock_int(r0, 0x1, 0x3b, &(0x7f0000000700), &(0x7f0000000740)=0x4) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x4, &(0x7f0000000000)=0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x498, 0x298, 0x298, 0x0, 0x3b0, 0x3b0, 0x3b0, 0x4, &(0x7f0000000080), {[{{@uncond, 0xf0, 0x160}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7f, 0x4, 0x3, 0x0, 0x0, "b193dfc15cad9ea119656965909bf242632d2ba7c7261d0ca84264e5f628588ee50bff4bee51dae7a5f53c9869fc75e9cf56379926b550b7abadc1806c6c4f7b"}}}, {{@arp={@empty, @rand_addr=0x3, 0xffffffff, 0x0, @empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}, @empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}, 0x0, 0x9, 0x3, 0x584, 0x3ff, 0x7fffffff, 'syz_tun\x00', 'ip6tnl0\x00', {}, {0xff}, 0x0, 0x8}, 0xf0, 0x138}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00', 0x8}}}, {{@uncond, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4e8) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000001200)}]) 2018/05/21 12:32:06 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffff549, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) 2018/05/21 12:32:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) getsockopt$nfc_llcp(r0, 0x118, 0x3, &(0x7f0000000080)=""/150, 0x96) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xb0}, 0x1}, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)) [ 907.012451] team0 (unregistering): Port device team_slave_1 removed [ 907.079544] team0 (unregistering): Port device team_slave_0 removed [ 907.109025] bond0 (unregistering): Releasing backup interface bond_slave_1 2018/05/21 12:32:07 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f00005d8000/0x1000)=nil, 0x1000, 0x0, 0x80000000032, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 2018/05/21 12:32:07 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x20000, 0x0) [ 907.134194] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 907.295815] bond0 (unregistering): Released all slaves [ 907.374605] IPVS: ftp: loaded support on port[0] = 21 [ 908.278263] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.284747] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.292393] device bridge_slave_0 entered promiscuous mode [ 908.329257] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.335706] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.343149] device bridge_slave_1 entered promiscuous mode [ 908.379410] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 908.416494] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 908.522954] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 908.563768] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 908.733710] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 908.740964] team0: Port device team_slave_0 added [ 908.777254] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 908.784805] team0: Port device team_slave_1 added [ 908.821671] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 908.858735] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 908.897003] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 908.904509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 908.913755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 908.946584] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 908.953848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 908.963008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 909.336185] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.342623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 909.349392] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.355792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.363453] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 909.439320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 910.740595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 910.871321] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 910.997853] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 911.004219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 911.011742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 911.138987] 8021q: adding VLAN 0 to HW filter on device team0 [ 911.904362] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 911.915453] syz-executor2 cpuset=syz2 mems_allowed=0 [ 911.920757] CPU: 1 PID: 20362 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 911.928130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 911.937477] Call Trace: [ 911.940080] dump_stack+0x185/0x1d0 [ 911.943723] dump_header+0x2cc/0x16f0 [ 911.947622] ? is_console_locked+0x29/0x50 [ 911.951856] ? kmsan_report+0x4f/0x260 [ 911.955766] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 911.961229] ? ___ratelimit+0x67f/0x760 [ 911.965212] oom_kill_process+0x341/0x2160 [ 911.969445] ? mem_cgroup_scan_tasks+0x289/0x610 [ 911.974217] out_of_memory+0x1700/0x1da0 [ 911.978285] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 911.983676] ? _cond_resched+0x8b/0xd0 [ 911.987583] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 911.992769] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 911.998144] pagefault_out_of_memory+0x57/0x110 [ 912.002819] mm_fault_error+0x490/0x810 [ 912.006807] __do_page_fault+0x1272/0x1a10 [ 912.011065] ? page_fault+0x1e/0x30 [ 912.014694] do_page_fault+0xd3/0x260 [ 912.018500] ? page_fault+0x8/0x30 [ 912.022041] page_fault+0x1e/0x30 [ 912.025499] RIP: 0033:0x4071d8 [ 912.028678] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 912.034048] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 912.041322] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 912.048581] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 912.055850] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 912.063117] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 912.071136] Task in /syz2 killed as a result of limit of /syz2 [ 912.077227] memory: usage 804kB, limit 0kB, failcnt 968 [ 912.082677] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 912.089527] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 912.095821] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 912.115786] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 912.124627] [20362] 0 20362 17553 8393 118784 0 0 syz-executor2 [ 912.133549] Memory cgroup out of memory: Kill process 20362 (syz-executor2) score 8422000 or sacrifice child [ 912.143635] Killed process 20362 (syz-executor2) total-vm:70212kB, anon-rss:80kB, file-rss:33492kB, shmem-rss:0kB 2018/05/21 12:32:12 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) 2018/05/21 12:32:12 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1}]) io_submit(0x0, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffff549, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) 2018/05/21 12:32:12 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl(r1, 0x556b7c56, &(0x7f0000000040)="433ecbe940e090ab179c7880c6d55534e716b523445082ea12e57587aafb58266dfff8a4f4eff00fadf274bd80a9f16ef6bc1bf12308804e67fa27d347d80a5f23e472089732f752af30f4c86ba6cdc912adb9a7d835e9774cfbcd4dad27f0b85bccb436ca94aeda92d704b900ee225e830e2b88ae404d4cc0df045da9786cd841f69685115c35a61f865c2dda28a11357696d72f73e8f2b1012e1a186ef2641b5a449020cb1971d2272e6662184495ec450ea") ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) close(r0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth1_to_bridge\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="2693"]}) close(r2) close(r0) r3 = dup2(r1, r2) openat$cgroup_ro(r3, &(0x7f0000000100)='io.stat\x00', 0x0, 0x0) 2018/05/21 12:32:12 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x1, &(0x7f0000000340)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:32:12 executing program 7: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x80, 0x0) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00') r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={r0, 0x6, 0x1, 0x800, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0xffffffffffffffca) setsockopt$inet6_tcp_buf(r1, 0x6, 0x3d, &(0x7f0000000200)="89c98b5b56af9098b6e6f384a847395542ea86ce18899dc43050d1b3c515c4e1d7272050a31d09b932939162dcf65d067b1a2a5d2ffc7ed89a76deae2ceb9f619cb923ee4b32b3ca54e0aa893b227e4bd35db0177ff5d26bfa5c5ceb3f6fb45deeda90c07675d3191e12decf877dbaf6f672", 0x72) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r2, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000300)=""/103) sendto(r2, &(0x7f0000000100)='\x00\x00', 0x82a42b4eb9313e49, 0x0, &(0x7f0000000180)=@un=@abs, 0xfffffffffffffff8) sendto(r2, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/05/21 12:32:12 executing program 2 (fault-call:2 fault-nth:3): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:32:12 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:32:12 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) mq_unlink(&(0x7f0000000040)='(.cgroupsecurity\x00') 2018/05/21 12:32:12 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@ipv4={[], [0xff, 0xff], @rand_addr=0x9}, 0x17, r1}) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f00000002c0)={r0, 0x1ff, 0x9, "442b3878951daddddb012daf1e24abc88b450c4033f8793c254936c10be4e691ce3fae2cc56658b8a6d70812566e6b55f608ed5490898f038803bb4f8c38ce8341ba41400200e267ced0a6c6a9159256487de054a152e37cac88b2fa7659f9512e6e963db256b4a2db05b00b14705bd2f7686542780611a4ba55ebd713d0583cd25369ccee187c74df2273533c446c8860432caf9ad19f20f6a6fb92"}) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f00000001c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)) 2018/05/21 12:32:12 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1}]) io_submit(r1, 0x0, &(0x7f0000001440)) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) [ 912.434605] device bridge_slave_1 left promiscuous mode [ 912.440526] bridge0: port 2(bridge_slave_1) entered disabled state 2018/05/21 12:32:12 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400400, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) [ 912.488910] device bridge_slave_0 left promiscuous mode [ 912.494855] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:32:12 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) sendmsg$nl_netfilter(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x278, 0x12, 0xa, 0x0, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x1}, [@generic="22b6c3601c6d9e5d3ed037e1baf6db9ba9ba21e81af33e4b5ab194764a09489eeb912152bba82cdd97b243420d0e3f5ba037b0c0b48f1dd776e0ba32c1e017aaa722bddf20b5fd", @generic="1395af8931ba3a4649ca7213f4d4817840e13b3e5232550399139cd13aae2a62b2363f9815efa6d9cdf6a5fd9e59fcb4903ae39a5efe9b736a1edc9a36b96ed5143bee010b48e775664fe8d47e4fd8473c4dae6ddef3831961fed0b253a1631a7e6f87bdd9a27e70d11b0f844c97f1670fb136b0254735ae181433afa7fd5dcba018b70b21ffa31b332614bc413fde2c07c711236d2df693e017f3653fd375664043ec1aed0425dc0dc25e2a5a3f3559db1ce029e31f674073f2c821d0ea79932510cd02", @generic="b8d3703ef86ecb0c5cf4e2a9453be8dbddb29a25403c740c63967a071849f6cad9e6b1dc4babb4e05302d07bdc918016e17894b996f6eba71ca663475436602787775f320331a9ab11bf89eea9da5f29d084fb2027b5cfd93283545297104a9bbb461219ae76f504153ac50698d4e8430fa6bc0e22717e7c6f07cc7e4f23a241c72204ef7bbb2c5f6968b1cdbd9d97b2598a644150adb6d3fc6f3045038ffaecb03fafee9519ab590af19082de2b44f874780a1b9e4981b9d61b37330a70421a", @generic="33625d19e7146583312f8f4605712ffce66d7d1eb26135c03ab3ce7d730fb7f011e3dc235fe4d2b04e5d8897b5b30e5fb99594bbc407d6328eb9ba25aa9fa7a154838f28c6867bef72acceb1bbb559dad55542e5f34a71617d298ca72ee2b0f82d066bec96fd8bf07fdb1c5f0112dd206bee69dfe304c456fd59690e3313da060769d99e240d5b64b8099b5916ebe894ccd0607079e3f2"]}, 0x278}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f00000002c0)=0xe8) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) fchownat(r0, &(0x7f0000000080)='./file0\x00', r2, r3, 0x800) [ 912.697557] team0 (unregistering): Port device team_slave_1 removed 2018/05/21 12:32:12 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1}]) io_submit(r1, 0x0, &(0x7f0000001440)) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) 2018/05/21 12:32:12 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) getsockname$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000040)={'security\x00'}, &(0x7f00000000c0)=0x54) [ 912.739840] team0 (unregistering): Port device team_slave_0 removed [ 912.798744] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 912.861174] bond0 (unregistering): Releasing backup interface bond_slave_0 2018/05/21 12:32:12 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) socket$netlink(0x10, 0x3, 0x12) 2018/05/21 12:32:13 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1}]) io_submit(r1, 0x0, &(0x7f0000001440)) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) [ 912.974933] bond0 (unregistering): Released all slaves [ 913.003983] IPVS: ftp: loaded support on port[0] = 21 [ 914.091705] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.098157] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.105638] device bridge_slave_0 entered promiscuous mode [ 914.143563] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.150186] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.157575] device bridge_slave_1 entered promiscuous mode [ 914.194867] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 914.232354] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 914.338789] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 914.378820] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 914.548631] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 914.555907] team0: Port device team_slave_0 added [ 914.592546] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 914.599815] team0: Port device team_slave_1 added [ 914.636789] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 914.676693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 914.715612] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 914.722952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 914.731355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 914.765764] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 914.773042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 914.781613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 915.153044] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.159538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 915.166324] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.172754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 915.180451] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 915.263230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 916.553784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 916.685296] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 916.819456] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 916.825746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 916.833966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 916.959263] 8021q: adding VLAN 0 to HW filter on device team0 [ 917.731910] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 917.742996] syz-executor2 cpuset=syz2 mems_allowed=0 [ 917.748291] CPU: 0 PID: 20671 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 917.755800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 917.765168] Call Trace: [ 917.767762] dump_stack+0x185/0x1d0 [ 917.771387] dump_header+0x2cc/0x16f0 [ 917.775181] ? is_console_locked+0x29/0x50 [ 917.779424] ? kmsan_report+0x4f/0x260 [ 917.783318] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 917.788780] ? ___ratelimit+0x67f/0x760 [ 917.792760] oom_kill_process+0x341/0x2160 [ 917.797001] ? mem_cgroup_scan_tasks+0x289/0x610 [ 917.801773] out_of_memory+0x1700/0x1da0 [ 917.805841] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 917.811232] ? _cond_resched+0x8b/0xd0 [ 917.815126] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 917.820309] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 917.825677] pagefault_out_of_memory+0x57/0x110 [ 917.830340] mm_fault_error+0x490/0x810 [ 917.834325] __do_page_fault+0x1272/0x1a10 [ 917.838560] ? page_fault+0x1e/0x30 [ 917.842176] do_page_fault+0xd3/0x260 [ 917.845967] ? page_fault+0x8/0x30 [ 917.849497] page_fault+0x1e/0x30 [ 917.852940] RIP: 0033:0x4071d8 [ 917.856118] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 917.861473] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 917.868731] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 917.875995] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 917.883252] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 917.890511] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 917.898644] Task in /syz2 killed as a result of limit of /syz2 [ 917.904829] memory: usage 804kB, limit 0kB, failcnt 976 [ 917.910273] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 917.917126] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 917.923351] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 917.943301] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 917.952161] [20671] 0 20671 17553 8392 118784 0 0 syz-executor2 [ 917.961128] Memory cgroup out of memory: Kill process 20671 (syz-executor2) score 8421000 or sacrifice child [ 917.971220] Killed process 20671 (syz-executor2) total-vm:70212kB, anon-rss:76kB, file-rss:33492kB, shmem-rss:0kB [ 917.999290] oom_reaper: reaped process 20671 (syz-executor2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 2018/05/21 12:32:18 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x36a2, 0x84200) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f00000001c0)={0x0, 0x10001}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000240)={r1, @in6={{0xa, 0x4e20, 0xfff, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x14}}, 0x8}}}, 0x84) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r2, &(0x7f0000001200)}]) 2018/05/21 12:32:18 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 2018/05/21 12:32:18 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$setopts(0x4200, r1, 0x8, 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) 2018/05/21 12:32:18 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000000080)) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) ioctl$sock_proto_private(r0, 0x89e3, &(0x7f0000000300)="949417fab94085790751f93eafcf71d90636d3ae6c981b3e07e15456d48ddd38369227c962f9fb97ab58abcc52b4a7ce08708bcaa75b41f59978a43b0fc7485b636a80712f1e3e5daea01c43f07ffff767b74726c4110a0050aa96ddb44af0cbb7ffda0242caf63fccfe031c3f38eb115dc782cc58129e481c9816bbf060f8b395cb011e94d242eacd4a229f128d0a8638a850a7b6660884781ecfe1e0ab7acb19e8cc71416fc60a0aae7edfa781a101aac4ed851819bc7715c5f9614cd0826f13f4452f2a6aaeadc737410048e301cc23c772b276707ac48986a182bdf74b832cb7ff37e0725f00d776c931994c51555275262fe85658f5c837858027d3b9223f48817912dde515138e002a3af2690844f8d701919f5a6b1485b68e7b7a6d4636d8cc501fa410d9e5ce40bb13c7df2654fe915dac71e7973af087a6852648fb4a83f180fce78ddb0e1ba3c51f2df38f2879d05c78c3c1f47915c1b71852b9b38576f1d302f3923473d97421390afa80636de6cd87ea112f940ee989ea58c288d58d17547f1d28632af4c0370c937e026cc75f938170c89ff048654cfc428a885ed21f2f55e352a8e614d7f2d02bdd2e966dc976fb7c914456dd0b2ef62676746ca4214a70578971d5039f8a22c3465689310623ffb1e769a4beaa7b32c967068e7cb212c50dd9b8805edf6a7ec3bcdc732ebc285f31cbcd2be073a938f1ff3cb10bffb23098078de782b01e33ba71bdad6e8820465745b85d227568aa44ceb59f765f5a48b0a2fab64707adf52852f6b232d439fe5b99efa01733eb437364865e806ee015bb9e2fe9d0cc796d20c17dbf53267ddc1f98a31893f65ce47ce287233f74899cfd3cc94573537186892bc0e959255d6b1e319a16c82f48af174330128b3748c78382bd8840db3b3d9226caf96157bfb0c113c1dcce2fcffe55eee16cec388fb1c0cd77400d8c55cbfb39f240a6f9e34160e3a3527cf28b3dc0f6952e706f0b41f2bc5e4259f94b67e137d33bef71795d0fa0a609ebbf90eb1a76db218a4f9bf6419bb5b3c65ebc093c4f9fafdf236879ce9151d74f40bf16f98fd5c53fa0fe98253bd57ba9c01a2ad9f3a9009f9018cbed101c53e1e3fdefb62a84b2f29eb28bf5050def9f22be4bac10f27c1129d5cac2752c8158cac5a441ab7eaeb26ab5ab5e5c70666a49cc3894c8b7fb85af57366eb166666e50f44c264201c541cd385bc234ac3119bd314e4d85277ffb400529f669514ffc01cfebf4d06298b5a944027cf717695684430f8f3e972ea4e8e3baae1abdae10e76062858d714eeae154a73d9c22dd80934ffdf2e5175b3d48b15273b4478d02c4a4a785aebe683279fbd6d394577cc69d2b9637405a02143ef6f65221506d2be3e4a3296a0d615344f0978572ca9ac922cc23691ce2a3811dd00bbfe18cfe18135afe94c5ae71ce0e784bcc767765ae4210eaf32725438eb69c7a2a6a92b287d7b641a14e5f4e21ea006f555ee51ff36c05c0360cb4b5b9169e64735ea9cc991b5588b2b29e6e2e24eee2a37bf68b60c34988611d1fad6adac9e6762b8750d91481be37d17ac2fb37e0f03dfb98e8168d84afbee4f0704d611390a07a92cfa78167751d03249edf5589b6ccf1209956a9f7f73eea82946defa89f9c6c982f9c42c8b674159c189d84fe9f58dd038d7b89548023024dc57468be7440e1b5b5d4dc78ccdf7a0956cfc7e5ae8f3dfabae0734b2dd34598178d90e51a086eaa20ac0f4d43d96753e63a5c057a7810aa9148672176c9f4636fb913f4b1ab474e99ca992121124a89cedc10cf91d93621998a6edf56388606546bb24fd82f6fc9f3573a7fd0e0895596b29af78e3688adebacd23e987974894fbf9b47100ffb68d1df83571f36122e3f05540cdf002812702a562491d852627e91979dbd74f55246cb1fd9421837e25f4e6873ef224ca73111f43e5bb1e0d119531303cd00594e7acc137c3bd94397e20e00ed0996ae6a31f266cd1486107f36c7b4204c2cf87278631b4e38a3bd9834fe229a06fc0cd20278697a5d7e2c1121c7f4bb6d50be4472de6fd67bc325c88e92adc380a8ed13ce72052bc65206f90497d5f0dc18e08cf6bcaf5f3ffd35dd4ec1d29361121fd701a4ef1fdc817196f8cf1e16b49436beba78a9c9a7033b424e500dbb314ecd24cf2d1a96140729a6c6178d63434521c3235e2f166405f6ef38ce6789236c87eb8f9183d1b7113b8c69d4a99049af87f5d9cf9075680387d6dd93b033cc82da9632f4aba6c13c19b5af5cd660cbc18c272b838555b95786c4318c0ae36933ec5a0188db0acd6a3d7a7115eae39d59b4fe2e09c735e0a9102ef3035483582ce67941e6d1d4b2488ef950f9ac6560673f7a034c47ee80c6257fae5ab697c3c72284d33caca4b055c36a030fc8081132835dab16f927b12ef8ee0c58a8e5f868e9a75bff631e9560b39516f0a53e64fb3bbcbb50da7a49c976a4d859218bbccd397ae29fb3a79d2a7fca4a3d69722fcdaa4f74436ca593f11e89347ccebd6f9298c33a43cd2aedaa5000b7b70f82fb130482f8aba6e6758e1080758dfd3cf2803fdca497a95ce9aa9e0e7dc9b381929117a7989edec7ab1f6421c6c6da23095a5a183e40f0063f5d67f68ff08761de14d17461cb15ccb90cc5e791c02c673a02e326b29962dc8d3f5ddb2fe3dbe312d8fce0b23c08aceb56bfd42d0b0c78192606a0ab014860af553360ed8f4b64935394b758c43ef10ac477cdffa4058c658979afa55a71d8c6d229a31046f8730bb81a684ff315efbce73822b96c82b72b5dd9b56e9f5555d892ff1242205c76e552b763736f7b9ff8d8f796a317ddafd413656dae211eee015949ad6c8d796db8b540b2ddfeedeb4b5ac3b4c96dd8706e3b9fadc7ddbec924bf023f5129383b0e2dd70aa2a91a49ee1272df92657b8f2be926d3f4fdd76c387c8714184a7ed955d30c359854f6e8591e88eccf4f5c1493b269184c87bdba481db55df0e4dc8fb83f191491e70a970a7a9fb5479dacb9b0ab38a0a17b6129d4e3b28cff1e2370ac5bc60784e1afc7e2832e95a9966dff4f99c48c71350ebfbd26e229a8d79c5628a11bdf6f3b76b064362b10f39dc217e76deac6ab036bff2e247a272ad505d14df2b0a5332aaf2a2f4d975a301b2961a7f7131cf12bfde259fa62a937a34f2010df5c07be36d536fee9c0f31696a3b4a2ccccf94a45432ee786d2488f507c3e16138e69b9f50f9eb526d8f80823243d34da3913ee8aa29d410fc5c6c39176e9a2f2994bc4c10470f81cae0f98fa0e30a3f7d5320905c8afa9a2a888cf38a3df8a66a5e223cf782036af21606e39d63aa78e4defd54bfc9312d9e9d32a39c18be23d01de5cb92d51ac66a7e9dabfa14b21510353585f12f8425b7b576d561fa8cdb52d314c4861d7b7e4632719fc5b15f0ec376a9e2d3d99718092ac5f5c18ff9067415c2b50fcb9de2248a9ef83faa5b082ba59206042b60dcb2cba017bffa02cb8e24b92c1d0250bf40b0ce7563d3fd33018623e96063c6a8d28c63d0bfe3c3aa4d7c558f9d7e83919ce90b5441c6946177f07080697858b3249ae8361fb3608378324bd88364ef35e54d1ed95dce1c790c333c32bced671decae93f009730f64f43890603795e8579327e334648a1477ba707eb1a16dd02f72ff12ff471f3835a5b49a285a4c088a0384ba0ace778f3efd3540341be7a7a805d8dede7a78ef0e7402aedc33748eed68db24002a930c781ebc8bb1a835111afa6f91312faaf79f85ba5fd73a8000bb43a0dbce8e54a91f488222f23b49a533ff87c7198d6b0e8fd21cfbe941697b8f96d62fbbb71abb1fa7f8de4e90b45d7947f398ecc12b3e5c9974b412bf84d31ad817357ae35b04c645983c6f3eaa408be800b2b0ac6ea9a99379c43ee5de9c09923d25dab0a4ed6ff3049fa67b9950f1c427767519a450a61f6ef437fb7fbbbb6423d4c4579e2a4f2fe2f28298764726e857ea7f2662ad47735f65e7256fe230838fa0568623e28096b35b504e6d359e822692282665980a383653ec05015c6c2eb4687d2a913bf4f53a58ee5b48c475be9c89c1ceafd8c81588d4a13e073a0527865b11225dc692afb2eb58f617857b39c5144b6ec4b2260ccaf8ac08a7b6ec0be3ff321439da74f2b65abc52351a2b33d094560c870b037d6acf2a844eb4974a066b648d27d3e36ecf61bbb282871a1cc979cbd4753e9b2d8db46113bb7ab7e7e59f82f183304e81defaa53233aa8ac04eeca775603657a96a5cb28caa2886ce59a088620b7d6d104d6ca8187cf695245822f75aa9bb5175c5c99f72098b757c532fa62f64ac7c4bb174f8636c5c6e87044b94ce6a59b863e90f0f84f93587e7a6dd5e4313a5becda748c65afc08b4cce760603a59de2ffcec42f8ced20ec2778d7ae3fecac70ffab8b6bd546db470f716ea78309b14b4374112dc434a8eb9b2dd65d79feb28e50b51cb818ea51526b3cb76648421b2badb302322eeee6f18932d0978d5733c7c968b8c9a09e8c729db1ee336415c6f80398cdeb5086abf2dbffddb62cd9bb60848bdaedb022be6ba6028e4e5dd6c3657f60d9b9520316feff540d9945ed0ed5d47b94f6c9624c665277916bf2df922c608e1a6252542fefe3bac1d6b0c1e7f7ed9cc5c880c21ee281e95732de3609b4f8a1c36ae0183fc9d6b5413da0215c9635a44045a53cf82d379154fe0c15db145e10fc4248d36872485cc8f2eefc330af40a0583db9d5752d989a5789ccfccd492891e63ea4e6f59ae1f2c2211517b9c1349c92be822fc3c2e9edf294884f60e67efef0b23d001918a4dbeb42165ada449729c3bb529a6167119d4c8c4a3d229c446148e0f170d598b654120c8876a2496e26806190248ce14f35452fee6d8d74a2fa77919b6644f5ee439c0dd78d5164ca826b39fddce07dba49bfaa12a653db811d5edce24c211e40cb4a0733940ed60ae15691aca5bca9b5098c38591106fa28405558044d00c25916bb2af9087e157c539e085a4f7e22cedff229f20721ece998f6d0d6c0c9382e89fa0055b753fa1efbc7e930989e1966d51fe84f40a0f6f11ea51805ce876ab91898317401ac4314ebb5066827c147736263f48f262ada199d62d4e7e26c43873912b9853a59ed868549febbab8c29f304ea1ccac0792f870e3c14c81da54026099411f934bbbc97e3e7542e897e902cf060a9ac70134e2da63958b49822590deefb9f9feffbf0439d3793dcfa25a28026b45c5666a6af35b11f5f339ee6f47eba2943eaa57d782d69b7cbff4fe74c1cd8cbcca8ec4188a5ed6ebe747c86934b10115f853b9b5f2d4caeed81f772e4e9c72fce38f65eda062e1445801bbe5fc6be8251bb858dad85a4da6f30db76ebd13c5d0c875898a7a24b089663196d3e10aa32cfb5a80f6a9a8874090cbd8b3951037fd76c8c1f4a07ba80f82aa088835a30796ec93cadf8a0407b3b4cdc33aee3dfd7c63a96c7a524cb10ea595725fce390dd60130ea504a666257f06d60a8ad8fa67062a1089d3f9bd335b82b838e77e06eefc229433c3638b588fd44ae11e5565fa657fba8aaccc6c18749aa5be046cac2f507ced2f53ee85d3e32e29b5baf36568b88c5d29149229dbec8ad29517954247c9740027eb4bd86fa17f0761d0e2614ea1835b9bfc672e2be4dc08689c17f81ad2277330d8b279a8b158e5e3a830979c6b8cb7d7efc0763d905e67902938fbc3b844eb4fbcf0968fa46a0d0cfd951bee60cf390a3097fd3675c585c1552f7d4") setsockopt(r0, 0xffffffffffffffc0, 0x2, &(0x7f0000000140)="7f96556453ddbc", 0x7) 2018/05/21 12:32:18 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) 2018/05/21 12:32:18 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:32:18 executing program 2 (fault-call:2 fault-nth:4): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:32:18 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000200)={{0x1f, 0x0, 0x0, 0x0, "9216696411422988fb085cc4154795de932bc5b1196b41b2ac603f059a9f2111ab516eec9e85fa3f5d4d6a98"}, 0x0, [], {0x77359400}}) 2018/05/21 12:32:18 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40, 0x0) getsockname$packet(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000580)=0x14) sendmmsg(0xffffffffffffff9c, &(0x7f0000002940)=[{{&(0x7f00000005c0)=@hci={0x1f, r1, 0x2}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000640)="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", 0xfb}, {&(0x7f0000000740)="5fab0958be0c902cd0e5b8dc2ac15b72806ab5c53dd22a7a0715b2a6c97f82fc1559606ab67b83dc28a3a8469062b0a3f3e73a9ec5f9b7ad9e1a8d6d4d15f14576063ac31e4d5f7b8ce48ef89b", 0x4d}, {&(0x7f00000007c0)="a82c603f9da8ff4fef0f137fc157f4ae3e8363b8864ccbdf45f3297d66daa213426649d0325653b752f63288a9e906468738ee46e3cf43551cbd0b8869038007005311282ac2a3d150ce9e327e9ac015dc23b1ca4c17bf4f71104d2ca15b105b21eefd918c526b0ee0e39fd4e2fe45efecbfa25e62cea8cb6216", 0x7a}, {&(0x7f0000000840)="03f46851b4d8e118d4866dad072870b506f6c458d96c768bd5146a4330044340d2748bb0e0affe7f2cf0e57e217e15e8c778632631cb3e29c9071a674c0861c4384360546481f755633e030d80e438ba5a2b5baaae6ca0d6aec50ce9fde716fa795f2b260c8fbb1578ee962cba870d131969da6a1daaa46ce4c3463b9552b7a136f87d532a6768a3c20aec59f449da04ecca8683277028841720a5c46d5e3013f0cdc7c4f37a43867daf5611d93f33983d5f710a5da104a10e8170b43c98abf489c67d15fc7bd800962b8ed32cc2448e7112bd74", 0xd4}, {&(0x7f0000000940)="84f282086f99050589210d012b29415bae6bab9659923381368eef5552becc086e3dc752f83020ec641145d1ca540db48107ec9c8120fb1d5ef6cffc38d572847cf49619ae9f09c4c84e90317c53371281182a85b51f39d9d4384fd3", 0x5c}, {&(0x7f00000009c0)="ed0249005a10dbfecfc9c2c908ac82d5ebabefb380d2ade18f1a0202d0161909e17eb94800ad46a6917fc8293e3bc6d953e16b1eec2131b441c6eaabf29c4d35ec1d7e8facb81589345ca0657bc81b4e819d92f6787e0e08321841d235911acbb2d570c062cf9b1929da02b72ead25f904", 0x71}, {&(0x7f0000000a40)="eec2e94a20cc8210d7dc6f50c4d94cdbad3cf832333a7de87a299f1015fd45dba36608391e53", 0x26}, {&(0x7f0000000a80)="19419fb8c28c02b69b1ee38a0a6011503c2a018d65a19d9c219b82575fa919854a7902b06aaca51435b776759e865dfe9d689269942416d9a1941b0a4b2652740efb4b18528cfbfa65d730f19ddd06a6c7f94f03382983aca7b639ebfe6da7f647e951465977e9dccd30ead4262f86057693602e6d60eb94d552c51fbce16f9ea5c74d9b6e958e0a5181289e0ff74cef05f73967cee1c3968dcf6d5a4dce0234cf1f0294a046ca6c4133576461b98507bd1f7d4d2de4eb9daa7f913736084a4468dedeef4c19c0c65cfe92e55a1194dd7a1596e67f4ca92bd4fe65dc1cfe62945ce28a58d465a569d5b3ced34707e27d8a3608965c539561539cd324edba479001e303092dbfa1b2c066ad43ce710bf85b11bff2e22af4a678a60a3c7f543b153d06b085b5d6c922b3424146c5bdda2c761840c7a3e4ef2b91e40e884edeb9f53cfcda9cc73529b8e82205cf47e3d247fdd4786114cd65fc909066031e60229417dab6c43f94ad762faf26d3f104f6c90449157a88b4255588648a7d08a86614f5cbe51efb76ce285b284af53fa84680e37792a2a9221696f6ee03499a2d5542bf012f0fda525eb72da77d0d63129751c5009c56cbb2c7e297c6e8779e3b8dbe57906bef3b302debf7bb5b900700cb134d1460b4dbf80974462fac7375751396ad902f9fc7fd05f22c81440b6e9bc78cd298a964abb5d0c355f6e583140ef28e6f27843d827ad2240d0cb15d59495bad0cc9ff528bcb52982a3e74b676e7b2dd2ded2b8aa4b89bb508484124665957f244ea2ca98947fdb8e49c8c611248ceb109e66805a1efbf9c688a1741c2ccc6331fdc0def990c11cd1ff15b23239e08eb889d8c3bed1783011a741b70632fb15fbf19671c66dd31cf11b107857c0a89414306f97f262dc95b0dfed9280365a6047d88347a43124f6fbd7633951c921c547c2f90e42fa41d7b6e26e0a027a0d31c3c0f0567395dff056e66927b7a0b09de3a1647f5cdb58f9513819b0fa724400351b8bfd94f26c4033ebcda1772769f71db9bb0ce4969035bf66fcebb6bc264188de7f7fd808a9493c19adc92d970d096abd52c49aa752211f6ad5b463c9a16afaded74b2216e177da49f43e865a38ec38cebb94c6c4c91ae97bd24cfc70ac42cf3c3d3abd74ee470b46e255e22c9edb4d5cf43000f2eb1d26bb36fd468f5c558e8127cc559365113393bae05fc0a5dc71722e63baf3bbfd133cc352a942e9664fc488f6f65e2bdfca825b19ac59f45ee666f9e1cf330ffe41152f8cc425637ff5983ce9d6415595a401b872807bc5be3015724fbaf6dca3892c2467a79eeda1a29f590a4b294a0ae0cd42aff014935ebf6f3d345fce6d42eb5943a847f71d50d284f90cfaaf30a18f99dfea3b70e3936cf37d6bb4f1e4f202c89b21abfb8f783e96d3d59f16000f949f9b868e9c005241abdf6d250df42c13a3ea740a571c19597472bf8fc7258b9d8df24f981ca586d4019dcafe24f590e38002f4be931b7dbd8ec9f944475c0d8de43319a45daa072bd23639ba9dd4110f1f97994f9e955c04c7e33eeb6e0f207c8503684e35b83357f6c4fff3f2b5b5e1fea98084f57b869911675710601d4ea10a882ab12470cc45128d234280097c645ea4917f31c9189d992192864f1e8e3819eb30b14100841e5c2896f8c23b2c1e5575d49f4cdf07abf0e47be08c13ae929eee66a1881d962b7b6307dbb3696bb2227458d2eb2a9f4045d1039222eb6e5e0bc19b68f09b3181421cfb7fc734e1716d3c602085d12b7be04b11acd9f8e0c975f1fceaddc0d73b279526dfe0fdb6e1f2a99df09bddd413320242f2f4fe4b028cdb9224cae4ffcacde3cf9ad8c086b3b73eecb1ec2ceaa2600f22cd5a75398cb1318a1c188a2927688bbe9fd48d0b648acff9c5daaf32e59b520e4263d7002aace8c5304c980009678c7de63d8f2e9b42397731ff90a3122f31e716d57a800fe63d2feabdd1b44544a62e1be98b06ba735784ab5d674ff8825d4a9830d704c346b486be0e1d066591c93285615c35397f1721c00da69f0536287e2a6dd36ebfd935c59545194089ca549f7fac8926eb65e197a99afe5d6ab4726955f79333ee0d4c10a2c73a00f64a37a04692112c838d9895c0dc7080d9ce3bf33cd56ce8e339efbcdbe6340130ee3ff618897d820cfddd998bc87f63668431e04019ebee74249299a293ea8d43507652116037e9a446251399321bc784b3cade7ecb8a401093a17a5d957f99ee1fdbb424a24c77f217d2dd75ab80c8c00b4e2ad49fd411ab00014e95c62ce0eeb508771c368ffaa41520f31c4c65f1748c270c450bb92cac8d91d193e78674b4affa300c1c766e1002eaebc2f63b9f431f4dea7577f708fafd8d0bd2456483122ebc17d87c41e6245aeff415536a21ce48c0a4a08491c8ca4ce7555778410e85ca261c70d023c56d6969cacb10cba261f12164ff9ceb2a316390a2bc2a57437ff7d7b4e96f74078282aebb526befd79a17ecbdef551059366ebe49d6d1608eecf25524b567f17b3e690e7ef9bafde002156a10822c281010fb548f21996eaaeec98c0d93a985ae10e87d7584dd333ac314540874fcde95e565e19e142473ad1991af4aa5a3bd0bbd4d03c2003ec0eb7a2921789e2d8315ede404cdab4672cbe055221e0bc256b604549e01da63aa4012e1080b6c0a8192877fb745be014c20bf585bb1e515827ce3eb6a53bdb0d228d4c3d2b79a8145f31f518d06f44d2f52f7decdddbef2836b83baf742d671885a2e643cfe8bbf7c6c831d201030bd5373895ac6a6e22fb32d1af3b41954f82b532dc7a14ce1eb6023bb9a9944889cd510f7082f3d5e7a93a59d88e83c00136a5fd5cd327ff5c074374e37096cc96f725569635a622f3b8a59c84d808e578d7065b505707f9298d6b154743ea3c4030b87ba56a4d9cd0b53037602830e1a2ff6d95f5122e20536dd73bb5d09104cceee2984fac49aaa962952137dfbb27a84b54d6b4594dc10029ca0359d09efb8443ff1d9aa2f39f21baf9003cb8d80861ab9e94022356237f7a0daeaa6fe40a5c4e0ed908933297ba3f425d8ac934087d9c8c0e48a26ca7d6f55a3008555b7e92d5ab038a0780769d6f9480af22f02a28515ef6e45f9a26d93142e6b95098d18f362671f36db59350baa1081b4003c6ca6aec7ffa0671bb2ab5c5faaacc54800db6ce0032807bd595849802696765c4ab42c182034e294b545839e931a84ca7164a67c8e81e51aec37a6a8922e2b2eb0338140ae3a17faf6b1045496afa2e806988c062feb11e14fb66e342abe3ef9c49fb56d78dbcba466a825847716a53f38616366c127161c51893e6ff65a085b8c3ca6784161b8a3ffcaef5fb0d1c7d293db13924fb07a4a44118dcb09441bf39ab624421743caa1662a2bb08b684abf19e4b598a2dc2fd91bcd95b1c3582c732dd90fa401f491b8265a49e98bca4aa774fb76d26283c4cc7e2a7b12f0144755f6ba18c4d96a290624ecfce73c0fbfda492541064490540574c459288309a6e3f0b343755817424753b6ae219038f9ce4da8d75e205b524c214518303b14f08308d30441a3e5df923eaf5b68d1b39d7aa97a1723f6fe02a19738a117599a6d5b4bf9ced4e0cb8060ca58a439b5b24e6bdc13a71a9b74e0fa2aa9ee1f485ac907d021fbb9cdd12803dcbfea19deb402b79699a0ac7598191a2f0a4dc31d6f42a55292c1393403a70bdcc5c08c970fb6d1cafe821feb9bd3d7df8a14a7ad41501f600430c8a7b0300ce32ad2d23f47e7d006963dde98cc1d87bcb93da1c30e7654df00be04f9d5ce351fe931411ecc7869320bf284aec69f4c4e4fac5d67877cb53c2a48e227f76fd4df0acaa0bff9f40f9a36abe26ef8942b21c48d00b2b98045f5030e912889f29bfd159f33cf715a4ca8d190e40e9b40bdfb57dc76de237971980679bbd84715dfbb86e828c590dce9a053833ce21bed497937e7566b00b64fffbf597569f0907044ab671cbc5317865eae60de1bbc14c57c747925edc5feab127aeb96baf280a395870988cc1da2c9d34d020ed1d59e816c263000b045005d7bb2b1c0e1583cce6fa298e0eda229b41a091f5fcb191e9343736e52bac22e77054c3f2049f396ca88d3debb47503956b7ec0a60b3c9a18fc3516efd907e41bc6fcbf3a6aa5460842fd24da4b8684daec642778f3c1ff21fbe4e4927ab17280495e88443f6576a8f072daf6d2f2f6a00804fcc88a29241b3f65cc5d3e4cbfd8eb5be78c33639aa0a554d850878fd78aa3abaaba17d48631e5992d7528bebe47825a88592d8a04367183531584118dafe6d1ee8dc4f9d1383fa2699d83d0ce6c393b9285ca71b220236662f13562adb0f6540b5ae05cdf605349dd3ea1653370839a223b8f55e03787c1aa6095ed7843c53e9c90bf21d4ea1e8bdb744adbc90bbacd78eb5e4b167dd30b78f11c45dbfb9c782e6b8cee409c3f710c9e27b4b0d75bdd8edf01b5b79d8fbe7bd2415093dfa8aac66da953afdc17466f3271610581988a3a5d841ebcd8e3fad7b3da1a335d8461078693eb37e8f9e7d955b03fb1da041977bab92e32bded57edae03761f8e30327f86fefca2f4a092bd55cae8f4eca14b1187448d2af34dec92f052bdcabf414e39d018f43b156b382ff4816ff5247baf8cf95873b8d73078ae3e62f04552674283d246967ec91b6b48298efbdce1728a60100d3af71f28ec4d749c2210c80fa4fab97553b4653d6b366d1dce660d00263d1de280869f32ad3c1936b60afefe9da863244361bfec04881742cd8592c42cda5914307ed0a38c0e67cd57aa6410f201470d1c1fad105180dea127a9dbf6920f850a95f645e7f5e2d764592c16c141eb6f9bc3010e65d651d9aea03a44075664311dd25de93488dffbf34b8da3b569aa277add06d29a47fbe2b82b1f0a19b07d159c17b81de32375e72fd3dbf27b950e746b4a1766f5243d185b265d90e2f424832637694b82dd7e72cace7e5f6b61f21cc3dfa5262864dc6cf836d891bc0188a3755ffd7e138f127b7a064ae188a2277fbb5895b3bc150b28f0d4708fb0ef86c238bc3e6e3cf5611b1b849ce5e56e53ea3a31553784f54a8cc15cfbfc24f6312d1c0ff459b915bbbefcf45909b8aae154f268b16b38602265d8f4fe8c5986f7d5ed287ad2433f1a0c29d07c6b64b2ba9e53e669be730c2a92389cc3e3a0a378cbb8c03d42147243b6414fd89f2f02ecf0e2e9f64a8ec434833d98cab0b0e47d7ac57bfa88cf0f36e6c627e40083a3e62353f1bd7b740ffd2ad7bd5647712e540973905adadd133817279426bb82471b0904ddb3f78ef0c29c9ce0aa37d009750f2923e8a62570f67e69ee06063aa861ced7d5138092f10fefd3d04f16eaa5bf763a7fb78921ff18b6862b945df3c3881c8fac48f665ede5c3ba2ce14efa005ce0aeed15820ba9c30f9e1062a0c12f7684bfdab0df00f94b2c030f703d31f7f697786424a32317e59c4a8c1b3d4a5dc6492258245f91e9093d2df219d4b844a439c8ab40e2e4e79f85551e4765cfdc593d6b6bf2963e8c68a80805b1eef6c4c3c7d84b0591aac081c7b54965d3889b5ced1f6d257aad4bdf6185a75cd8c56c20cf71688829f7cbde6a3a4796c84d5847a1be263be78d582679b44bb9a82d5dfdfb54d1c260078377ca818122673a73756126923e6b2c5ef2d93fd16f1d4d92cd259ffb229bed70c826f6c9f66c79bb7910d32a314d7d7649a41fa3330d5d9fda7ea034be470972ed033a6174057f95cd3954", 0x1000}], 0x8, &(0x7f0000001b00)=[{0x58, 0x107, 0xcdff, "c92c19dbd51596961e5ce40974c72bc6540aa648c21e35fca04594e6b39cbc282633bc7f6b16fb816fdc9f2313b9771d8b4c070083ded2231ed83ed3013ca820d638efa4648444"}, {0x70, 0x0, 0x3, "5efcf7f0109059c6adf855559f91faaad92e8ca0a7842da5eb975d4aaefdf82e828a87f54d4323b04589c9b9c979fd13c6de8f6909dc56deb11482a7c1123823d4c1891a31b75f38d4ef4f452d35ca39f97f26a8654f4930b71e5ae7fb"}, {0xc8, 0x13f, 0x7, "3e2e2163d552de6f14332817709e203a83af0f9645b16022f405bec079a650f6363e8ccdb3015db45d10cb03a4b6b144c32d705eaf3357069cc4c191a9e533d49e40caaf1b2f6509340a640961b8f5297add03e73f581cdb7871f540ceef655a199dea146c7a7a9cc62b0d3b02dbeef6b48a71d0a9b924cb6e3fe74a9859815e9a4e382ea7ac4c1fb60a096680119bc7f091e8f1163c25d5671fb025c5cea2d3c1724da7e06aa5baffaea0bb676f28ccda5e"}, {0xe8, 0x117, 0x8001, "a6a16d9197cf3fed90e79003ebd1227358c799a736ce6fb26a5927e18abd7805b8a8299f86d6a79ea3cca88299a0bccf370b8f516e55fb1faee21eaed49be84f3bf6eff9caf9cc19ed5e67a05e9b46dd839dbed199db85ef360b400af41797bf3c7d3f8c2f4d5589c7fe9897f564c8b4415a832e115c85abd114ae4017ff32beb7b6cfd11e45e3f8e358a836c4d3091a478d58e374dbd427af4bc24f1ad926832dc9e5026e3aecad47aade6becc81c62eaf0c441e5cf4048607bc87455bf3017b22b11cfa9a15b4f18ee4f98ee908a8178ca"}, {0xc8, 0x11f, 0x6, "1d3017faeafeb5cf81aad8179bed38a2b187b268d934ab4101fb55dc68978692de465a93edc82d027a823fa20d5944ec6ad9a6254b64baee172c63e8ccac0ba85a63fc2b1debada212294b1d8773e81c74fca9b8b9f94d849ff3f96c3a7d447aea5bd7b3137e1340927df9911ba7031d72d63044321c7b3f56e2a727e09d7162256deda69a27788c9a72decd534217eb584957aef7ec672144d80c2ccd612f5d47dbe9c0d3784213a306b90fff22d590672b"}, {0xe8, 0x19d, 0x8, "5727a95bf8b7a18b0c8b4c7247e9ce725eb01ed7e44fbeeac12eb492fe3de11df7b97c1ebf9e4ed40de973f7faa43ef6e5b36e636fb9c8d6903a4a4183ec8d90639dabbae682ff3954a212f70ab8fd52f00b180b390c8f6ce03f84bee704f1b58601a51c2c247993e670ae1ceff20a66da67304c0311c8d3d413c65cfce0daf14688ec99b7f95c2f54cb3bffb2f4547ab59d22e47f38644bce107371b4fc0c90d51ac8861ab6a8675ab4b4f3c8bfd3cba628cd551233a45fa71df65d20d1dbb77cc5d5c41343c1db025b68cf3d72ab13b1bfe5baed06"}, {0x28, 0x1ff, 0x5, "bb1ca40172f635cd9405c511818fc66e1d"}, {0x98, 0x115, 0x8, "2467e49b0a24cb5e1ae29779057d98056a36f5729e052cf9b6883b66917b837e87f4c289f5705b5524dced3816b77b9196d5d781c06ebd7843cd60319294450ba8e456f61772261a3e8ae61b74332e9a2b2351646cb8f3473e65731429c9c143cd07172c178f46d41f0ffea7cceccb69c56fdd7ea264900df1655e6327b90e97b7675f260a"}], 0x4e8, 0x44001}, 0x4}, {{&(0x7f0000002000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x3, 0x2, 0x2, {0xa, 0x4e23, 0xfb51, @empty, 0x40000}}}, 0x80, &(0x7f0000002480)=[{&(0x7f0000002080)="8caa97789cc2de34fc692faf6a388e2696f0729533263f571e591a48b71923808b0ba85441112132402d30184db92cef825234f9be7ebb0c0ae8085a6c067eb9426a05dfbb173f0fe7b87cfafba24dfe12b85b60402d4bd467d4c4721aa051afb3f32bee614cda36d9754eb9b2", 0x6d}, {&(0x7f0000002100)="c9555a5b8f88bd643606df084aa7391645a245359bfe1aa7062b86", 0x1b}, {&(0x7f0000002140)="0fe6bdc34bc61b37c432027b790dc7b1aae9ca72ff619b10ab113f66c84aef73969309d02c5b5fea094ae36797fac1232f5bc67248d71eb3b2d6ae4c13946dee9b3feb71adbe71e6cbd8dcdb662d8bf0e7621f3e99f18cea827e7ad2846c73f45f8ce603a2845b79223a811dfc6f94f974b216774cc0b8a4a2530b03d2828509257879f5805206945876b424bce902e6a9c767e3f1d2ef258987a0f4f441", 0x9e}, {&(0x7f0000002200)="801c64f190ff7d5d514ea2f64c09b44acff52087a43646fcb992496234d73e1a8d116525d638c726b096cfbcd5bd7d903ebd7e4f597b8898d3eb40fc934d8fb278ae7dba46deea1f8820a4ebf1f51a4f2ca938e95d5a1f6d111884d35405745bb4e26740b90507bbbf66ff42115051ddb9f27d37c8c95f20a2fb2775197f3ac168322431037be41a989fd3c85c39a54497728042e7e4d7f081", 0x99}, {&(0x7f00000022c0)="642805b83966fcbbf705dc1c295b962ca46385ba882c262607e5e1ed0c12ee2a40", 0x21}, {&(0x7f0000002300)="20d22e4dd5346762b3cfb78a96a6e913b348136e8a8dd08e50c43f921800c0", 0x1f}, {&(0x7f0000002340)}, {&(0x7f0000002380)="d9117a9e05ce4f5c09b3310d5164fd1e06eaed25e33151e0d13f35f5c54e66cd93bd4777d19c714d6b00f45caf943b13a37f658e231dc72ae8486c6e1859edcd5fd233225ae68fa1e2fd9b9c3aebedc0ae7ef2cf6eb063e98fcbcb26046ce7c8cde3153fcc10bcbf12425f56ae9546cb9c2f08c6ef322c30a952e519210e68095998ba3b9154deebcc258ebc5d5fe162329baaaabee4c3d2ff76e7fb8e4b4c8006f090ef242aa04eedcf8f49def15461b9e2d8242f69456672d6ad3eaaf35847b33cd69c427460aee6142844304f60737d425e3c3b781a44039d582be323ca6eeae972cd0118b13e1469", 0xea}], 0x8, &(0x7f0000002500)=[{0x18, 0x10b, 0x4, "735ee0"}, {0x40, 0x1ff, 0x6, "fdb04c5951bdb981260b56c6c67b3f003d097897ac96cafd29bcada66281b535c8ecd2563904bb1fefc83e8461cfa3"}, {0x18, 0x110, 0x6c3, "44db0311cd9f"}, {0xe0, 0x6, 0x10000, "1d224411653aa3ff45d60209da9db487b429eb16ae30b1d4e72ff199445f0737a095471662308ec008444d837ad3a09eeecd6cdd5e2ae03df0818d0d70342f5966fa77edf3c85871e271e5955aa1bc4ba4781e890afe564a0b78bdfd8b8eea63dcd8906a03de7428b60e4ff2660a5dc7a358fa1f017f9c9930bbaf857832b9692db98c0442dbbdfb6344f638804346aea87cc1ddbcec21b13b2d22baad6589832388d138fde02ac3507a1e0bfeb4bf4c98971d1fbc5c5f269bc020fa37318621b5b3bbeb2bb9a851366de6141752b0"}, {0xf0, 0x114, 0x6, "eb53fdf5c58253e4829e2039b9edd372a9866e28981417b763538777b03aaedbd21aacc7a5dba5fca7b05e7525c32b5c9296def220821f62185027c8e27727e2db1ad2aa4d028fb8a96b7829a683a03e05445463e635d05bbae1951ce3250b776cc33f0eb748bb3a3d305d0398d7112fef6ecfcb9451e8389c71bb28df93d5ce24256de3501160e757ed1396161b357c10ceed4011721f5c0632e73b17e93a809bb8ef77e9b1c003799a3ad82b85999a529dc076c68d9bef37dd8567b94807c937f72b423df3c941e3ad7c11d566cd70a87df5d36215dd32f1e0b84e"}, {0xe8, 0x18e, 0x10001, "f832fb691021cee04c59cb5205132e686d18e48cae882b18b5aadb9d704b72560fd6de5f914be1f055f74b05954d0fde4274b63d2c4cb36899e56001205df3d4a20a70a62994befdcbcaa749290ba2adf30aaf32de445167e85da56e60825c6c90e7d45fac74519f88c1352b033858a57bc2b22d61a3900643c9b5338a299955610380077f650d2373081b12c9155b1e145052de9760f4dcd53eededd9634e723f7100fee29db06bd9ad220c3c270e1808c2fbc508b579dc18068ed65989818c94f2ef7f646db4533c57de45568f1e2e59d72b"}, {0x90, 0x0, 0x7ff, "8eb7904f68d99edd626bf442cfbb5c7dd34039f7878a926359fe92e0d2abf27fe01066086f5d42ac258fdc9c0455f1abf0e4709263b7189599019ab68684df0a560926697c2983e6096f5f6453585e4d075e78c1120c824cf8477ad91bd3d6ce4bef0805c4305b384a6727e67ef71e3f194f34c8a631c624ccef"}, {0x70, 0x13f, 0x10000, "a317a2a92671cca8c17cee606d028860a49d7e86b87ee7bbf7c6b57b9f00d44c17756b61c94a418decddd9b3bbb65a3728d03badf6b7c6bc0c7d89751509f3f38abbc75f6f0d3b7b9e9a08537826c578ca3e83fb259cf5d17a913168"}], 0x428, 0x5}, 0x1000}], 0x2, 0x800) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x5) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000280)={{0x3f, @rand_addr=0x8, 0x4e21, 0x3, 'rr\x00', 0x24, 0x3e0, 0x49}, {@rand_addr=0x10000, 0x4e24, 0x7, 0x6, 0x2, 0xa5}}, 0x44) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) munlockall() pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x80000001, 0x6, 0x9, 0x1}, {0x4, 0x6a5b, 0x2, 0x5565}, {0xff, 0x4, 0x81, 0x1}, {0x140000, 0x4, 0x1f, 0x1}]}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') read(r5, &(0x7f0000000180)=""/230, 0xff4e) 2018/05/21 12:32:18 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001200)}]) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) [ 918.252572] device bridge_slave_1 left promiscuous mode [ 918.258495] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.313761] device bridge_slave_0 left promiscuous mode [ 918.319793] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:32:18 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r0, 0x1, &(0x7f0000000200)) 2018/05/21 12:32:18 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x800, 0x0) 2018/05/21 12:32:18 executing program 5: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_hci(r0, 0x0, 0x509728b8cb650071, &(0x7f00000000c0)=""/174, &(0x7f0000000280)=0x5c) recvfrom(r1, &(0x7f0000000180)=""/184, 0xb8, 0x1, 0x0, 0x0) 2018/05/21 12:32:18 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000840)={0x8, 0x1000, 0x8}) [ 918.545472] team0 (unregistering): Port device team_slave_1 removed [ 918.577040] team0 (unregistering): Port device team_slave_0 removed [ 918.631552] bond0 (unregistering): Releasing backup interface bond_slave_1 2018/05/21 12:32:18 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2000, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x14, 0x80000) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@dev, @in6=@ipv4={[], [], @multicast2}}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000200)=0xe8) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000000c0)={r2, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) modify_ldt$read(0x0, &(0x7f0000000240)=""/34, 0x22) 2018/05/21 12:32:18 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x20000000000001de, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200), 0x0, 0xfffffffffffffffc}]) write$sndseq(r0, &(0x7f00000002c0)=[{0x7fff, 0x2, 0xab, 0x1, @tick=0x4, {0x80, 0x8}, {0x1, 0x7}, @ext={0x95, &(0x7f0000000200)="2111fa128284eb56823b0ef9a35e6dd9e052d640780a6ddf423b0ed53c4bc52d9f38be21a580e078d14fa606a227d7545332491d296638025c11ea5b268c3a9c6dcd6ec59bbfbcb22061cce4dedf2ad37f7317e8b0e7a79101d5c26eea4e66fa6c61aa18d32466c60a56988889f14117a004049ae91de3f721523c5dd946eb974a2bb0fceec1145ea1a962f744232d05fe62b26830"}}, {0x1ff, 0x3, 0x2, 0xffc0000000000000, @tick=0x4, {0x6}, {0x20}, @note={0x0, 0xfffffffffffffffd, 0x1, 0x3, 0x9}}, {0x3, 0x8, 0x1000, 0x6, @time={0x77359400}, {0x101, 0xd87}, {0x9, 0xfff}, @result={0x1e5, 0x81}}, {0x8000, 0x1f, 0x8, 0xa4, @time={0x0, 0x1c9c380}, {0x8, 0x400}, {0x7fffffff, 0x1}, @result={0xfff, 0x100000000}}], 0xc0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f00000003c0)={0xfffffffffffffcfd, 0xdd}) rt_sigsuspend(&(0x7f0000000380)={0x3}, 0x8) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f00000001c0)={0x3, &(0x7f0000000080)=[0x8, 0x2, 0xffff]}) [ 918.695781] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 918.852330] IPVS: ftp: loaded support on port[0] = 21 [ 918.863406] bond0 (unregistering): Released all slaves [ 919.929127] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.935554] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.943154] device bridge_slave_0 entered promiscuous mode [ 919.980833] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.987269] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.994622] device bridge_slave_1 entered promiscuous mode [ 920.031204] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 920.068367] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 920.173402] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 920.212770] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 920.383377] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 920.390659] team0: Port device team_slave_0 added [ 920.427481] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 920.434775] team0: Port device team_slave_1 added [ 920.471545] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 920.508621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 920.547508] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 920.554839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 920.564002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 920.597753] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 920.605025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 920.614408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 920.982928] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.989355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 920.996154] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.002548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 921.010383] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 921.087259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 922.373807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 922.503883] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 922.635817] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 922.642246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 922.649775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 922.777794] 8021q: adding VLAN 0 to HW filter on device team0 [ 923.561223] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 923.572336] syz-executor2 cpuset=syz2 mems_allowed=0 [ 923.577626] CPU: 0 PID: 20997 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 923.585001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 923.594354] Call Trace: [ 923.596950] dump_stack+0x185/0x1d0 [ 923.600578] dump_header+0x2cc/0x16f0 [ 923.604373] ? is_console_locked+0x29/0x50 [ 923.608604] ? kmsan_report+0x4f/0x260 [ 923.612495] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 923.617956] ? ___ratelimit+0x67f/0x760 [ 923.621939] oom_kill_process+0x341/0x2160 [ 923.626169] ? mem_cgroup_scan_tasks+0x289/0x610 [ 923.630932] out_of_memory+0x1700/0x1da0 [ 923.634992] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 923.640364] ? _cond_resched+0x8b/0xd0 [ 923.644294] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 923.649490] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 923.654863] pagefault_out_of_memory+0x57/0x110 [ 923.659528] mm_fault_error+0x490/0x810 [ 923.663515] __do_page_fault+0x1272/0x1a10 [ 923.667761] ? page_fault+0x1e/0x30 [ 923.671377] do_page_fault+0xd3/0x260 [ 923.675191] ? page_fault+0x8/0x30 [ 923.678728] page_fault+0x1e/0x30 [ 923.682193] RIP: 0033:0x4071d8 [ 923.685372] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 923.690726] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 923.697989] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 923.705250] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 923.712512] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 923.720350] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 923.727907] Task in /syz2 killed as a result of limit of /syz2 [ 923.734150] memory: usage 804kB, limit 0kB, failcnt 984 [ 923.739609] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 923.746549] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 923.752786] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 923.772712] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 923.781538] [20997] 0 20997 17553 8394 118784 0 0 syz-executor2 [ 923.790457] Memory cgroup out of memory: Kill process 20997 (syz-executor2) score 8423000 or sacrifice child [ 923.800563] Killed process 20997 (syz-executor2) total-vm:70212kB, anon-rss:84kB, file-rss:33492kB, shmem-rss:0kB 2018/05/21 12:32:23 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000280)=0x2) accept(0xffffffffffffff9c, &(0x7f00000000c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, &(0x7f0000000180)=0x80) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r3, 0x9}, 0x8) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000040)="f29bed06d516e8fcb31fd1471c25e4f9", 0x10) 2018/05/21 12:32:23 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000840)={0x0, 0x1000, 0x8}) 2018/05/21 12:32:23 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[@ANYPTR64]]], 0xfffffffffffffdf3}, 0x1}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x80, 0x2) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000180)=0x60, 0x4) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x80000, 0x0) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000100)) r3 = gettid() fcntl$setown(r0, 0x8, r3) r4 = fcntl$dupfd(r0, 0x0, r0) close(r4) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x9) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000000c0)={0x80000000, 0x9800, 0x5, 0x7999, 0x2, 0x4}, 0xc) 2018/05/21 12:32:23 executing program 5: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x1b, 0x5}, &(0x7f0000000080)=0x0) timer_getoverrun(r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='eth0:%ppp1\'\x00') 2018/05/21 12:32:23 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:32:23 executing program 7: r0 = shmget(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r1, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0xfffffffffffffe7a, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x42}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) sendto(r1, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2300, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={0x0, r2, 0x0, 0x1}, 0x14) sendto(r1, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/05/21 12:32:23 executing program 2 (fault-call:2 fault-nth:5): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:32:23 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) r2 = fcntl$getown(r0, 0x9) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000200)=0x6, 0x4) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/cgroup\x00') io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@remote={0xfe, 0x80, [], 0xbb}, 0x3ff, 0x0, 0x2, 0x5, 0x687, 0x4c, 0x8}, 0x20) 2018/05/21 12:32:24 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000080)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000280)}, 0x2) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1=0xe0000001}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}, "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"}}}}}, 0x0) shutdown(r0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 2018/05/21 12:32:24 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000840)={0x0, 0x0, 0x8}) [ 924.061382] device bridge_slave_1 left promiscuous mode [ 924.067278] bridge0: port 2(bridge_slave_1) entered disabled state 2018/05/21 12:32:24 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xb0}, 0x1}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) [ 924.134352] device bridge_slave_0 left promiscuous mode [ 924.140257] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:32:24 executing program 1: syz_open_pts(0xffffffffffffffff, 0x200) io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r0, 0x0, &(0x7f0000001440)) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f00000001c0)=0x8, 0x4) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) r1 = syz_open_pts(0xffffffffffffffff, 0x400000) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f00000000c0)=0x4) [ 924.303329] team0 (unregistering): Port device team_slave_1 removed 2018/05/21 12:32:24 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000840)) [ 924.351794] team0 (unregistering): Port device team_slave_0 removed [ 924.388913] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 924.434186] bond0 (unregistering): Releasing backup interface bond_slave_0 2018/05/21 12:32:24 executing program 3: accept$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x14) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02030007ee0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a000000000000ecffffff00000000000000000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000200010000000900000000000000000005000500000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0xb0}, 0x1}, 0x0) [ 924.517040] bond0 (unregistering): Released all slaves 2018/05/21 12:32:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) perf_event_open$cgroup(&(0x7f0000000240)={0x5, 0x70, 0x1, 0x6, 0x80f, 0x99, 0x0, 0x8, 0x40, 0xe, 0x2, 0xb7, 0x7, 0x9, 0xffffffff, 0x90, 0x3, 0x3ff, 0xf75, 0x8, 0x2605, 0x1a, 0x0, 0x8, 0x80000000, 0x9, 0x8a4f, 0x100, 0x733, 0x3, 0x0, 0xfffffffffffffffd, 0x8, 0x7fffffff, 0x70000, 0x0, 0x48, 0xbb7, 0x0, 0xffffffffffffffff, 0x3, @perf_bp={&(0x7f0000000200), 0x3}, 0x80, 0x5, 0xfa6b, 0x6, 0xffffffffffff85ac, 0x33, 0x3}, r0, 0xc, r0, 0x1) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f00000002c0)={0x6, 0xffff}) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x5, 0xc0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f00000001c0)=""/27) 2018/05/21 12:32:24 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40e400, 0x0) bind$netlink(r1, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) nanosleep(&(0x7f0000000200)={0x0, 0x1c9c380}, &(0x7f0000000240)) listen(r0, 0xaa) [ 924.664706] IPVS: ftp: loaded support on port[0] = 21 [ 925.743772] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.750224] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.758535] device bridge_slave_0 entered promiscuous mode [ 925.796536] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.802976] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.810452] device bridge_slave_1 entered promiscuous mode [ 925.847897] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 925.884692] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 925.993587] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 926.033665] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 926.202371] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 926.209678] team0: Port device team_slave_0 added [ 926.246566] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 926.254000] team0: Port device team_slave_1 added [ 926.293338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 926.332951] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 926.371978] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 926.379405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 926.387886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 926.421533] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 926.428781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 926.438919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 926.811020] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.817473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 926.824304] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.830715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 926.838394] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 926.912888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 928.213292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 928.345642] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 928.476258] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 928.482529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 928.489918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 928.626260] 8021q: adding VLAN 0 to HW filter on device team0 [ 929.401677] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 929.412754] syz-executor2 cpuset=syz2 mems_allowed=0 [ 929.417983] CPU: 1 PID: 21313 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 929.425365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 929.434715] Call Trace: [ 929.437323] dump_stack+0x185/0x1d0 [ 929.440946] dump_header+0x2cc/0x16f0 [ 929.444742] ? is_console_locked+0x29/0x50 [ 929.448971] ? kmsan_report+0x4f/0x260 [ 929.452861] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 929.458321] ? ___ratelimit+0x67f/0x760 [ 929.462302] oom_kill_process+0x341/0x2160 [ 929.466530] ? mem_cgroup_scan_tasks+0x289/0x610 [ 929.471302] out_of_memory+0x1700/0x1da0 [ 929.475376] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 929.480753] ? _cond_resched+0x8b/0xd0 [ 929.484652] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 929.489840] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 929.495220] pagefault_out_of_memory+0x57/0x110 [ 929.499886] mm_fault_error+0x490/0x810 [ 929.503872] __do_page_fault+0x1272/0x1a10 [ 929.508110] ? page_fault+0x1e/0x30 [ 929.511733] do_page_fault+0xd3/0x260 [ 929.515527] ? page_fault+0x8/0x30 [ 929.519073] page_fault+0x1e/0x30 [ 929.522528] RIP: 0033:0x4071d8 [ 929.525710] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 929.531078] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 929.538341] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 929.545603] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 929.552862] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 929.560144] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 929.567602] Task in /syz2 killed as a result of limit of /syz2 [ 929.573837] memory: usage 804kB, limit 0kB, failcnt 992 [ 929.579292] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 929.586164] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 929.592393] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 929.612339] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 929.621247] [21313] 0 21313 17553 8392 114688 0 0 syz-executor2 [ 929.630175] Memory cgroup out of memory: Kill process 21313 (syz-executor2) score 8420000 or sacrifice child [ 929.640513] Killed process 21313 (syz-executor2) total-vm:70212kB, anon-rss:76kB, file-rss:33492kB, shmem-rss:0kB 2018/05/21 12:32:29 executing program 6 (fault-call:3 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000840)) 2018/05/21 12:32:29 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:32:29 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x3, 0x4, 0x9}, 0x10) fstat(r0, &(0x7f0000000540)) io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@mcast1, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000300)=0xe8) r3 = request_key(&(0x7f00000003c0)='rxrpc_s\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000440)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b", 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, r3) setuid(r2) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f00000001c0)={0x4, 0x6, 0x6, 0x2, 0x33, 0x9}) 2018/05/21 12:32:29 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) 2018/05/21 12:32:29 executing program 2 (fault-call:2 fault-nth:6): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:32:29 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02030000160000000004000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000000000000a1000000000000000000000000000000000000000400040000000000000000000000000092000200010000000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000ff00000000000000000000000000000000000000000000"], 0xb0}, 0x1}, 0x0) 2018/05/21 12:32:29 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) sendto(r0, &(0x7f00000000c0)='fc', 0x3b1, 0x20000000, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/05/21 12:32:29 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffeffffffff}, 0xa000003fe, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/05/21 12:32:29 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = msgget$private(0x0, 0x400) msgsnd(r0, &(0x7f0000000000)={0x3, "40846f337da4753ad0eea5440c124ef2401971e322b8975b4ef1b8e479b59ce8841c058dc5fd6b7cf3a8ebb43de6fcd66c81263d162ff74e80dc4f745703f27784d6015a73af162cbb535a5a5bdce7"}, 0x57, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f000025bfc8)={&(0x7f0000b9343a)={0x10}, 0xc, &(0x7f0000b4b000)={&(0x7f0000171fc4)=@ipv4_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff}, [@RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x24}, 0x1}, 0x0) [ 929.796659] rpcbind: RPC call returned error 22 [ 929.805753] rpcbind: RPC call returned error 22 2018/05/21 12:32:29 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="02030000160000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000ff0000000000000000038ed8715ab8f2c59f114acf6acd35660fe4f2b98df9e20650088a85a2739c2b33b2ead29adb6f6a52dc80cd56497c56fd0762d172564c785dfaff5e771e63ac0c0a15c6de3c62780b93d9b1d9ec7b"], 0xb0}, 0x1}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x801, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x16, &(0x7f0000000040)=""/169, &(0x7f0000000100)=0xa9) 2018/05/21 12:32:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") ioctl$TCFLSH(r0, 0x540b, 0x3) io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) [ 929.976147] device bridge_slave_1 left promiscuous mode [ 929.982016] bridge0: port 2(bridge_slave_1) entered disabled state 2018/05/21 12:32:30 executing program 5: getsockopt(0xffffffffffffffff, 0x400000000000003a, 0x1, &(0x7f0000000000)=""/188, &(0x7f0000000100)=0xfd0e) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = getpgrp(0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000000c0)=r1) 2018/05/21 12:32:30 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000840)) socket$inet_sctp(0x2, 0x1, 0x84) [ 930.031619] device bridge_slave_0 left promiscuous mode [ 930.037478] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:32:30 executing program 5: r0 = socket(0x2, 0x4, 0x40000000000000ff) bind(r0, &(0x7f0000000000)=@nfc={0x27, 0x1}, 0x80) 2018/05/21 12:32:30 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) [ 930.243394] team0 (unregistering): Port device team_slave_1 removed 2018/05/21 12:32:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) r2 = inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x304) inotify_rm_watch(r0, r2) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) [ 930.293804] team0 (unregistering): Port device team_slave_0 removed [ 930.365236] bond0 (unregistering): Releasing backup interface bond_slave_1 2018/05/21 12:32:30 executing program 6: socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x400000000000, r0, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) socket$l2tp(0x18, 0x1, 0x1) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000840)) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000080)={0x2, "26c7"}, 0x3) connect$rds(r0, &(0x7f00000001c0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) [ 930.445591] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 930.599409] bond0 (unregistering): Released all slaves [ 930.670456] IPVS: ftp: loaded support on port[0] = 21 [ 931.577709] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.584193] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.591796] device bridge_slave_0 entered promiscuous mode [ 931.629797] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.636272] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.643747] device bridge_slave_1 entered promiscuous mode [ 931.680697] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 931.718017] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 931.824964] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 931.864737] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 932.033821] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 932.041271] team0: Port device team_slave_0 added [ 932.077152] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 932.084637] team0: Port device team_slave_1 added [ 932.121370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 932.160963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 932.199388] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 932.206590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 932.215795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 932.248440] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 932.255684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 932.264883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 932.636173] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.642615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 932.649384] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.655799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 932.663464] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 932.735254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 934.057711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 934.193925] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 934.328747] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 934.335010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 934.343368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 934.469978] 8021q: adding VLAN 0 to HW filter on device team0 [ 935.252189] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 935.263256] syz-executor2 cpuset=syz2 mems_allowed=0 [ 935.268517] CPU: 0 PID: 21653 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 935.275934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 935.285310] Call Trace: [ 935.287917] dump_stack+0x185/0x1d0 [ 935.291565] dump_header+0x2cc/0x16f0 [ 935.295377] ? is_console_locked+0x29/0x50 [ 935.299617] ? kmsan_report+0x4f/0x260 [ 935.303517] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 935.308994] ? ___ratelimit+0x67f/0x760 [ 935.313074] oom_kill_process+0x341/0x2160 [ 935.317335] ? mem_cgroup_scan_tasks+0x289/0x610 [ 935.322115] out_of_memory+0x1700/0x1da0 [ 935.326184] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 935.331567] ? _cond_resched+0x8b/0xd0 [ 935.335469] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 935.340673] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 935.346053] pagefault_out_of_memory+0x57/0x110 [ 935.350729] mm_fault_error+0x490/0x810 [ 935.354720] __do_page_fault+0x1272/0x1a10 [ 935.358957] ? page_fault+0x1e/0x30 [ 935.362575] do_page_fault+0xd3/0x260 [ 935.366365] ? page_fault+0x8/0x30 [ 935.369908] page_fault+0x1e/0x30 [ 935.373357] RIP: 0033:0x4071d8 [ 935.376533] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 935.381888] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 935.389151] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 935.396411] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 935.403667] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 935.410927] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 935.418693] Task in /syz2 killed as a result of limit of /syz2 [ 935.424844] memory: usage 804kB, limit 0kB, failcnt 1000 [ 935.430371] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 935.437194] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 935.443410] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 935.463353] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 935.472241] [21653] 0 21653 17553 8393 118784 0 0 syz-executor2 [ 935.481163] Memory cgroup out of memory: Kill process 21653 (syz-executor2) score 8422000 or sacrifice child [ 935.491263] Killed process 21653 (syz-executor2) total-vm:70212kB, anon-rss:80kB, file-rss:33492kB, shmem-rss:0kB [ 935.518975] oom_reaper: reaped process 21653 (syz-executor2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 2018/05/21 12:32:35 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x20401) sendfile(r0, r0, 0x0, 0x8) r2 = openat$cgroup_type(r1, &(0x7f0000000140)='cgroup.type\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000d00)={{{@in=@loopback, @in6=@ipv4={[], [], @multicast2}}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@multicast2}}, &(0x7f0000000e00)=0xe8) sendto(r1, &(0x7f0000001000)="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", 0xff, 0x40, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x4, 0x4, 0x3, {0xa, 0x4e20, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0x8001}}}, 0x80) io_setup(0x6, &(0x7f00000003c0)=0x0) io_submit(r3, 0x3, &(0x7f0000000700)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x7000000000000000, r1, &(0x7f0000000400)="c5", 0x1, 0x101, 0x0, 0x1, r1}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x8, r1, &(0x7f0000000480)="fabaf6287b6cc2a46c6d65dedb174caa521f3ed066fe324a2392855c634953e2e48e9c648cd516651a413dd095a24ef66922769d3e4bc9168e139172ab7354eede14bb146dcae3ee977360ec7e41de95659cc3cea8ff76d624e15b9b1993a6f1c5468fd0347256ad6ea9a6c1417dc7a1bbe7d7ae3552b89fb17178f7c77fb818576fe0a673805d2aaf6f3709f9e57a87eba410259088c88a1b115310dccdc3dd91ed03884bfa2aab172c9f52e04859341b725c68d13a7f8a89a49faf612f03190192a193217d9c719159a0603611bcc0160b", 0xd2, 0xffffffffffffff7f, 0x0, 0x380054da199a6646, r1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x7, r1, &(0x7f00000005c0)="5d5e25a4fb65baa8ff14f2ea48af43c3a4885fdd799d42447166dd07c9bd9a7c82ec1aa50a959f5a04e4b157089124d0c7a605e46223cd62986d800a2ffe6b3c56268001f9c27b0230f9f56a3a02e6829539110303549846e31213531c9590e31490970fb99c97ee556049b277eead2018a9cb3a6342e99e85572e75ee730ea824426f667f0cc3a3b23380d9ac650ede6069acce62cf2ac043e6663d5b3944b0a1263bae1c018233f43247bf7b3ef9fb6603a8d5099f66e2c38a5f707db7768e7f2c416d91a0b1001cb5e44991ca8dc46257c0d9b2e983ea17b9149d", 0xdc, 0xfffffffffffffff8, 0x0, 0x1, r1}]) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000007c0)={0x0, @in={{0x2, 0x4e21, @broadcast=0xffffffff}}, [0x5, 0xef8, 0xffff, 0x6, 0x80000001, 0xffffffffffffff80, 0x2, 0x5, 0x8000, 0x8001, 0xffffffffffffec43, 0x5, 0x200, 0x0, 0x10000000]}, &(0x7f00000008c0)=0x100) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000ac0)={r4, 0x2b, "13f89f981bf665466ae75acec0bb3f717fa59081141e9f4aa379922277182e8f774ad3dae9ecff5acb44fc"}, &(0x7f0000000b00)=0x33) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000900)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000000a00)=0xe8) sendto(r1, &(0x7f0000000740)="3416d67d00fdddad837c1d4587e973881e0426b2da1de3121c1be101a06a6175b52b949a6b1a0c084a03a638554df0c44541881343e19103d8a4436d3aa53412e69fd3fe2460c9810cbc", 0x4a, 0x4, &(0x7f0000000a40)=@ll={0x11, 0x7, r5, 0x1, 0x8, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x80) 2018/05/21 12:32:35 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02030000160000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000040069cdffffc7ee00000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000ff000000000000"], 0xb0}, 0x1}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2018/05/21 12:32:35 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x1, 0x2000) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000001c0)="d64e9484fe0d907745dae00e0b0cbb02223ee91d00f6620bc273c6c05bab62a789e7d6b1f78d80d7a3235be573a1f47fe0ab2a6016921ae0ed1db7619528a4649a013c3b25c12d63e557911f5026b991b3b1b99079f5927479a380998658f4b758a347ed0ecd9d8673f8037e5451d2232af53123ddab6336431c"}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x20000008001, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000001200)}]) 2018/05/21 12:32:35 executing program 4: openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000004c0)=""/185) semtimedop(0x0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) r2 = semget(0x0, 0x1, 0x4) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x0]) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x8, &(0x7f0000000040)=[{0x5, 0x9, 0x1d, 0x4d9}, {0x200, 0x5, 0x80000001, 0x3af1}, {0x1, 0x7, 0x2, 0x8000}, {0x101, 0xba, 0x10000, 0x401}, {0x2, 0x8, 0xfffffffffffffffd, 0x4}, {0x0, 0x10001, 0x9, 0x2}, {0x7, 0x1, 0xd1, 0x6}, {0x1, 0x7ff, 0x3, 0x3}]}, 0x10) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000000)=0xfffffffdfffffffa, &(0x7f0000000240)=0x4) 2018/05/21 12:32:35 executing program 6: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f00000001c0)={0x6, 0x7, 0x2, 0x8, 0x1940000000000000, 0x6, 0x10001, 0x0, 0x0}, &(0x7f0000000200)=0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240)={r1, 0x6}, &(0x7f0000000280)=0x8) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r3, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1, r2}]) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r2, &(0x7f0000001200)}]) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000840)) 2018/05/21 12:32:35 executing program 2 (fault-call:2 fault-nth:7): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:32:35 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:32:35 executing program 5: 2018/05/21 12:32:35 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x402000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000040)={0x1, 0x0, 0x6}) fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000180)={@mcast2={0xff, 0x2, [], 0x1}}, 0x1) 2018/05/21 12:32:35 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) fcntl$setflags(r0, 0x2, 0x1) semget$private(0x0, 0x7, 0x2) r1 = semget$private(0x0, 0x20000000104, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r1, &(0x7f0000000000)=[{0x0, 0x976}], 0x1, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x8, 0x7, 0xffffffff, 0x6, 0x0]) 2018/05/21 12:32:35 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02030000160000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000400040000000000000000000000000000000000000000000c000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0xb0}, 0x1}, 0x0) 2018/05/21 12:32:35 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000002c0)=0x2, 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) io_setup(0x8001, &(0x7f0000000000)=0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000680), &(0x7f00000006c0)=0x4) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000300)={0x6c70, {{0xa, 0x4e21, 0x101, @local={0xfe, 0x80, [], 0xaa}, 0x280}}}, 0x88) syz_genetlink_get_family_id$fou(&(0x7f0000000640)='fou\x00') getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000400)={'nat\x00', 0x0, 0x3, 0xa9, [], 0x1, &(0x7f00000003c0)=[{}], &(0x7f00000004c0)=""/169}, &(0x7f0000000580)=0x78) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000080)={'veth1_to_bond\x00', {0x2, 0x4e23, @multicast1=0xe0000001}}) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000480)={r3, 0xfb3}, 0x8) io_setup(0x10003, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r3, 0x81}, &(0x7f0000000180)=0x8) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f00000005c0)) [ 935.893923] device bridge_slave_1 left promiscuous mode [ 935.899813] bridge0: port 2(bridge_slave_1) entered disabled state 2018/05/21 12:32:35 executing program 5: r0 = socket(0x2000000000100014, 0x802, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) write(r0, &(0x7f0000f87000)="240000001a0025f0006b000420bbfc00020b00ff00090000002d00eb08001900000000b7", 0x24) socket$bt_hidp(0x1f, 0x3, 0x6) 2018/05/21 12:32:35 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x208003, &(0x7f00000003c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000840)) timer_create(0x3, &(0x7f0000000080)={0x0, 0xa, 0x57372399ef81d4fb, @tid=0xffffffffffffffff}, &(0x7f00000001c0)=0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) wait4(r3, &(0x7f0000000300), 0x9, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000280)={{r4, r5+10000000}, {r6, r7+10000000}}, &(0x7f00000002c0)) 2018/05/21 12:32:35 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/20, 0x14) r1 = memfd_create(&(0x7f00000000c0)='/dev/vhost-net\x00', 0x2) ioctl$void(r1, 0x5451) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) socket$bt_bnep(0x1f, 0x3, 0x4) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) [ 935.951681] device bridge_slave_0 left promiscuous mode [ 935.957566] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:32:36 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x602841, 0x0) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000040)="5ea235718f", 0x5) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) [ 936.149747] team0 (unregistering): Port device team_slave_1 removed [ 936.175889] team0 (unregistering): Port device team_slave_0 removed [ 936.214502] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 936.255213] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 936.346809] bond0 (unregistering): Released all slaves [ 936.953708] IPVS: ftp: loaded support on port[0] = 21 [ 937.525673] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.532152] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.539587] device bridge_slave_0 entered promiscuous mode [ 937.577117] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.583571] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.590958] device bridge_slave_1 entered promiscuous mode [ 937.627815] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 937.665195] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 937.770782] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 937.811338] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 937.979208] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 937.986956] team0: Port device team_slave_0 added [ 938.023154] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 938.030765] team0: Port device team_slave_1 added [ 938.067681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 938.107584] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 938.146474] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 938.153755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 938.162210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 938.196535] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 938.203787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 938.212340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 938.581655] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.588130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 938.594903] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.601314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.608952] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 938.623280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 940.037943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 940.177781] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 940.310364] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 940.316712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 940.325428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 940.456116] 8021q: adding VLAN 0 to HW filter on device team0 [ 941.253677] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 941.264784] syz-executor2 cpuset=syz2 mems_allowed=0 [ 941.270071] CPU: 1 PID: 21966 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 941.277459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 941.288030] Call Trace: [ 941.290661] dump_stack+0x185/0x1d0 [ 941.294284] dump_header+0x2cc/0x16f0 [ 941.298085] ? is_console_locked+0x29/0x50 [ 941.302322] ? kmsan_report+0x4f/0x260 [ 941.306223] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 941.311687] ? ___ratelimit+0x67f/0x760 [ 941.315670] oom_kill_process+0x341/0x2160 [ 941.319952] ? mem_cgroup_scan_tasks+0x289/0x610 [ 941.324724] out_of_memory+0x1700/0x1da0 [ 941.328795] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 941.334165] ? _cond_resched+0x8b/0xd0 [ 941.338078] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 941.343265] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 941.348649] pagefault_out_of_memory+0x57/0x110 [ 941.353312] mm_fault_error+0x490/0x810 [ 941.357298] __do_page_fault+0x1272/0x1a10 [ 941.361534] ? page_fault+0x1e/0x30 [ 941.365167] do_page_fault+0xd3/0x260 [ 941.368962] ? page_fault+0x8/0x30 [ 941.372493] page_fault+0x1e/0x30 [ 941.375947] RIP: 0033:0x4071d8 [ 941.379135] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 941.384498] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 941.391776] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 941.399051] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 941.406338] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 941.413613] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 941.421368] Task in /syz2 killed as a result of limit of /syz2 [ 941.427605] memory: usage 804kB, limit 0kB, failcnt 1008 [ 941.433186] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 941.440019] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 941.446239] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 941.466179] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 941.475003] [21966] 0 21966 17553 8393 118784 0 0 syz-executor2 [ 941.483938] Memory cgroup out of memory: Kill process 21966 (syz-executor2) score 8422000 or sacrifice child [ 941.494151] Killed process 21966 (syz-executor2) total-vm:70212kB, anon-rss:80kB, file-rss:33492kB, shmem-rss:0kB [ 941.521921] oom_reaper: reaped process 21966 (syz-executor2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 2018/05/21 12:32:41 executing program 5: 2018/05/21 12:32:41 executing program 4: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400000) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000180)={&(0x7f0000000100)=[0x3ff, 0x0, 0x9, 0x8000], 0x4, 0x9, 0x919, 0x6, 0x100000001, 0x6, {0x4, 0xe03, 0xfd, 0x8, 0x9, 0x1ff, 0x2, 0x8, 0x401, 0x3, 0x3f, 0x9, 0x5, 0x0, "bf52dd699589b27993a8ba9fa6525f187a156d6edb600ab25674e915bcb873d2"}}) r1 = semget$private(0x0, 0x20000000104, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r1, &(0x7f0000000000)=[{0x3, 0x7, 0x1800}, {0x0, 0x1000}, {0x0, 0x7, 0x1000}, {0x0, 0x0, 0x800}, {0x3, 0x0, 0x1000}, {0x0, 0x10001, 0x1000}, {0x3, 0x2, 0x1000}, {0x2, 0xcf81, 0x800}], 0x8, &(0x7f0000000040)={0x77359400}) ioctl$TCSBRK(r0, 0x5409, 0x5) semtimedop(r1, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000140)) 2018/05/21 12:32:41 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000080)) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="4626262c8523bf012cf66f") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x4}, 0x8) listen(r3, 0x0) sendto$inet6(r2, &(0x7f00004e8000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) close(r2) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/05/21 12:32:41 executing program 6: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1}]) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f00000001c0)={0x400, 0x7}) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000001200)}]) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000840)) 2018/05/21 12:32:41 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) ioctl$void(r0, 0x0) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x4000) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000080)=0x200, &(0x7f00000000c0)=0x1) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000040)) 2018/05/21 12:32:41 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:32:41 executing program 2 (fault-call:2 fault-nth:8): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:32:41 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp6\x00') io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:32:41 executing program 5: [ 941.771368] device bridge_slave_1 left promiscuous mode [ 941.777353] bridge0: port 2(bridge_slave_1) entered disabled state 2018/05/21 12:32:41 executing program 5: [ 941.830590] device bridge_slave_0 left promiscuous mode [ 941.836556] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:32:41 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x0, &(0x7f0000000400)=0x0) r2 = getpgid(0xffffffffffffffff) sched_setscheduler(r2, 0x0, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x3ff}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={r3, @in={{0x2, 0x4e24, @multicast1=0xe0000001}}, 0x6, 0x63ac}, 0x90) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000440)}]) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000080)={0xffffffffffffffff, 0x9da1, 0x0, 0x20, 0x9, 0x3}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0x10000, 0x0, 0x6, 0x8080, 0x0}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r4, 0x8000}, &(0x7f0000000280)=0x8) 2018/05/21 12:32:41 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x400, 0x940) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000100)={[], 0x3ff, 0x0, 0x100000000, 0x7, 0x2, r2}) socket$inet_tcp(0x2, 0x1, 0x0) 2018/05/21 12:32:41 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000240)={r2, 0x9d}, 0x8) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x7f, 0x40000) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000840)) 2018/05/21 12:32:42 executing program 5: [ 942.040191] team0 (unregistering): Port device team_slave_1 removed 2018/05/21 12:32:42 executing program 1: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000380)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f00000000c0)='X\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0xf}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={r1, 0x6, 0x1, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="3c55d6511437", "7663616e30e600"}}, 0x1e) [ 942.116908] team0 (unregistering): Port device team_slave_0 removed 2018/05/21 12:32:42 executing program 5: [ 942.170834] bond0 (unregistering): Releasing backup interface bond_slave_1 2018/05/21 12:32:42 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x98d8, 0x2) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x200, 0x70bd27, 0x25dfdbfb, {0x10}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x1c}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="02030000160000000000000000000000040003000000000000000000000000000000008e000000000000678c9ea36cf281308b9b1068a97e00000000000005000200000000000a00fcc479da78ca69c600000000000000000000000000000000030004000000000000000000000000000000000000000000000000000061496811368c7a0f0000000000000000050000000000fe8200000000000000000000000000ff0000000000000000000000000000000000000000"], 0xb0}, 0x1}, 0x0) [ 942.231768] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 942.383021] bond0 (unregistering): Released all slaves [ 942.469635] IPVS: ftp: loaded support on port[0] = 21 [ 942.500728] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 943.400585] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.407119] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.414472] device bridge_slave_0 entered promiscuous mode [ 943.451776] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.458248] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.465708] device bridge_slave_1 entered promiscuous mode [ 943.502747] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 943.540570] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 943.649814] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 943.690041] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 943.863812] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 943.871360] team0: Port device team_slave_0 added [ 943.908547] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 943.915859] team0: Port device team_slave_1 added [ 943.953839] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 943.994576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 944.033554] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 944.040831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 944.049991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 944.082763] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 944.090177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 944.099297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 944.474859] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.481318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 944.488146] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.494581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 944.502276] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 944.577813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 945.921261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 946.053117] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 946.185410] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 946.191660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 946.199198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 946.329418] 8021q: adding VLAN 0 to HW filter on device team0 [ 947.130573] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 947.141712] syz-executor2 cpuset=syz2 mems_allowed=0 [ 947.147043] CPU: 1 PID: 22289 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 947.154422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 947.163780] Call Trace: [ 947.166376] dump_stack+0x185/0x1d0 [ 947.170006] dump_header+0x2cc/0x16f0 [ 947.173812] ? is_console_locked+0x29/0x50 [ 947.178046] ? kmsan_report+0x4f/0x260 [ 947.181959] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 947.187426] ? ___ratelimit+0x67f/0x760 [ 947.191409] oom_kill_process+0x341/0x2160 [ 947.195642] ? mem_cgroup_scan_tasks+0x289/0x610 [ 947.200417] out_of_memory+0x1700/0x1da0 [ 947.204485] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 947.209876] ? _cond_resched+0x8b/0xd0 [ 947.213785] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 947.218985] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 947.224363] pagefault_out_of_memory+0x57/0x110 [ 947.229038] mm_fault_error+0x490/0x810 [ 947.233039] __do_page_fault+0x1272/0x1a10 [ 947.237314] ? page_fault+0x1e/0x30 [ 947.240968] do_page_fault+0xd3/0x260 [ 947.244775] ? page_fault+0x8/0x30 [ 947.248315] page_fault+0x1e/0x30 [ 947.251772] RIP: 0033:0x4071d8 [ 947.254950] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 947.260337] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 947.267632] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 947.275017] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 947.282286] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 947.289551] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 947.297311] Task in /syz2 killed as a result of limit of /syz2 [ 947.303412] memory: usage 804kB, limit 0kB, failcnt 1016 [ 947.308955] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 947.315880] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 947.322146] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 947.342139] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 947.351005] [22289] 0 22289 17553 8392 114688 0 0 syz-executor2 [ 947.359921] Memory cgroup out of memory: Kill process 22289 (syz-executor2) score 8420000 or sacrifice child [ 947.370129] Killed process 22289 (syz-executor2) total-vm:70212kB, anon-rss:76kB, file-rss:33492kB, shmem-rss:0kB 2018/05/21 12:32:47 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(0xffffffffffffffff, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:32:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:32:47 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="020300001600000029bd700000000000040003000000000000008000000000000000000000000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000020fe8000000000000000000000000000ff0000000000000000"], 0xb0}, 0x1}, 0x0) 2018/05/21 12:32:47 executing program 2 (fault-call:2 fault-nth:9): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:32:47 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) r2 = socket$bt_rfcomm(0x1f, 0x3, 0x3) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0xb, 0x0, r2, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0xfffffffffffffffe}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000840)) fchmodat(r0, &(0x7f0000000080)='./file0\x00', 0x0) 2018/05/21 12:32:47 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c081, &(0x7f0000000200)=@un=@abs, 0x80) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x8001, 0x0) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/05/21 12:32:47 executing program 5: 2018/05/21 12:32:47 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x6, 0x4, 0x5, 0xfffffffffffff84b]) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x80000, 0x0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f00000000c0)) 2018/05/21 12:32:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfffffffffffffffc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 2018/05/21 12:32:47 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(0xffffffffffffffff, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) [ 947.680216] device bridge_slave_1 left promiscuous mode [ 947.686289] bridge0: port 2(bridge_slave_1) entered disabled state 2018/05/21 12:32:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x800000018, &(0x7f0000001280)=0x503, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x800}]}, 0x10) sendmsg(r0, &(0x7f0000001440)={&(0x7f0000000140)=@in6={0xa, 0x4e21}, 0x80, &(0x7f00000010c0)}, 0x8000) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000240)="e694446313bf3fbb7da9fb7044d8d6bb7449171c7a0931f0465c2412cf80f5d557ceb62420f506ae868cac9ead69705ec96964f2ec4effd0c769d94debe11981cdf2a8a7994841b3bfa645b1cfa3879d6e3b1eacf164664d692f951d2d2f323df5c384294c059b4824ef9e3559e0ca12b114d17007978d7427d2427722cbd55690b6d2c53b43731d5eefeecdaf5b00f06fcb1bf690843fbc1e68cc725d256da47e593beb1f00328f79adc639bf9f8ff7a9dad39f52e0d12a1d074bd08969c4077fbc4be4a6d06f545cdea6d3024988b688bb7fe8a543e710684a830c2092d506f7a8c70b970c424e04722358f032204af7de5a7ee2fa11d17c00385fd95432ea5b4d93678dcdf0f09aca1a4e842c1570d8d53e481362d0e9f661ad20db9f7b0409c862be90feccad089349ca6bdd09b957006b3b22b62f13c721396efba767cecadb5a9bcf18f093b0e0aaa42e479b397ce0db2bf0efeb2435742523a5a2ffc4c3dc1e86162eab1431665eeecc098e7ad859d6f859b3d41bf32362699172f88a58560eb4cd837443363dd6c5d93aa3818d7b549a206040e781807d95f0dd810ab475a5007e2d6178180d3cdda9896aa51236451bffe19de27f73eb1b671f097cc2dba1bc0f4b7c51b7452f6e570b0152fb853c157f86d6a733942aa72a440f52dab3978ae8ee73147d9fa9b7a164ea737dc6b0e0eb8bbef9aa67288d38aa1274a22510b1dfa5bdf4016c6fcaa243f9b02912332397272c535f4603aef9c77f16f34b048e3df04b32eb83375cf9b740e6b6d51963499173b565ebe3856090c2e9df95e5f52ef2068a09365f0f241ce18356aca0b08888f1188205135ddd9d9781cec144eeeb30ab68cd31e46afc7c5d730edbf9988f481ff17055782d6ec1dee6488f7ef6ed60615aa8a0c10fd201d0c1f3bc48fb03cd533bac108ac1a7f3bc71743622eee36213008ec7314d39787aef46d3229765e57acba8ae2b6a0ddbc75f68976092219a29c2d11ea845fb3232ba90934ba9549dbfa323fabd51392c619109ce4b7759f2a335972262d9032b357f1df5aa280e27aa917c4a1107dd0e0968ccb9b1d0e11d1a38a670a1e82dc7a2bc4f75c46292b0d0dbfb4d3df934674a786c75f6d9f4067c8832061a06f7827e07d17334a9d12400b37d6f8f58eecfbe388e7ee1b1708bdf78288844d4b780dab9c83914c7ef40c4828a4296386356073cd0ea142d7e78798ce39c53978af30d6f570c0a5850bb19a1ca7b51c0097780673c719a89975bf52884ba20e30b777a36e6b3cba1ad1c73297ce20ebcb739d09b9c4e581713f461041c57b4b909422d38514f6112ddce864975b4ead6ef383d3ecb645938c611f9ac32069cf8749b559fb93f8fb945f5b51de634873ab7f4bc8b119f48192dc8e1f5e0f9c0978cddadef0d5e686bd89ada25b514b753b78436eaf4c3f6295570a0c39fb927ba9147b41b9f12d4b0b17f009aab928c080837436498f131d4ad0e0187212bbb940435b946fea98a755fcaadb01d5cae454b06d459bb69fd1d9745397d52262630bcd8423bfe3f5fcc3c2e8589e050167c7fcaf57cdfd9eaf36dad34c6effa0d387c5d06314e030eab55aacbd8d3e74a4d5f0a0901bb5b9b47489bed052401d74b774a5d373d55d4e31a0b115a13683f8174ce6159cccba8fa93b3a77d5fdbf132d998bc26483dfee0a0050ce30a30b49156a0c4fbfa963d4d428937537b591fe6524dac4b19c4fde980e5036902ab340bb953819d2f38357c1aa74f5ebda7435a3c88b5af48599b4ce781048e056abb678a484e21252f4c4ccdeb9b69ece762f1cc32737dbd175a5c0ed03c4872cb24349658a61cb2ffa5f54bdb41d2b854d8873b3af1d4f8e39a85716db12581de7df4c065c7c3144921e467030045d28036b1718186f24e66910c4542d6b5c8642e033fc6410ff4b00f40ea57662bfa81394344218744f1a33b7ca43d8930132cf3419fc7d673a644dd02b1d133fedfeded41d0de12db74f0056c6c484f6a74b459c51a3683ecb51e07456efa8339e2573cf7014e872a93e193983a583631c0f5135588e1d48d105c6a7c581a92f0805ec83f85640f1b0804ee8e085c2a01cecd19295dd3b5e8bdb44d9545760e8724228e3f8234896851fad9e3988dd1cb40cc64fa930c2352fea071ae40488521e5ba23c4aab781a07187422a1a5435101ed7be522a09703fe2174f216d087c6e4f0ec398d0ebf8605b42b9eaea01f82706408e8f7bf7c6037441fdc84d5362911f417509d26e55d4217cb5f97f4228b5598ad4ed36a76b7ab5458fe67de606766fef1fbf4af3e2e122c960c0bfeaf212be868a417a88861f362377e98aa6c5aa5ccec0f777590dd51c31ba3ccd5f81515a8d333848a437cd44720e9db2a5c5a1919be5169e5d72812b14eb4373f384648af8d4bcc2f7ca66037dd401466f1e262ccd2d90b28f1223901e08bf2624f365d7caab28498e65cb77a34b3629f6614f03a5189173bb0bf23e919768a056d021f064a4020de48e5634f9f46d963f0b31a731fe3e9250326b8ffc8012b44d2c90519a4b79646eb37b36aed484b351a8b0693dbd119fd6558a03e000d00670727e1983197dec5288279891bed3923a5fb6cf499aca1731a70e5d0f8ee44951e168fbdaa9005220907a046ec983e41aab159dbc7ba020a925299110a19eb6b92f78419324b517f11095e0c7beac9c01bdab66960ec57c6c5d7e03d1a8e9563ccb4689d9c3815d3e1c211f3d152240cda453d1913ea4bace978633d57f53e0895b8e05c09e24dce06d67313a55d59bda1f7ee6c33c18dd493cbc0a", 0x7d1}], 0x1, &(0x7f00000036c0)}, 0x0) 2018/05/21 12:32:47 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x0, &(0x7f0000000800)) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000840)) [ 947.751555] device bridge_slave_0 left promiscuous mode [ 947.757456] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:32:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfffffffffffffffc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 2018/05/21 12:32:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000080)={0x1, 0x2, 0x80000001, 0x0, 0x2ead, 0x2800000000000, 0x7fffffff, 0x8, 0x7fff, 0x0, 0x9}) io_setup(0x8001, &(0x7f0000000000)=0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000002c0)=0x3ff, 0x4) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000001c0)=""/248) 2018/05/21 12:32:47 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(0xffffffffffffffff, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:32:48 executing program 3: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4c, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x200007f8, &(0x7f00000008c0)={0x2}, 0x10) shutdown(r0, 0x0) [ 947.994386] team0 (unregistering): Port device team_slave_1 removed [ 948.079775] team0 (unregistering): Port device team_slave_0 removed [ 948.141790] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 948.211206] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 948.325738] IPVS: ftp: loaded support on port[0] = 21 [ 948.330247] bond0 (unregistering): Released all slaves [ 949.173957] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.180544] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.188300] device bridge_slave_0 entered promiscuous mode [ 949.246272] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.252766] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.260301] device bridge_slave_1 entered promiscuous mode [ 949.313615] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 949.355775] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 949.464369] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 949.506292] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 949.546053] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 949.553181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 949.593128] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 949.600214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 949.711693] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 949.719909] team0: Port device team_slave_0 added [ 949.758864] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 949.766634] team0: Port device team_slave_1 added [ 949.805543] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 949.847155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 949.887660] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 949.894964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 949.903496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 949.939318] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 949.946596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 949.955302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 950.343635] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.350126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 950.356902] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.363307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 950.371002] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 950.495255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 951.783836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 951.920938] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 952.054168] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 952.060683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 952.068954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 952.197587] 8021q: adding VLAN 0 to HW filter on device team0 [ 952.993432] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 953.004560] syz-executor2 cpuset=syz2 mems_allowed=0 [ 953.009878] CPU: 0 PID: 22608 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 953.017256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 953.026625] Call Trace: [ 953.029252] dump_stack+0x185/0x1d0 [ 953.032889] dump_header+0x2cc/0x16f0 [ 953.036704] ? is_console_locked+0x29/0x50 [ 953.040977] ? kmsan_report+0x4f/0x260 [ 953.044887] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 953.050449] ? ___ratelimit+0x67f/0x760 [ 953.054444] oom_kill_process+0x341/0x2160 [ 953.058690] ? mem_cgroup_scan_tasks+0x289/0x610 [ 953.063466] out_of_memory+0x1700/0x1da0 [ 953.067537] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 953.072922] ? _cond_resched+0x8b/0xd0 [ 953.076828] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 953.082017] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 953.087397] pagefault_out_of_memory+0x57/0x110 [ 953.092114] mm_fault_error+0x490/0x810 [ 953.096160] __do_page_fault+0x1272/0x1a10 [ 953.100415] ? page_fault+0x1e/0x30 [ 953.104052] do_page_fault+0xd3/0x260 [ 953.107871] ? page_fault+0x8/0x30 [ 953.111411] page_fault+0x1e/0x30 [ 953.114873] RIP: 0033:0x4071d8 [ 953.118078] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 953.123443] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 953.130708] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 953.137970] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 953.145235] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 953.152498] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 953.160217] Task in /syz2 killed as a result of limit of /syz2 [ 953.166532] memory: usage 804kB, limit 0kB, failcnt 1024 [ 953.172097] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 953.178914] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 953.185159] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 953.205286] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 953.214152] [22608] 0 22608 17553 8393 114688 0 0 syz-executor2 [ 953.223105] Memory cgroup out of memory: Kill process 22608 (syz-executor2) score 8421000 or sacrifice child [ 953.233199] Killed process 22608 (syz-executor2) total-vm:70212kB, anon-rss:80kB, file-rss:33492kB, shmem-rss:0kB 2018/05/21 12:32:53 executing program 1: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0xffffffffffffff9c, 0x7, 0x0, 0x7, &(0x7f0000000200)=[0x0, 0x0], 0x2}, 0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000280)={0x10000, 0x200, 0x0, 0x3, 0x0}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={r1, 0x4}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") signalfd(r2, &(0x7f0000000080)={0x20}, 0x8) io_setup(0x8001, &(0x7f0000000000)=0x0) openat(r2, &(0x7f00000001c0)='./file0\x00', 0x80, 0x2) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r2, &(0x7f0000001200)}]) 2018/05/21 12:32:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfffffffffffffffc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 2018/05/21 12:32:53 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:32:53 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f00000000c0)) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) fcntl$notify(r1, 0x402, 0x0) socket$key(0xf, 0x3, 0x2) 2018/05/21 12:32:53 executing program 3: r0 = userfaultfd(0x0) mmap(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, 0x1000}) 2018/05/21 12:32:53 executing program 2 (fault-call:2 fault-nth:10): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:32:53 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) fcntl$notify(r0, 0x402, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) shutdown(r0, 0x1) 2018/05/21 12:32:53 executing program 6: io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r0, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1}]) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x20, 0x8000) getpeername$packet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000100)=0x14) io_submit(r0, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001200)}]) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000840)) 2018/05/21 12:32:53 executing program 3: r0 = userfaultfd(0x0) mmap(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, 0x1000}) 2018/05/21 12:32:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfffffffffffffffc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 2018/05/21 12:32:53 executing program 3: r0 = userfaultfd(0x0) mmap(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, 0x1000}) [ 953.608571] device bridge_slave_1 left promiscuous mode [ 953.614627] bridge0: port 2(bridge_slave_1) entered disabled state 2018/05/21 12:32:53 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x9e, "8497411d8657c93b3507e340dcd09b9d88e0fadd15662bb91e33fdd268404b22422b70971f72610e0c013c5e65587f7e887a6cce9211f9e77e5924f23471f77231ab712e99083c78b1a44fc01fe5acd30a14ce247a30e38688d432a3614fd2993c3a4d5cbf062146899a5cef2c947577fc4e58693da94225b17b9d64f71c1419db3541c15d5adcf6abb00b55b21fbf0a2d89df329e9375cd1ba0ca988b66"}, &(0x7f0000000080)=0xa6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000280)={r1, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}, [0x100000001, 0x8, 0x4, 0x4472, 0x9, 0x1, 0x8, 0xffffffff, 0x7, 0x2, 0x0, 0x6, 0x10000, 0x6, 0x3]}, &(0x7f0000000380)=0x100) io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:32:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfffffffffffffffc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 953.685452] device bridge_slave_0 left promiscuous mode [ 953.691657] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:32:53 executing program 3: r0 = userfaultfd(0x0) mmap(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, 0x1000}) 2018/05/21 12:32:53 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000840)) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, r2, &(0x7f0000000580)=[{&(0x7f0000000200)}, {&(0x7f0000000240)="d3e821b9879d02540ea725e464e71cb7088033bf9ec8917333e4de651275839f4926ff2e1e9a89e669fddbd8c193fa228459572a09151f673e0c60955dded711367246475229179a847443817de8e5f492b3e925aa7b312b597eff8def2986a4ff5ba7dff83dbfe122342aab5fb3b089b09d4e05e14c3effa334d5532f95e8d9d488e1acd8b964346663208038a472dee0b036051f01d126eea77b0a3d3ceb8924c09abe60ecbd805a5d2096f084142fdc522546cd85bb441517159c6e3af715101c3417882c8d98f70674387d9157ea047e31d9f25f58b1a151b7a0a868e1", 0xdf}, {&(0x7f0000000340)="fbe692e8a13219ea4146580bc4b08bb816bdfff821e6b0750040c77620b66472c175d1afedb23504af6093106e171d81aadc5188b38a2a0a9065365b8c5e0fc7d7cdb6827fb00733105b0289b2b7e8bff53221582853449530446e4772065328acaf61d1b831b96160c68bffc93e92a769fb295f478e4c2842724770bbbe88448c2f3acfdeb1bd1a4e223d0b7d54f97a2d7dec87f2f802d78af16ca677f2eeab17dd8451928fc5840b4e907209236d19b54e0d0ef82d95d3eb820fdfef9e2181582959ca24265e38861a", 0xca}, {&(0x7f0000000440)="b68862b43dd2952525fa21ca51", 0xd}, {&(0x7f0000000480)="76b357bc91be1e145cb89a6089093b0014c6d0dfc6b241133784251b146bda8e2285ac972bc894f4e452d05a9d6092f9db03ff30639e0d1f3d7741d7464704c73a896c6d6d74a4c07c889fb19315373898c5e73712b5080e5f3d9aed3bd06030fab8ed02ebf72194f69832fb77f25fdcb39b212ad0bab6db6e9ce586ca2c03914f57a72f12080f787fa1c9aab97fb5ad317b81fc36868a36a150345dea82da86bf0ea8127bc92282c6619c9cf34e27d62e8d73c708784ccd036051e5a2f8b435b28f1c9d207a5c9b8711d961ffb363b2ffa19977470241e69971f9cdd1e4a1ac6f4a1b5ae05ffda1362592b209176cfff8c4e430", 0xf4}], 0x5, r3) 2018/05/21 12:32:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfffffffffffffffc) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 953.937723] team0 (unregistering): Port device team_slave_1 removed 2018/05/21 12:32:54 executing program 3: r0 = userfaultfd(0x0) mmap(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, 0x1000}) [ 953.986995] team0 (unregistering): Port device team_slave_0 removed [ 954.002152] IPVS: ftp: loaded support on port[0] = 21 [ 954.048710] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 954.117599] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 954.229574] bond0 (unregistering): Released all slaves [ 955.124257] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.130735] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.138315] device bridge_slave_0 entered promiscuous mode [ 955.178136] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.184597] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.192156] device bridge_slave_1 entered promiscuous mode [ 955.229659] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 955.268364] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 955.381255] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 955.422439] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 955.462913] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 955.469969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 955.509361] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 955.516360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 955.627352] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 955.634683] team0: Port device team_slave_0 added [ 955.673543] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 955.680906] team0: Port device team_slave_1 added [ 955.719458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 955.764294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 955.805916] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 955.813492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 955.822040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 955.857946] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 955.865552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 955.874163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 956.274174] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.280652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 956.287461] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.293889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 956.301929] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 956.352475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 957.714318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.848199] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 957.982720] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 957.989034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 957.996705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 958.129150] 8021q: adding VLAN 0 to HW filter on device team0 [ 958.929782] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 958.940905] syz-executor2 cpuset=syz2 mems_allowed=0 [ 958.946209] CPU: 0 PID: 22914 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 958.953614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 958.962976] Call Trace: [ 958.965595] dump_stack+0x185/0x1d0 [ 958.969217] dump_header+0x2cc/0x16f0 [ 958.973018] ? is_console_locked+0x29/0x50 [ 958.977253] ? kmsan_report+0x4f/0x260 [ 958.981148] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 958.986619] ? ___ratelimit+0x67f/0x760 [ 958.990605] oom_kill_process+0x341/0x2160 [ 958.994844] ? mem_cgroup_scan_tasks+0x289/0x610 [ 958.999617] out_of_memory+0x1700/0x1da0 [ 959.003689] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 959.009084] ? _cond_resched+0x8b/0xd0 [ 959.013000] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 959.018194] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 959.023604] pagefault_out_of_memory+0x57/0x110 [ 959.028271] mm_fault_error+0x490/0x810 [ 959.032269] __do_page_fault+0x1272/0x1a10 [ 959.036511] ? page_fault+0x1e/0x30 [ 959.040138] do_page_fault+0xd3/0x260 [ 959.043936] ? page_fault+0x8/0x30 [ 959.047470] page_fault+0x1e/0x30 [ 959.050931] RIP: 0033:0x4071d8 [ 959.054125] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 959.059499] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 959.066784] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 959.074064] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 959.081351] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 959.088625] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 959.096431] Task in /syz2 killed as a result of limit of /syz2 [ 959.102678] memory: usage 804kB, limit 0kB, failcnt 1032 [ 959.108241] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 959.115147] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 959.121365] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 959.141294] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 959.150169] [22914] 0 22914 17553 8392 114688 0 0 syz-executor2 [ 959.159135] Memory cgroup out of memory: Kill process 22914 (syz-executor2) score 8420000 or sacrifice child [ 959.169247] Killed process 22914 (syz-executor2) total-vm:70212kB, anon-rss:76kB, file-rss:33492kB, shmem-rss:0kB 2018/05/21 12:32:59 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000004c0)={0x4, &(0x7f0000000480)=[{0x5, 0x23}, {0x2, 0x8000}, {0xfffffffffffffffa, 0x7fffffff}, {0x800, 0x81}]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)={0xffffffff, 0xffffffff, 0x6}) io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1}]) fcntl$setsig(r0, 0xa, 0x3a) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) sendmsg$alg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="f5fdd4a8263c0759dfc4ff609bb83e945e5d6a96fc9fa567a75f19cc9cb88c7f35ec133295648d4761ceb4f6b679be02196bcf35c78d24f0fd5c6e0bfaf79c3566def44c4fb849bf93bb724538cdb4c8a9b2a5738f", 0x55}, {&(0x7f0000000080)}, {&(0x7f0000000240)="cd913aedd592f3b008ddc152a3f2811cd114f34e4ad44d2f92084595a3ec25b74d9f7da1b5cfc810850e5600e26045d008079965513eaafa472ccde8e0f4beab5839245386380d", 0x47}, {&(0x7f00000002c0)="eaf4d62c2abd571aab36518ba72c598483638d9d3a9e", 0x16}, {&(0x7f0000000300)="ce4cb46785f5fefb3de76978db93529bb4c4db556e914421aa2505f4c223f664139eca2a5a2e9770a175aedcc3c3", 0x2e}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000000340)="fd1c0956ca9d113ff9e101", 0xb}], 0x7, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7fffffff}], 0x30, 0x8000}, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000840)) 2018/05/21 12:32:59 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_submit(0x0, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000003c0)=0x32, 0x4) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000080)=0xffff, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r0, &(0x7f00000001c0)="bf11fd134be9cf6ca52b024225382703ee8fc00393a570b6971f358ce270825f4eceeca7bec42ef4c09308b82027df25d6997c4cb447146a7aea21739779c06ef2d3030c3d9554ceb5695ce43020dc49b9ec033d4cd101c1ec0c9989f69281749ae70904ffd98b726440a365326b566ded2d527500aa6697fc36563da759180e6b2a9c6408c7fac8b12df87c4f93d3309eb9e662a441fbef3a655ae5fa384beba47e73cb898e5edaf4d27b44f3f711", &(0x7f0000000280)=""/202}, 0x18) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000480)={@llc={0x1a, 0x321, 0xfffffffffffffeff, 0x800, 0x4, 0x8001}, {&(0x7f0000000400)=""/65, 0x41}, &(0x7f0000000000), 0x1}, 0xa0) 2018/05/21 12:32:59 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) 2018/05/21 12:32:59 executing program 3: r0 = userfaultfd(0x0) mmap(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) socket$netlink(0x10, 0x3, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, 0x1000}) 2018/05/21 12:32:59 executing program 2 (fault-call:2 fault-nth:11): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:32:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfffffffffffffffc) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 2018/05/21 12:32:59 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:32:59 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={r1, r2+10000000}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) 2018/05/21 12:32:59 executing program 3: r0 = userfaultfd(0x0) mmap(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) socket$netlink(0x10, 0x3, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, 0x1000}) 2018/05/21 12:32:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfffffffffffffffc) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 2018/05/21 12:32:59 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") r1 = geteuid() r2 = getegid() fchown(r0, r1, r2) io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) [ 959.445126] device bridge_slave_1 left promiscuous mode [ 959.450982] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.496557] device bridge_slave_0 left promiscuous mode [ 959.502435] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:32:59 executing program 3: r0 = userfaultfd(0x0) mmap(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) socket$netlink(0x10, 0x3, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, 0x1000}) 2018/05/21 12:32:59 executing program 6: r0 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x8a28, 0xc000) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000240)=""/13) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_submit(0x0, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1}]) io_submit(0x0, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000001200)}]) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000000)={0x100000000, 0x9, 0x3a6}) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000080)) 2018/05/21 12:32:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfffffffffffffffc) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 2018/05/21 12:32:59 executing program 3: r0 = userfaultfd(0x0) mmap(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, 0x1000}) [ 959.732906] team0 (unregistering): Port device team_slave_1 removed [ 959.788367] team0 (unregistering): Port device team_slave_0 removed [ 959.859274] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 959.909568] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 959.965959] IPVS: ftp: loaded support on port[0] = 21 [ 959.994661] bond0 (unregistering): Released all slaves [ 960.884109] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.890628] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.898491] device bridge_slave_0 entered promiscuous mode [ 960.951152] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.957598] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.965042] device bridge_slave_1 entered promiscuous mode [ 961.003365] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 961.041302] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 961.148610] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 961.188466] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 961.259174] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 961.266205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 961.373846] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 961.381465] team0: Port device team_slave_0 added [ 961.417957] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 961.425518] team0: Port device team_slave_1 added [ 961.462600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 961.502592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 961.541593] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 961.548914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 961.559303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 961.591416] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 961.598687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 961.608247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 961.984590] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.991144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 961.997846] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.004280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 962.011967] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 962.273479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 963.393950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 963.528422] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 963.661428] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 963.667784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 963.676286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 963.804608] 8021q: adding VLAN 0 to HW filter on device team0 [ 964.589436] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 964.600502] syz-executor2 cpuset=syz2 mems_allowed=0 [ 964.605750] CPU: 1 PID: 23233 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 964.613144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 964.622506] Call Trace: [ 964.625113] dump_stack+0x185/0x1d0 [ 964.628757] dump_header+0x2cc/0x16f0 [ 964.632564] ? is_console_locked+0x29/0x50 [ 964.636799] ? kmsan_report+0x4f/0x260 [ 964.640702] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 964.646193] ? ___ratelimit+0x67f/0x760 [ 964.650192] oom_kill_process+0x341/0x2160 [ 964.654432] ? mem_cgroup_scan_tasks+0x289/0x610 [ 964.659218] out_of_memory+0x1700/0x1da0 [ 964.663296] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 964.668675] ? _cond_resched+0x8b/0xd0 [ 964.672579] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 964.677777] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 964.683168] pagefault_out_of_memory+0x57/0x110 [ 964.687838] mm_fault_error+0x490/0x810 [ 964.691834] __do_page_fault+0x1272/0x1a10 [ 964.696097] ? page_fault+0x1e/0x30 [ 964.699740] do_page_fault+0xd3/0x260 [ 964.703538] ? page_fault+0x8/0x30 [ 964.707102] page_fault+0x1e/0x30 [ 964.710557] RIP: 0033:0x4071d8 [ 964.713754] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 964.719141] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 964.726433] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 964.734082] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 964.741366] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 964.748638] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 964.756148] Task in /syz2 killed as a result of limit of /syz2 [ 964.762367] memory: usage 804kB, limit 0kB, failcnt 1040 [ 964.767899] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 964.774735] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 964.780946] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 964.800928] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 964.809751] [23233] 0 23233 17553 8393 118784 0 0 syz-executor2 [ 964.818657] Memory cgroup out of memory: Kill process 23233 (syz-executor2) score 8422000 or sacrifice child [ 964.828858] Killed process 23233 (syz-executor2) total-vm:70212kB, anon-rss:80kB, file-rss:33492kB, shmem-rss:0kB 2018/05/21 12:33:04 executing program 3: r0 = userfaultfd(0x0) mmap(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, 0x1000}) 2018/05/21 12:33:04 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={r2, @multicast2=0xe0000002, @rand_addr=0x800}, 0xc) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000840)) 2018/05/21 12:33:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfffffffffffffffc) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 2018/05/21 12:33:04 executing program 4: r0 = semget$private(0x0, 0x1, 0x8) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)) 2018/05/21 12:33:04 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000200)=@sco, 0x80, &(0x7f0000000080), 0x10000143, &(0x7f0000000140), 0x244}}], 0x4000317, 0x0, &(0x7f0000004cc0)) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/05/21 12:33:04 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:33:04 executing program 2 (fault-call:2 fault-nth:12): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:33:04 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x9, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) io_setup(0x6, &(0x7f0000000080)) 2018/05/21 12:33:05 executing program 3: r0 = userfaultfd(0x0) mmap(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, 0x1000}) 2018/05/21 12:33:05 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYBLOB="26000000421f8a00ba60000002"], &(0x7f0000000240)=0x2e) setsockopt$inet_dccp_int(r0, 0x21, 0x3, &(0x7f0000000280)=0x1, 0x4) 2018/05/21 12:33:05 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = geteuid() fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={r1, r2, r3}, 0xc) 2018/05/21 12:33:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfffffffffffffffc) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 965.158638] device bridge_slave_1 left promiscuous mode [ 965.164518] bridge0: port 2(bridge_slave_1) entered disabled state 2018/05/21 12:33:05 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) write(r0, &(0x7f0000000080)="2aa409a542e334bca19d6021eab7abb65a67144fee8221751880d5c643e9172f92e7e18756a0fb8be1764e7ef67826c957800fee7508e7e8c6", 0x39) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000840)) 2018/05/21 12:33:05 executing program 3: r0 = userfaultfd(0x0) mmap(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, 0x1000}) [ 965.233758] device bridge_slave_0 left promiscuous mode [ 965.239642] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:33:05 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:33:05 executing program 3: r0 = userfaultfd(0x0) mmap(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, 0x1000}) [ 965.431491] team0 (unregistering): Port device team_slave_1 removed [ 965.499643] team0 (unregistering): Port device team_slave_0 removed [ 965.525405] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 965.566278] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 965.674221] bond0 (unregistering): Released all slaves [ 965.716977] IPVS: ftp: loaded support on port[0] = 21 [ 966.662635] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.669157] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.676657] device bridge_slave_0 entered promiscuous mode [ 966.714288] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.720732] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.728152] device bridge_slave_1 entered promiscuous mode [ 966.765260] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 966.803152] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 966.910574] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 966.951376] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 966.989922] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 966.996973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 967.035670] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 967.042656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 967.149028] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 967.156798] team0: Port device team_slave_0 added [ 967.193697] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 967.200992] team0: Port device team_slave_1 added [ 967.237974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 967.277629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 967.316431] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 967.323710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 967.332217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 967.366521] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 967.373787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 967.382234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 967.757853] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.764408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 967.771243] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.777653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 967.785386] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 967.967603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 969.168827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 969.300477] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 969.430712] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 969.437017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 969.444449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 969.572801] 8021q: adding VLAN 0 to HW filter on device team0 [ 970.350006] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 970.361132] syz-executor2 cpuset=syz2 mems_allowed=0 [ 970.366358] CPU: 1 PID: 23544 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 970.373742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 970.383100] Call Trace: [ 970.385699] dump_stack+0x185/0x1d0 [ 970.389331] dump_header+0x2cc/0x16f0 [ 970.393135] ? is_console_locked+0x29/0x50 [ 970.397383] ? kmsan_report+0x4f/0x260 [ 970.401281] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 970.406755] ? ___ratelimit+0x67f/0x760 [ 970.410747] oom_kill_process+0x341/0x2160 [ 970.414983] ? mem_cgroup_scan_tasks+0x289/0x610 [ 970.419761] out_of_memory+0x1700/0x1da0 [ 970.423841] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 970.429247] ? _cond_resched+0x8b/0xd0 [ 970.433151] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 970.438339] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 970.443725] pagefault_out_of_memory+0x57/0x110 [ 970.448403] mm_fault_error+0x490/0x810 [ 970.452397] __do_page_fault+0x1272/0x1a10 [ 970.456650] ? page_fault+0x1e/0x30 [ 970.460275] do_page_fault+0xd3/0x260 [ 970.464088] ? page_fault+0x8/0x30 [ 970.467659] page_fault+0x1e/0x30 [ 970.471104] RIP: 0033:0x4071d8 [ 970.474284] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 970.479644] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 970.486908] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 970.494208] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 970.501472] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 970.508741] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 970.516183] Task in /syz2 killed as a result of limit of /syz2 [ 970.522416] memory: usage 804kB, limit 0kB, failcnt 1048 [ 970.528321] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 970.535195] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 970.541398] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 970.561767] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 970.570522] [23544] 0 23544 17553 8394 114688 0 0 syz-executor2 [ 970.579429] Memory cgroup out of memory: Kill process 23544 (syz-executor2) score 8422000 or sacrifice child [ 970.589496] Killed process 23544 (syz-executor2) total-vm:70212kB, anon-rss:84kB, file-rss:33492kB, shmem-rss:0kB 2018/05/21 12:33:10 executing program 1: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='cpuset\x00') io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000001200)}]) 2018/05/21 12:33:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 2018/05/21 12:33:10 executing program 3: r0 = userfaultfd(0x0) mmap(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, 0x1000}) 2018/05/21 12:33:10 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000200)=0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000400)={'bridge_slave_1\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r3, &(0x7f0000004f80)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000004f40)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r3, &(0x7f0000004fc0)=ANY=[@ANYBLOB="03000000400000fa0200000000000000fe8000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000", @ANYRES32=r4, @ANYBLOB], 0x48) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) r5 = socket(0xa, 0x1, 0x0) readlinkat(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=""/223, 0xdf) ioctl(r5, 0x8912, &(0x7f0000000240)="e626262c8598bf012cf66f") bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1b) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1}]) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000840)) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000440)={'filter\x00', 0x4}, 0x68) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) getpeername$ax25(r5, &(0x7f0000000380), &(0x7f00000003c0)=0x10) io_setup(0xffffffff, &(0x7f0000000080)) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r5, 0x111, 0x5, 0x32, 0x4) 2018/05/21 12:33:10 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400), 0x0, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:33:10 executing program 4: r0 = accept(0xffffffffffffffff, &(0x7f0000000180)=@in={0x0, 0x0, @local}, &(0x7f0000000200)=0x80) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) r1 = semget$private(0x0, 0x20000000104, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000040)=0x6e) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r1, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) r2 = accept(r0, &(0x7f0000000340)=@in6={0x0, 0x0, 0x0, @dev}, &(0x7f00000003c0)=0x80) sendto$inet(r2, &(0x7f0000000400)="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", 0x1000, 0x4000, &(0x7f0000001400)={0x2, 0x4e20, @rand_addr=0xd30}, 0x10) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x2802) r4 = msgget(0x2, 0x30) msgctl$IPC_RMID(r4, 0x0) msgctl$IPC_RMID(r4, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f00000002c0)={{0xba0f, 0x7}, {0x0, 0x1}, 0x40, 0x5, 0x3}) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000140)) 2018/05/21 12:33:10 executing program 2 (fault-call:2 fault-nth:13): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:33:10 executing program 7: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x191182, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000300)="a944b0867451631169270a9ad74e2bef333f165255443b15344b35eb1a96425a90e573751220f9960f9a3681df49b285d67eee1004a581808a26460d344cfb35351a9ebb06497eaf1f2875431bc2a0a268aa27c34ea5c29634bbf6677993c571599f39205683ec803d69e3572f4f8b2d1f80cfac6f823648cf0553358cc50b7a95e079164491b98825345b0fe3501ff1553f797a819592ed3a50bde784b018811c68800e904352830a285844363ef54717a816abc023748050d22276e872628de2f7f831b67156ba6633f4a2e5ff40bb706adf4fa62215d4cd3f15b40561b63ed4b45d1d", 0xe4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r1, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) sendto(r1, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) accept$packet(0xffffffffffffff9c, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x14) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000140)={'bridge0\x00', 0x101}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000240)={0x6, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}]}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000400)={0x3, 0x0, 0x7c36, 0x0, 0x4}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001540)={'veth0\x00', r2}) sendto(r1, &(0x7f0000000480), 0x2, 0x0, &(0x7f0000000000)=@in6={0xa, 0x4e23, 0xd3, @dev={0xfe, 0x80, [], 0x1c}, 0xffff}, 0xfffffffffffffcc0) 2018/05/21 12:33:10 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, 0x1000}) 2018/05/21 12:33:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 970.893618] device bridge_slave_1 left promiscuous mode [ 970.899511] bridge0: port 2(bridge_slave_1) entered disabled state 2018/05/21 12:33:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) [ 970.949834] device bridge_slave_0 left promiscuous mode [ 970.955707] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:33:11 executing program 3: mmap(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, 0x1000}) 2018/05/21 12:33:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 971.132452] team0 (unregistering): Port device team_slave_1 removed [ 971.180264] team0 (unregistering): Port device team_slave_0 removed [ 971.220751] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 971.273344] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 971.297518] IPVS: ftp: loaded support on port[0] = 21 [ 971.345432] bond0 (unregistering): Released all slaves [ 972.341455] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.347892] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.355357] device bridge_slave_0 entered promiscuous mode [ 972.392878] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.399314] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.406649] device bridge_slave_1 entered promiscuous mode [ 972.443648] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 972.481143] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 972.588556] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 972.628371] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 972.698872] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 972.705924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 972.813153] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 972.820619] team0: Port device team_slave_0 added [ 972.856761] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 972.864015] team0: Port device team_slave_1 added [ 972.900705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 972.940326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 972.978648] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 972.985940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 972.995119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 973.027359] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 973.034608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 973.043770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 973.420717] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.427192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 973.433962] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.440420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 973.448623] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 973.727417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 974.815670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 974.950384] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 975.080368] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 975.086635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 975.094893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 975.223307] 8021q: adding VLAN 0 to HW filter on device team0 [ 976.033520] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 976.044631] syz-executor2 cpuset=syz2 mems_allowed=0 [ 976.049929] CPU: 1 PID: 23844 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 976.057309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 976.066659] Call Trace: [ 976.069272] dump_stack+0x185/0x1d0 [ 976.072906] dump_header+0x2cc/0x16f0 [ 976.076713] ? is_console_locked+0x29/0x50 [ 976.080949] ? kmsan_report+0x4f/0x260 [ 976.084845] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 976.090315] ? ___ratelimit+0x67f/0x760 [ 976.094298] oom_kill_process+0x341/0x2160 [ 976.098541] ? mem_cgroup_scan_tasks+0x289/0x610 [ 976.103308] out_of_memory+0x1700/0x1da0 [ 976.107372] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 976.112790] ? _cond_resched+0x8b/0xd0 [ 976.116700] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 976.121894] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 976.127273] pagefault_out_of_memory+0x57/0x110 [ 976.131940] mm_fault_error+0x490/0x810 [ 976.135927] __do_page_fault+0x1272/0x1a10 [ 976.140184] ? page_fault+0x1e/0x30 [ 976.143813] do_page_fault+0xd3/0x260 [ 976.147608] ? page_fault+0x8/0x30 [ 976.151142] page_fault+0x1e/0x30 [ 976.154586] RIP: 0033:0x4071d8 [ 976.157762] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 976.163307] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 976.170581] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 976.177878] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 976.185144] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 976.192428] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 976.199896] Task in /syz2 killed as a result of limit of /syz2 [ 976.206152] memory: usage 804kB, limit 0kB, failcnt 1056 [ 976.211698] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 976.218527] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 976.225129] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 976.245157] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 976.253923] [23844] 0 23844 17553 8394 118784 0 0 syz-executor2 [ 976.262845] Memory cgroup out of memory: Kill process 23844 (syz-executor2) score 8423000 or sacrifice child [ 976.272930] Killed process 23844 (syz-executor2) total-vm:70212kB, anon-rss:84kB, file-rss:33492kB, shmem-rss:0kB 2018/05/21 12:33:16 executing program 3: mmap(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, 0x1000}) 2018/05/21 12:33:16 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000040)) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x4, 0x0) sync_file_range(r3, 0x6, 0x3, 0x7) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="19008e03478fdc150c6ac085e168fb816bb7fdffffff3a61b6407f"], &(0x7f0000000200)=0x21) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={r4, @in6={{0xa, 0x4e23, 0x2, @local={0xfe, 0x80, [], 0xaa}, 0x6f}}, 0x182, 0x1, 0x1ff, 0x4, 0x20}, 0x98) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000240)=0x1000, 0x4) 2018/05/21 12:33:16 executing program 6: r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1}]) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000001200)}]) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000840)) 2018/05/21 12:33:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xfffffffffffffffc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 2018/05/21 12:33:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200), 0x0, 0xffffffffffffffff, 0x0, 0x0, r0}]) 2018/05/21 12:33:16 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400), 0x0, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:33:16 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000000)=""/24, &(0x7f0000000040)=0x18) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) r2 = dup3(r1, r1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x280, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x19b2, 0x30}, &(0x7f0000000300)=0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000340)=@sack_info={r4, 0x7f, 0x9}, &(0x7f0000000380)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@dev, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000280)={r5, 0x1, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) 2018/05/21 12:33:16 executing program 2 (fault-call:2 fault-nth:14): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:33:16 executing program 3: mmap(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, 0x1000}) 2018/05/21 12:33:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xfffffffffffffffc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 2018/05/21 12:33:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000200), 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) r3 = fcntl$dupfd(r0, 0x8000000000, r0) syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') io_setup(0x5ee, &(0x7f0000000200)) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000240)='gre0\x00') io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000280)=0x1) [ 976.583945] device bridge_slave_1 left promiscuous mode [ 976.589822] bridge0: port 2(bridge_slave_1) entered disabled state 2018/05/21 12:33:16 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000840)) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000001c0)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) [ 976.660484] device bridge_slave_0 left promiscuous mode [ 976.666380] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:33:16 executing program 3: r0 = userfaultfd(0x0) mmap(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, 0x1000}) 2018/05/21 12:33:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xfffffffffffffffc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 976.834771] team0 (unregistering): Port device team_slave_1 removed [ 976.873727] team0 (unregistering): Port device team_slave_0 removed 2018/05/21 12:33:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") ioctl$KDSETLED(r0, 0x4b32, 0x1fe000000000) io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:33:16 executing program 3: r0 = userfaultfd(0x0) mmap(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, 0x1000}) 2018/05/21 12:33:16 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0xfffffffffffffffc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 976.933981] bond0 (unregistering): Releasing backup interface bond_slave_1 2018/05/21 12:33:17 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1}]) renameat2(r0, &(0x7f0000000200)='./file0\x00', r0, &(0x7f0000000240)='./file0\x00', 0x4) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000840)) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f00000001c0)={0x7fffffff, @random="1a897d17c29e"}) r2 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r2}) [ 976.988552] bond0 (unregistering): Releasing backup interface bond_slave_0 2018/05/21 12:33:17 executing program 3: r0 = userfaultfd(0x0) mmap(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, 0x1000}) [ 977.161375] bond0 (unregistering): Released all slaves [ 977.346548] IPVS: ftp: loaded support on port[0] = 21 [ 978.220117] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.226548] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.233993] device bridge_slave_0 entered promiscuous mode [ 978.271620] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.278151] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.285562] device bridge_slave_1 entered promiscuous mode [ 978.322009] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 978.358910] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 978.467686] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 978.507476] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 978.676217] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 978.683779] team0: Port device team_slave_0 added [ 978.720686] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 978.728026] team0: Port device team_slave_1 added [ 978.764773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 978.804483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 978.840940] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 978.848374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 978.856904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 978.890819] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 978.898286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 978.906882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 979.281814] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.288279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 979.295051] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.301527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.309192] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 979.392505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 980.686985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 980.820098] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 980.950531] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 980.956854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 980.965288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 981.093024] 8021q: adding VLAN 0 to HW filter on device team0 [ 981.873443] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 981.884498] syz-executor2 cpuset=syz2 mems_allowed=0 [ 981.889729] CPU: 0 PID: 24174 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 981.897114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 981.906549] Call Trace: [ 981.909140] dump_stack+0x185/0x1d0 [ 981.912764] dump_header+0x2cc/0x16f0 [ 981.916647] ? is_console_locked+0x29/0x50 [ 981.920879] ? kmsan_report+0x4f/0x260 [ 981.924778] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 981.930250] ? ___ratelimit+0x67f/0x760 [ 981.934222] oom_kill_process+0x341/0x2160 [ 981.938458] ? mem_cgroup_scan_tasks+0x289/0x610 [ 981.943236] out_of_memory+0x1700/0x1da0 [ 981.947303] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 981.952677] ? _cond_resched+0x8b/0xd0 [ 981.956575] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 981.961759] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 981.967135] pagefault_out_of_memory+0x57/0x110 [ 981.971802] mm_fault_error+0x490/0x810 [ 981.975789] __do_page_fault+0x1272/0x1a10 [ 981.980032] ? page_fault+0x1e/0x30 [ 981.983663] do_page_fault+0xd3/0x260 [ 981.987456] ? page_fault+0x8/0x30 [ 981.990987] page_fault+0x1e/0x30 [ 981.994433] RIP: 0033:0x4071d8 [ 981.997611] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 982.002967] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 982.010224] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 982.017484] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 982.024741] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 982.032019] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 982.039881] Task in /syz2 killed as a result of limit of /syz2 [ 982.045969] memory: usage 804kB, limit 0kB, failcnt 1064 [ 982.051494] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 982.058322] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 982.064535] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 982.084477] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 982.093320] [24174] 0 24174 17553 8392 118784 0 0 syz-executor2 [ 982.102242] Memory cgroup out of memory: Kill process 24174 (syz-executor2) score 8421000 or sacrifice child [ 982.112335] Killed process 24174 (syz-executor2) total-vm:70212kB, anon-rss:76kB, file-rss:33492kB, shmem-rss:0kB 2018/05/21 12:33:22 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x200000, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=@mpls_newroute={0x48, 0x18, 0x0, 0x70bd2d, 0x25dfdbfe, {0x1c, 0x0, 0x20, 0x2, 0xfc, 0x2, 0x0, 0x9, 0x1000}, [@RTA_TTL_PROPAGATE={0x8, 0x1a, 0x40}, @RTA_DST={0x24, 0x1, [{0x9, 0x2, 0x4, 0x1ff}, {0x87, 0x5, 0x1, 0x2}, {0x0, 0x3f, 0x7ff, 0x100000000}, {0x2, 0x2, 0xbc4, 0x4}, {0x8000, 0x6, 0x7f, 0x868}, {0x2, 0x7, 0x100000001, 0x80000001}, {0x5, 0x7, 0x5, 0x8}, {0x8, 0x2, 0x7fff, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/05/21 12:33:22 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x1, @loopback={0x0, 0x1}, 0x6}}}, &(0x7f0000000080)=0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="45000000bf9f07f1b1513b8c2ee1848966880eb34a68e1d22ed5ca704b0a857b7a25085f9581ee1130cc56a4245225c65d2fcf7499046e63bf71e9b99313e6d5926fb1e80e718a01fb"], &(0x7f0000000300)=0x4d) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:33:22 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0xfffffffffffffffc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 2018/05/21 12:33:22 executing program 3: r0 = userfaultfd(0x0) mmap(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, 0x1000}) 2018/05/21 12:33:22 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_setup(0x0, &(0x7f0000000080)) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000840)) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000001c0)={@host=0x2}) 2018/05/21 12:33:22 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='bdevvmnet0\\bdev\x00', 0x3) sendto$ax25(r0, &(0x7f0000000100)="5830547ea8b35db641a1858fc0e227807b7f7eefd233c0318dd441f98544c727af034984dece66549f4fade551086d61cb", 0x2a, 0x20008010, &(0x7f0000000380)={0x3, {"bd65a95ab97da2"}, 0x6}, 0x10) r1 = semget$private(0x0, 0x20000000100, 0x0) sched_setparam(0x0, &(0x7f0000000240)=0x200) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000280)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) semtimedop(r1, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000140)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000440)=0x0) alarm(0x1) move_pages(r2, 0x2, &(0x7f00000002c0)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000300)=[0x1ff, 0x3f, 0x0, 0x8001, 0x1], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) semtimedop(r1, &(0x7f0000000000)=[{0x1, 0x1, 0x800}, {0x0, 0x1, 0x1800}, {0x1, 0x100000000, 0x1800}, {0x3, 0x0, 0x800}, {0x4, 0x100000000}, {0x3, 0x6d, 0x800}], 0x6, &(0x7f0000000040)) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000001c0)) 2018/05/21 12:33:22 executing program 2 (fault-call:2 fault-nth:15): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:33:22 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400), 0x0, 0x0) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:33:22 executing program 3: r0 = userfaultfd(0x0) mmap(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, 0x1000}) 2018/05/21 12:33:22 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200), 0x0, 0x0, 0x0, 0x2}]) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000080)={0x8, 0xfffffffffffffffa, 0x5, 0x6, 0x9, 0x6f}) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000840)) 2018/05/21 12:33:22 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") fremovexattr(r0, &(0x7f0000000080)=@known='security.capability\x00') r1 = accept4(r0, 0x0, &(0x7f00000001c0), 0x80000) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000240)={0x6, 0x80}) io_setup(0x8001, &(0x7f0000000000)=0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x4) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) [ 982.435850] device bridge_slave_1 left promiscuous mode [ 982.441723] bridge0: port 2(bridge_slave_1) entered disabled state 2018/05/21 12:33:22 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0xfffffffffffffffc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 2018/05/21 12:33:22 executing program 3: r0 = userfaultfd(0x0) mmap(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, 0x1000}) [ 982.523988] device bridge_slave_0 left promiscuous mode [ 982.529890] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:33:22 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1, r0}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000840)) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000080)={0x9, 0x3, 0x7, 0x1, 0x6}) 2018/05/21 12:33:22 executing program 3: r0 = userfaultfd(0x0) mmap(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, 0x1000}) 2018/05/21 12:33:22 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8002, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) ioctl$sock_ipx_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'veth0_to_team\x00', {0x4, 0x7, 0x20, "7ea31bd9fd96", 0x4}}) [ 982.689864] team0 (unregistering): Port device team_slave_1 removed [ 982.722903] team0 (unregistering): Port device team_slave_0 removed [ 982.804448] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 982.865774] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 982.985336] bond0 (unregistering): Released all slaves [ 983.014934] IPVS: ftp: loaded support on port[0] = 21 [ 983.979882] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.986367] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.993962] device bridge_slave_0 entered promiscuous mode [ 984.031695] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.038207] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.045847] device bridge_slave_1 entered promiscuous mode [ 984.083674] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 984.122367] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 984.233549] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 984.273641] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 984.313236] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 984.320269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 984.359349] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 984.366321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 984.475262] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 984.482643] team0: Port device team_slave_0 added [ 984.520177] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 984.527662] team0: Port device team_slave_1 added [ 984.566967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 984.607364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 984.646474] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 984.653766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 984.662938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 984.696673] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 984.704032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 984.713229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 985.094888] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.101358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 985.108180] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.114591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 985.122453] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 985.215194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 986.538424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 986.671836] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 986.806257] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 986.812522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 986.820770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 986.948732] 8021q: adding VLAN 0 to HW filter on device team0 [ 987.727782] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 987.739042] syz-executor2 cpuset=syz2 mems_allowed=0 [ 987.744392] CPU: 1 PID: 24484 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 987.751756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 987.761105] Call Trace: [ 987.763695] dump_stack+0x185/0x1d0 [ 987.767316] dump_header+0x2cc/0x16f0 [ 987.771114] ? is_console_locked+0x29/0x50 [ 987.775344] ? kmsan_report+0x4f/0x260 [ 987.779238] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 987.784702] ? ___ratelimit+0x67f/0x760 [ 987.788690] oom_kill_process+0x341/0x2160 [ 987.792927] ? mem_cgroup_scan_tasks+0x289/0x610 [ 987.797688] out_of_memory+0x1700/0x1da0 [ 987.801761] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 987.807132] ? _cond_resched+0x8b/0xd0 [ 987.811029] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 987.816229] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 987.821617] pagefault_out_of_memory+0x57/0x110 [ 987.826330] mm_fault_error+0x490/0x810 [ 987.830323] __do_page_fault+0x1272/0x1a10 [ 987.834565] ? page_fault+0x1e/0x30 [ 987.838197] do_page_fault+0xd3/0x260 [ 987.841991] ? page_fault+0x8/0x30 [ 987.845521] page_fault+0x1e/0x30 [ 987.848973] RIP: 0033:0x4071d8 [ 987.852160] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 987.857518] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 987.864775] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 987.872035] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 987.879305] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 987.886575] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 987.894004] Task in /syz2 killed as a result of limit of /syz2 [ 987.900174] memory: usage 804kB, limit 0kB, failcnt 1072 [ 987.905705] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 987.912547] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 987.918793] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 987.938754] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 987.947627] [24484] 0 24484 17553 8392 118784 0 0 syz-executor2 [ 987.956567] Memory cgroup out of memory: Kill process 24484 (syz-executor2) score 8421000 or sacrifice child [ 987.966668] Killed process 24484 (syz-executor2) total-vm:70212kB, anon-rss:76kB, file-rss:33492kB, shmem-rss:0kB [ 987.994435] oom_reaper: reaped process 24484 (syz-executor2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 2018/05/21 12:33:28 executing program 6: eventfd2(0x80000000, 0x800) getpgid(0xffffffffffffffff) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x50, "477b00d5526b9b83510238ae26e63f3c2ac5af1611679462b61f935bfd109f0395d0ced54277b19cc8bb8e99cc3202f66427b655b6bc29d4865365bc80fcf97fb6f6ee47a4321445803b11ff528a9cdf"}, &(0x7f00000002c0)=0x58) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={r1, 0x8c12}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) r3 = syz_open_procfs(r2, &(0x7f0000000240)="6e65742f69702d7cbd8b7ce1f2d67d95bfe3a6e55feac8e54a8d4884bd4b4c89c0999ab49cce84aaa47b2fa5013950e9fa249c8eec1025209ea553790cb0eaf0e3f4855ef58cb726dfc6bf6475d09e05b887d939329b2259a85682b9ca962d") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r4, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000006c0), 0x0, 0x8001, 0x0, 0x1}]) setitimer(0x2, &(0x7f0000000080)={{}, {0x0, 0x7530}}, &(0x7f00000000c0)) io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r3, &(0x7f0000001200)}]) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000840)) 2018/05/21 12:33:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfffffffffffffffc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 2018/05/21 12:33:28 executing program 3: r0 = userfaultfd(0x0) mmap(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, 0x1000}) 2018/05/21 12:33:28 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) msgget$private(0x0, 0x200) 2018/05/21 12:33:28 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) socket$inet_udp(0x2, 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) 2018/05/21 12:33:28 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) vmsplice(r0, &(0x7f0000000080)=[{&(0x7f0000000300)="5ba48388dfa1caee249408238fbf9a73a75dabb730863a5c3f395bb61b676a0d8955ca317ee65dd8fb6efaecbf5c66c8948313a77903c8f6c58ad0b527d234c8810633630451bf3801383a9a894e04f094982306199cfe41fe66dfe278dc3efbe3267ad7fa132b5ff4075fd70f50717322db02ac2edbbf2411e26379917336d93c4e9a914beb84b8729f1447f4069ad77d77ddb3e3a9a8d1f6dd68e793a136cb82566007b63168145cf9528c2bc48b8a2d61ef96c552dc1216ca19dec0aab7fa45e4cb64d12a3c8bf04fe2a529ad182d69b03d8e8026f1f6324e944dd32582c66baf6172bcb74ed67eb5dbaef159b5fc0b4f3f", 0xf3}, {&(0x7f0000000400)="17071f075fbee942b9ae6a1aeb5559bcdccefe8bae8de71bafd4fd32b0012174a0fad9bbf1a3f0f8dab8351ebdddfd0b1e9be5502f89488992ef185abfdd60f56f54d9e2030877f27744bbd2b9c28360853894e03da2e9a0ca5bb7d5217272a0107e5b0f6e56a27a96c36df966ca69850570584e0d603277b7267d110f44aaf7ff5a3b3ca443c5166b8d686c143587302f1a858d29488593c4bb8d0d023645a04b6821abe3b9311c4e02227aa31c3cd6145880813acdf59a1c55ab31fa7932fcbe68b7d9bcc13155bb615e329eec42adf3ceddf769af409c38204afff35f1ccc1e32607674b89cb591b7", 0xea}, {&(0x7f0000000200)="9d48e2a3535f5323cb6aea3743ca8da3aa4d8fca2206d58f7b6636b10801a72fcd40a5f38b50ff33223f03a86cd2f72fc9f64df1495ab9cba1efba6f48f222e3a89323cbdbf634619f044391564ae62bd9b7ae6f5162ef0abea16fc84a43c7839079150f3b7c2ad6fa9ae7477b3a5469201640e9", 0x74}, {&(0x7f0000000500)="16777674dd760cbdb75b58a952136bffa2ef1791e661140a6acaa51efaf0c062af92a9c37b99e1c4afd2db40c29055d755a9379002227d3422ec80bbaf8af926df0f5dde7058c88d3c9340653a9760846a5ae57e4280203e96ba9ea935d8d55556e7611c45d1d91739d2acd17445271d5dbe3993d081c62f833a344b1b1e6d18e0bf5be241b3d2125c989a85ab0750d6a5ff8bbcada25069354752502b8b4c2555308bb3fd8b6d0f", 0xa8}], 0x4, 0x1) 2018/05/21 12:33:28 executing program 2 (fault-call:2 fault-nth:16): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:33:28 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:33:28 executing program 3: r0 = userfaultfd(0x0) mmap(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, 0x1000}) 2018/05/21 12:33:28 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)) 2018/05/21 12:33:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfffffffffffffffc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 988.259036] device bridge_slave_1 left promiscuous mode [ 988.265045] bridge0: port 2(bridge_slave_1) entered disabled state 2018/05/21 12:33:28 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x35d, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000840)) getsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x5) [ 988.339592] device bridge_slave_0 left promiscuous mode [ 988.345534] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:33:28 executing program 3: r0 = userfaultfd(0x0) mmap(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, 0x1000}) 2018/05/21 12:33:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfffffffffffffffc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 988.524137] team0 (unregistering): Port device team_slave_1 removed [ 988.562169] team0 (unregistering): Port device team_slave_0 removed 2018/05/21 12:33:28 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x800, 0x0, r0, &(0x7f0000001200), 0x0, 0x401, 0x0, 0x1}]) [ 988.618862] bond0 (unregistering): Releasing backup interface bond_slave_1 2018/05/21 12:33:28 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@random="6160db7a0974", @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14}, @local={0xac, 0x14, 0x14, 0xaa}, {[@ssrr={0x89, 0x3, 0x5}, @ssrr={0x89, 0x3, 0xe}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 988.697274] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 988.851149] bond0 (unregistering): Released all slaves [ 988.898168] IPVS: ftp: loaded support on port[0] = 21 [ 989.843651] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.850147] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.857597] device bridge_slave_0 entered promiscuous mode [ 989.895113] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.901542] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.908912] device bridge_slave_1 entered promiscuous mode [ 989.945833] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 989.983680] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 990.092380] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 990.132360] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 990.170650] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 990.177871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 990.318529] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 990.325840] team0: Port device team_slave_0 added [ 990.362783] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 990.370204] team0: Port device team_slave_1 added [ 990.407672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 990.445611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 990.485212] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 990.492486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 990.500959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 990.535390] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 990.542635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 990.551890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 990.930292] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.936737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 990.943521] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.949947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 990.957741] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 991.039228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 992.345158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 992.476636] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 992.607693] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 992.613946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 992.622348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 992.749854] 8021q: adding VLAN 0 to HW filter on device team0 [ 993.532780] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 993.543870] syz-executor2 cpuset=syz2 mems_allowed=0 [ 993.549144] CPU: 0 PID: 24798 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 993.556541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 993.565892] Call Trace: [ 993.568486] dump_stack+0x185/0x1d0 [ 993.572112] dump_header+0x2cc/0x16f0 [ 993.575911] ? is_console_locked+0x29/0x50 [ 993.580144] ? kmsan_report+0x4f/0x260 [ 993.584040] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 993.589521] ? ___ratelimit+0x67f/0x760 [ 993.593779] oom_kill_process+0x341/0x2160 [ 993.598024] ? mem_cgroup_scan_tasks+0x289/0x610 [ 993.602803] out_of_memory+0x1700/0x1da0 [ 993.606868] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 993.612259] ? _cond_resched+0x8b/0xd0 [ 993.616157] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 993.621344] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 993.626716] pagefault_out_of_memory+0x57/0x110 [ 993.631391] mm_fault_error+0x490/0x810 [ 993.635379] __do_page_fault+0x1272/0x1a10 [ 993.639629] ? page_fault+0x1e/0x30 [ 993.643259] do_page_fault+0xd3/0x260 [ 993.647067] ? page_fault+0x8/0x30 [ 993.650615] page_fault+0x1e/0x30 [ 993.654068] RIP: 0033:0x4071d8 [ 993.657254] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 993.662621] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 993.669888] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 993.677150] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 993.684411] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 993.691679] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 993.699691] Task in /syz2 killed as a result of limit of /syz2 [ 993.705777] memory: usage 804kB, limit 0kB, failcnt 1080 [ 993.711319] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 993.718757] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 993.724976] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 993.745002] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 993.753841] [24798] 0 24798 17553 8393 118784 0 0 syz-executor2 [ 993.762761] Memory cgroup out of memory: Kill process 24798 (syz-executor2) score 8422000 or sacrifice child [ 993.772887] Killed process 24798 (syz-executor2) total-vm:70212kB, anon-rss:80kB, file-rss:33492kB, shmem-rss:0kB [ 993.801191] oom_reaper: reaped process 24798 (syz-executor2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 2018/05/21 12:33:33 executing program 3: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x2000000, &(0x7f0000000280)) chdir(&(0x7f0000000780)='./file0\x00') mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) close(0xffffffffffffffff) 2018/05/21 12:33:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa}, 0x1c) listen(r0, 0xfffffffffffffffc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 2018/05/21 12:33:33 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:33:33 executing program 7: getresuid(&(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000200)) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x1, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x3, 0x3, 0x2, {0xa, 0x4e22, 0x1, @loopback={0x0, 0x1}, 0x634}}}, 0x80) 2018/05/21 12:33:33 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000180)=""/190, &(0x7f0000000040)=0xbe) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) 2018/05/21 12:33:33 executing program 2 (fault-call:2 fault-nth:17): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:33:33 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r0, &(0x7f00000001c0)="f61dc7461687f24023cda9852ec704dae422ea43234091c9be41bc1928b34add98af785e235bda7627bd974ed6192aac90f063b4d46862e33a76be3323b65a530d9eca0f290a2898b819f3c1ac2be2bbeb9571db630cb1f6dc5757975c3148890c7962d317c963d444863f42dfb3742e7d546225d6417c469c2e678ca0b5b8256df768cc15a6ae16034ef36e3224613ee54e8600662b24358a5769bf5c697c7da135ac3aa4c4b58517d827473441f36c794df90f476365f0dabfce4dd8682f511d0f48ecb5d482df8d1cad07885ae87da45839112b26478ff53f61219dab3854b13ae756051478b513b7753f22f5329f", &(0x7f00000002c0)=""/69}, 0x18) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200), 0x0, 0x0, 0x0, 0x0, r0}]) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000840)) write$binfmt_misc(r0, &(0x7f0000000080)={'syz0', "db994ef9b20e1dd278565b6b60f206575e05734f7dabaa2ec914029efd7e4c0bd456de439af32c18"}, 0x2c) 2018/05/21 12:33:33 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:33:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa}, 0x1c) listen(r0, 0xfffffffffffffffc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 994.076481] device bridge_slave_1 left promiscuous mode [ 994.082423] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.114313] device bridge_slave_0 left promiscuous mode [ 994.120247] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/21 12:33:34 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1}]) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000200)={0x1, {0x2, 0x4e20, @multicast2=0xe0000002}, {0x2, 0x4e21, @multicast1=0xe0000001}, {0x2, 0x4e23, @multicast1=0xe0000001}, 0xca, 0x4, 0x2, 0x8, 0x93, &(0x7f00000001c0)='bridge_slave_0\x00', 0xffff, 0x7f, 0x8c9c}) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000840)) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000080)) 2018/05/21 12:33:34 executing program 3: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x2000000, &(0x7f0000000280)) chdir(&(0x7f0000000780)='./file0\x00') mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) close(0xffffffffffffffff) 2018/05/21 12:33:34 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x800, 0x0, r0, &(0x7f0000001200), 0x0, 0x401, 0x0, 0x1}]) 2018/05/21 12:33:34 executing program 3: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x2000000, &(0x7f0000000280)) chdir(&(0x7f0000000780)='./file0\x00') mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) close(0xffffffffffffffff) [ 994.349650] team0 (unregistering): Port device team_slave_1 removed 2018/05/21 12:33:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa}, 0x1c) listen(r0, 0xfffffffffffffffc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 994.404382] team0 (unregistering): Port device team_slave_0 removed 2018/05/21 12:33:34 executing program 6: io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r0, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1}]) io_submit(r0, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001200)}]) connect$netlink(0xffffffffffffffff, &(0x7f0000000080)=@unspec, 0xc) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000840)) [ 994.445767] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 994.519709] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 994.658642] bond0 (unregistering): Released all slaves [ 994.724341] IPVS: ftp: loaded support on port[0] = 21 [ 995.611589] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.618118] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.625339] device bridge_slave_0 entered promiscuous mode [ 995.678241] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.684773] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.692171] device bridge_slave_1 entered promiscuous mode [ 995.730863] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 995.768691] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 995.875675] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 995.915424] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 995.954042] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 995.961203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 995.999612] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 996.006594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 996.113792] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 996.121175] team0: Port device team_slave_0 added [ 996.157719] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 996.165168] team0: Port device team_slave_1 added [ 996.202544] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 996.239997] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 996.278903] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 996.286519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 996.295785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 996.328447] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 996.335702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 996.345131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 996.722633] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.729253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 996.736035] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.742476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 996.750371] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 996.895577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 998.157401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 998.286134] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 998.415809] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 998.422151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 998.429666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 998.554702] 8021q: adding VLAN 0 to HW filter on device team0 [ 999.318689] syz-executor2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 999.329817] syz-executor2 cpuset=syz2 mems_allowed=0 [ 999.335162] CPU: 1 PID: 25109 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #101 [ 999.342535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 999.351885] Call Trace: [ 999.354483] dump_stack+0x185/0x1d0 [ 999.358126] dump_header+0x2cc/0x16f0 [ 999.361947] ? is_console_locked+0x29/0x50 [ 999.366186] ? kmsan_report+0x4f/0x260 [ 999.370104] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 999.375585] ? ___ratelimit+0x67f/0x760 [ 999.379584] oom_kill_process+0x341/0x2160 [ 999.383818] ? mem_cgroup_scan_tasks+0x289/0x610 [ 999.388586] out_of_memory+0x1700/0x1da0 [ 999.392673] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 999.398076] ? _cond_resched+0x8b/0xd0 [ 999.401993] mem_cgroup_oom_synchronize+0x1408/0x1750 [ 999.407185] ? mem_cgroup_oom_synchronize+0x1750/0x1750 [ 999.412571] pagefault_out_of_memory+0x57/0x110 [ 999.417241] mm_fault_error+0x490/0x810 [ 999.421232] __do_page_fault+0x1272/0x1a10 [ 999.425470] ? page_fault+0x1e/0x30 [ 999.429101] do_page_fault+0xd3/0x260 [ 999.432899] ? page_fault+0x8/0x30 [ 999.436437] page_fault+0x1e/0x30 [ 999.439883] RIP: 0033:0x4071d8 [ 999.443071] RSP: 002b:0000000000a3ea58 EFLAGS: 00010246 [ 999.448450] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000040fa60 [ 999.455725] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000000fa [ 999.463008] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 999.470276] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000000003e0 [ 999.477547] R13: 0000000000411910 R14: 0000000000000000 R15: 0000000000000000 [ 999.484917] Task in /syz2 killed as a result of limit of /syz2 [ 999.491123] memory: usage 804kB, limit 0kB, failcnt 1088 [ 999.496649] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 999.503486] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 999.509700] Memory cgroup stats for /syz2: cache:132KB rss:124KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 999.529629] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 999.538446] [25109] 0 25109 17553 8392 114688 0 0 syz-executor2 [ 999.547340] Memory cgroup out of memory: Kill process 25109 (syz-executor2) score 8420000 or sacrifice child [ 999.557433] Killed process 25109 (syz-executor2) total-vm:70212kB, anon-rss:76kB, file-rss:33492kB, shmem-rss:0kB 2018/05/21 12:33:39 executing program 1: 2018/05/21 12:33:39 executing program 3: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x2000000, &(0x7f0000000280)) chdir(&(0x7f0000000780)='./file0\x00') mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) close(0xffffffffffffffff) 2018/05/21 12:33:39 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/21 12:33:39 executing program 6: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x40800, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x8000, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8000, &(0x7f0000000000)=0x0) io_submit(r3, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f00000006c0), 0x0, 0x8000, 0x0, 0x1}]) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r2, &(0x7f0000001200)}]) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000840)) 2018/05/21 12:33:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0xfffffffffffffffc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 2018/05/21 12:33:39 executing program 4: r0 = semget$private(0x0, 0x20000000104, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x821e962c82584a3e, 0x0) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) 2018/05/21 12:33:39 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/155, 0x9b}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0, &(0x7f0000004cc0)) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x800, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000300)=0x5, &(0x7f0000000340)=0x4) sendto(r0, &(0x7f00000000c0)='fc', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/05/21 12:33:39 executing program 2 (fault-call:2 fault-nth:18): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') io_setup(0x8001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)}]) 2018/05/21 12:33:39 executing program 1: [ 999.754104] ================================================================== [ 999.761662] BUG: KMSAN: uninit-value in free_percpu+0x2b8/0xb20 [ 999.767732] CPU: 0 PID: 25383 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #101 [ 999.775089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 999.784530] Call Trace: [ 999.787110] [ 999.789272] dump_stack+0x185/0x1d0 [ 999.792902] ? free_percpu+0x2b8/0xb20 [ 999.796899] kmsan_report+0x149/0x260 [ 999.800702] __msan_warning_32+0x6e/0xc0 [ 999.804763] free_percpu+0x2b8/0xb20 [ 999.808483] ip6_dst_destroy+0x157/0x750 [ 999.812547] ? percpu_counter_add_batch+0x371/0x380 [ 999.817572] ? ip6_blackhole_mtu+0x110/0x110 [ 999.821982] dst_destroy+0x209/0x7a0 [ 999.825697] dst_destroy_rcu+0x46/0x50 [ 999.829588] ? dst_release+0x1d0/0x1d0 [ 999.833479] rcu_process_callbacks+0x1729/0x2020 [ 999.838250] ? rcu_scheduler_starting+0xe0/0xe0 [ 999.842921] __do_softirq+0x56d/0x93d [ 999.846731] irq_exit+0x202/0x240 [ 999.850187] exiting_irq+0xe/0x10 2018/05/21 12:33:39 executing program 3: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x2000000, &(0x7f0000000280)) chdir(&(0x7f0000000780)='./file0\x00') mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) [ 999.853641] smp_apic_timer_interrupt+0x64/0x90 [ 999.858311] apic_timer_interrupt+0xf/0x20 [ 999.862534] [ 999.864772] RIP: 0010:__msan_poison_alloca+0x14c/0x1d0 [ 999.870040] RSP: 0018:ffff88015874fcb0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 999.877747] RAX: 0000000089e000c1 RBX: 0000000089e000c1 RCX: ffff88015874fcf0 [ 999.885017] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 00000000e8e82de5 [ 999.892287] RBP: ffff88015874fd50 R08: 0000000001080020 R09: 0000000000000002 2018/05/21 12:33:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0xfffffffffffffffc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 999.899570] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 999.906836] R13: ffffffff8ac8aa40 R14: 0000000000000246 R15: ffff8801b8d18000 [ 999.914125] ? posix_ktime_get_ts+0x38/0x60 [ 999.918455] ? ktime_get_ts64+0x4c/0x820 [ 999.922502] ? posix_ktime_get_ts+0x38/0x60 [ 999.926807] ktime_get_ts64+0x4c/0x820 [ 999.930854] ? kmsan_set_origin_inline+0x6b/0x120 [ 999.935682] ? __msan_poison_alloca+0x15c/0x1d0 [ 999.940335] ? do_syscall_64+0x154/0x220 [ 999.944409] posix_ktime_get_ts+0x38/0x60 [ 999.948538] ? posix_timer_fn+0x6e0/0x6e0 [ 999.952685] __x64_sys_clock_gettime+0x290/0x370 [ 999.957423] do_syscall_64+0x154/0x220 [ 999.961326] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 999.966498] RIP: 0033:0x45882a [ 999.969665] RSP: 002b:0000000000a3e948 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 999.977357] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045882a [ 999.984608] RDX: 000000000072c9a0 RSI: 0000000000a3e950 RDI: 0000000000000001 [ 999.991857] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 999.999106] R10: 0000000000a3e940 R11: 0000000000000246 R12: 0000000000000000 [ 1000.006355] R13: 0000000000000002 R14: 000000000072c9a0 R15: 00000000000f442b [ 1000.013609] [ 1000.015213] Uninit was stored to memory at: [ 1000.019529] kmsan_internal_chain_origin+0x12b/0x210 [ 1000.024615] __msan_chain_origin+0x69/0xc0 [ 1000.028835] icmp6_dst_alloc+0x674/0xc60 [ 1000.032877] mld_sendpack+0x70d/0x11d0 [ 1000.036765] mld_send_initial_cr+0x449/0x4c0 [ 1000.041157] mld_dad_timer_expire+0x63/0x350 [ 1000.045548] call_timer_fn+0x26a/0x5a0 [ 1000.049426] __run_timers+0xda7/0x11c0 [ 1000.053306] run_timer_softirq+0x43/0x70 [ 1000.057352] __do_softirq+0x56d/0x93d [ 1000.061128] Local variable description: ----ac@__alloc_pages_nodemask [ 1000.067686] Variable was created at: [ 1000.071384] __alloc_pages_nodemask+0x196/0x5dd0 [ 1000.076121] alloc_pages_current+0x6b5/0x970 [ 1000.080506] ================================================================== [ 1000.087840] Disabling lock debugging due to kernel taint [ 1000.093265] Kernel panic - not syncing: panic_on_warn set ... [ 1000.093265] [ 1000.100621] CPU: 0 PID: 25383 Comm: syz-executor6 Tainted: G B 4.17.0-rc5+ #101 [ 1000.109345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1000.118675] Call Trace: [ 1000.121235] [ 1000.123370] dump_stack+0x185/0x1d0 [ 1000.126983] panic+0x39d/0x940 [ 1000.130172] ? free_percpu+0x2b8/0xb20 [ 1000.134041] kmsan_report+0x260/0x260 [ 1000.137825] __msan_warning_32+0x6e/0xc0 [ 1000.141869] free_percpu+0x2b8/0xb20 [ 1000.145570] ip6_dst_destroy+0x157/0x750 [ 1000.149634] ? percpu_counter_add_batch+0x371/0x380 [ 1000.154637] ? ip6_blackhole_mtu+0x110/0x110 [ 1000.159034] dst_destroy+0x209/0x7a0 [ 1000.162735] dst_destroy_rcu+0x46/0x50 [ 1000.166608] ? dst_release+0x1d0/0x1d0 [ 1000.170482] rcu_process_callbacks+0x1729/0x2020 [ 1000.175230] ? rcu_scheduler_starting+0xe0/0xe0 [ 1000.179893] __do_softirq+0x56d/0x93d [ 1000.183697] irq_exit+0x202/0x240 [ 1000.187137] exiting_irq+0xe/0x10 [ 1000.190577] smp_apic_timer_interrupt+0x64/0x90 [ 1000.195236] apic_timer_interrupt+0xf/0x20 [ 1000.199451] [ 1000.201677] RIP: 0010:__msan_poison_alloca+0x14c/0x1d0 [ 1000.206933] RSP: 0018:ffff88015874fcb0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 1000.214634] RAX: 0000000089e000c1 RBX: 0000000089e000c1 RCX: ffff88015874fcf0 [ 1000.221889] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 00000000e8e82de5 [ 1000.229144] RBP: ffff88015874fd50 R08: 0000000001080020 R09: 0000000000000002 [ 1000.236397] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1000.243655] R13: ffffffff8ac8aa40 R14: 0000000000000246 R15: ffff8801b8d18000 [ 1000.250925] ? posix_ktime_get_ts+0x38/0x60 [ 1000.255233] ? ktime_get_ts64+0x4c/0x820 [ 1000.259281] ? posix_ktime_get_ts+0x38/0x60 [ 1000.263601] ktime_get_ts64+0x4c/0x820 [ 1000.267475] ? kmsan_set_origin_inline+0x6b/0x120 [ 1000.272300] ? __msan_poison_alloca+0x15c/0x1d0 [ 1000.276969] ? do_syscall_64+0x154/0x220 [ 1000.281031] posix_ktime_get_ts+0x38/0x60 [ 1000.285165] ? posix_timer_fn+0x6e0/0x6e0 [ 1000.289295] __x64_sys_clock_gettime+0x290/0x370 [ 1000.294033] do_syscall_64+0x154/0x220 [ 1000.297914] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1000.303089] RIP: 0033:0x45882a [ 1000.306262] RSP: 002b:0000000000a3e948 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 1000.313953] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045882a [ 1000.321211] RDX: 000000000072c9a0 RSI: 0000000000a3e950 RDI: 0000000000000001 [ 1000.328468] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1000.335725] R10: 0000000000a3e940 R11: 0000000000000246 R12: 0000000000000000 [ 1000.342978] R13: 0000000000000002 R14: 000000000072c9a0 R15: 00000000000f442b [ 1001.459682] Shutting down cpus with NMI [ 1001.475359] Dumping ftrace buffer: [ 1001.478885] (ftrace buffer empty) [ 1001.482574] Kernel Offset: disabled [ 1001.486182] Rebooting in 86400 seconds..