[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 20.248307] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 23.411920] random: sshd: uninitialized urandom read (32 bytes read) [ 23.702994] random: sshd: uninitialized urandom read (32 bytes read) [ 24.605454] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.15' (ECDSA) to the list of known hosts. [ 30.141428] random: sshd: uninitialized urandom read (32 bytes read) 2018/05/18 20:36:25 fuzzer started 2018/05/18 20:36:26 dialing manager at 10.128.0.26:44209 [ 55.804586] can: request_module (can-proto-0) failed. [ 55.814141] can: request_module (can-proto-0) failed. 2018/05/18 20:36:53 kcov=true, comps=true 2018/05/18 20:36:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000009c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x2c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_GROUP={0x8, 0x1b}, @IFLA_XDP={0x4, 0x2b}]}, 0x2c}, 0x1}, 0x0) 2018/05/18 20:36:56 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") msgctl$IPC_SET(0x0, 0xd, &(0x7f0000000280)) 2018/05/18 20:36:56 executing program 7: socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x6, 0x0) select(0x40, &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000100)={0x200081}, &(0x7f0000000140)={0x77359400}) 2018/05/18 20:36:56 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x8007f, 0x0) 2018/05/18 20:36:56 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x9, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x3, 0x1, 0x14}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 2018/05/18 20:36:56 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x6c, 0x4) 2018/05/18 20:36:56 executing program 6: r0 = inotify_init() r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x80000002) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x400000000004, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 2018/05/18 20:36:56 executing program 2: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) select(0x40, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000240)={0x0, 0x7530}) [ 60.759872] IPVS: ftp: loaded support on port[0] = 21 [ 60.771713] IPVS: ftp: loaded support on port[0] = 21 [ 60.774846] IPVS: ftp: loaded support on port[0] = 21 [ 60.787782] IPVS: ftp: loaded support on port[0] = 21 [ 60.800875] IPVS: ftp: loaded support on port[0] = 21 [ 60.814978] IPVS: ftp: loaded support on port[0] = 21 [ 60.851755] IPVS: ftp: loaded support on port[0] = 21 [ 60.854855] IPVS: ftp: loaded support on port[0] = 21 [ 62.951243] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.957871] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.988141] device bridge_slave_0 entered promiscuous mode [ 63.038400] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.044811] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.080552] device bridge_slave_0 entered promiscuous mode [ 63.099191] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.105623] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.123976] device bridge_slave_0 entered promiscuous mode [ 63.131656] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.138086] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.147588] device bridge_slave_0 entered promiscuous mode [ 63.156410] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.162820] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.170828] device bridge_slave_1 entered promiscuous mode [ 63.183851] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.190553] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.209142] device bridge_slave_0 entered promiscuous mode [ 63.218585] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.225063] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.232746] device bridge_slave_0 entered promiscuous mode [ 63.241202] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.247588] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.262299] device bridge_slave_0 entered promiscuous mode [ 63.272235] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.278641] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.288518] device bridge_slave_1 entered promiscuous mode [ 63.299554] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.306062] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.315760] device bridge_slave_0 entered promiscuous mode [ 63.331302] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.337741] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.359140] device bridge_slave_1 entered promiscuous mode [ 63.366142] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.372609] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.380517] device bridge_slave_1 entered promiscuous mode [ 63.389864] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.396297] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.407111] device bridge_slave_1 entered promiscuous mode [ 63.415447] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 63.424769] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.431330] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.451427] device bridge_slave_1 entered promiscuous mode [ 63.459662] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 63.466831] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.473277] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.489792] device bridge_slave_1 entered promiscuous mode [ 63.513726] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.520190] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.537737] device bridge_slave_1 entered promiscuous mode [ 63.558431] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 63.569508] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 63.578984] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 63.592904] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 63.603630] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 63.611266] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 63.624150] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 63.703157] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 63.710674] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 63.721862] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 63.734938] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 63.758622] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 63.774871] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 63.911775] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 63.937847] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 64.093385] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 64.116344] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 64.130235] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 64.147974] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 64.157151] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 64.172535] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 64.239436] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 64.253368] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 64.274478] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 64.283742] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 64.292985] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 64.315909] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 64.355976] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 64.365626] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 64.382124] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 64.389200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.417455] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 64.424448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.445847] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 64.452885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.463852] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 64.471271] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 64.479171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.511861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.533372] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 64.544397] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 64.553880] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 64.563743] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 64.572955] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 64.583861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.607933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.632239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.651306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.663943] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 64.673828] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 64.682379] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 64.699966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.709696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.735339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.754839] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 64.786390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.810988] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 64.842187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.915287] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 64.922398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.992829] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 65.019973] team0: Port device team_slave_0 added [ 65.041458] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 65.050569] team0: Port device team_slave_0 added [ 65.059796] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 65.070456] team0: Port device team_slave_0 added [ 65.076238] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 65.093643] team0: Port device team_slave_0 added [ 65.108117] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 65.121738] team0: Port device team_slave_1 added [ 65.128395] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 65.136982] team0: Port device team_slave_0 added [ 65.150386] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 65.168681] team0: Port device team_slave_0 added [ 65.190665] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 65.210703] team0: Port device team_slave_1 added [ 65.219103] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 65.237246] team0: Port device team_slave_1 added [ 65.242951] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 65.254059] team0: Port device team_slave_1 added [ 65.274155] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 65.293194] team0: Port device team_slave_1 added [ 65.308110] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 65.322430] team0: Port device team_slave_1 added [ 65.332750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.361604] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 65.370575] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 65.379543] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 65.388780] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 65.395718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.407811] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.433526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.461536] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.472206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.479944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.487716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.495773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.505703] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 65.512785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.523751] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.533969] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 65.541992] team0: Port device team_slave_0 added [ 65.550588] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 65.559810] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 65.573894] team0: Port device team_slave_0 added [ 65.581419] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 65.589368] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 65.597255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.615908] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.626478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.638833] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.656573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.669344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.678480] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 65.685454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.693629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.702074] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 65.709559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.718167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.729647] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 65.739239] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 65.751213] team0: Port device team_slave_1 added [ 65.758260] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 65.770641] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 65.778005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.793702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.820511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.838900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.846778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.854716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.863704] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 65.871470] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 65.879585] team0: Port device team_slave_1 added [ 65.886644] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 65.898556] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 65.907772] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 65.917656] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 65.931419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.954014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.985212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.996764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.004796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.012804] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.020518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.028568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.036545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.044458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.052509] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 66.059869] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 66.067546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.079510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.087778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.096330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.106284] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 66.115667] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 66.123268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.136603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.145637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.153778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.165763] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 66.174464] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 66.182889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.191238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.198953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.207308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.220565] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 66.240313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.270934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.305503] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 66.312776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.337305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.351129] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 66.373159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.401719] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.424335] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 66.436143] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 66.444229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.484804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.512567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.529669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.541826] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 66.564221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.583045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.672418] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 66.679757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.691567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.557099] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.563690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.570849] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.577297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.608853] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 67.622314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.643802] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.650257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.656980] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.663403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.710941] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 67.719412] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.725863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.732557] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.738960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.747594] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 67.772946] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.779429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.786164] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.792585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.829853] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 67.836754] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.843213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.849885] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.856289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.864543] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 67.891245] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.897700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.904382] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.910798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.946904] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 68.079484] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.085961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.092704] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.099123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.127623] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 68.146423] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.152879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.159543] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.165929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.185747] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 68.640861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.649509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.678104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.703167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.710778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.718400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.725764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.934689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.981335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.071087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.095326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.247192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.270712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.305429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.392136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.403971] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.549256] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.559379] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.569844] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.767539] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.790588] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.835856] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.848918] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 73.855271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.869784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.904051] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.040324] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.046709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.062601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.086068] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.094914] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.101291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.109257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.123291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.131371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.256160] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.262474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.276635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.299793] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.306969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.324408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.414587] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.422379] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.431859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.443183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.477584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.492820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.509293] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.606152] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.641108] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.676687] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.800359] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.834268] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.907699] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.946604] 8021q: adding VLAN 0 to HW filter on device team0 2018/05/18 20:37:13 executing program 2: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) select(0x40, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000240)={0x0, 0x7530}) 2018/05/18 20:37:13 executing program 7: socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x6, 0x0) select(0x40, &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000100)={0x200081}, &(0x7f0000000140)={0x77359400}) 2018/05/18 20:37:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000009c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x2c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_GROUP={0x8, 0x1b}, @IFLA_XDP={0x4, 0x2b}]}, 0x2c}, 0x1}, 0x0) 2018/05/18 20:37:13 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x6c, 0x4) 2018/05/18 20:37:13 executing program 6: r0 = inotify_init() r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x80000002) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x400000000004, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 2018/05/18 20:37:13 executing program 7: socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x6, 0x0) select(0x40, &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000100)={0x200081}, &(0x7f0000000140)={0x77359400}) 2018/05/18 20:37:13 executing program 2: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) select(0x40, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000240)={0x0, 0x7530}) 2018/05/18 20:37:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(r1, 0xc048ae65, &(0x7f00000000c0)) 2018/05/18 20:37:13 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x9, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x3, 0x1, 0x14}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 2018/05/18 20:37:13 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x8007f, 0x0) 2018/05/18 20:37:13 executing program 2: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) select(0x40, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000240)={0x0, 0x7530}) 2018/05/18 20:37:13 executing program 7: socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x6, 0x0) select(0x40, &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000100)={0x200081}, &(0x7f0000000140)={0x77359400}) 2018/05/18 20:37:13 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x6c, 0x4) 2018/05/18 20:37:13 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x8007f, 0x0) 2018/05/18 20:37:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000009c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x2c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_GROUP={0x8, 0x1b}, @IFLA_XDP={0x4, 0x2b}]}, 0x2c}, 0x1}, 0x0) 2018/05/18 20:37:13 executing program 6: r0 = inotify_init() r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x80000002) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x400000000004, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 2018/05/18 20:37:14 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x9, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x3, 0x1, 0x14}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 2018/05/18 20:37:14 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x402c4580, &(0x7f0000000200)) 2018/05/18 20:37:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(r1, 0xc048ae65, &(0x7f00000000c0)) 2018/05/18 20:37:14 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x8007f, 0x0) 2018/05/18 20:37:14 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(r1, 0xc048ae65, &(0x7f00000000c0)) 2018/05/18 20:37:14 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x6c, 0x4) 2018/05/18 20:37:14 executing program 6: r0 = inotify_init() r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x80000002) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x400000000004, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 2018/05/18 20:37:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000009c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x2c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_GROUP={0x8, 0x1b}, @IFLA_XDP={0x4, 0x2b}]}, 0x2c}, 0x1}, 0x0) 2018/05/18 20:37:14 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x402c4580, &(0x7f0000000200)) 2018/05/18 20:37:14 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x9, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x3, 0x1, 0x14}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 2018/05/18 20:37:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000)={0x10, 0xf0, 0x3000000000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x2e, 0x3, 0x0, 0x0, {0x400004}, [@nested={0x4}]}, 0x18}, 0x1}, 0x0) 2018/05/18 20:37:14 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(r1, 0xc048ae65, &(0x7f00000000c0)) 2018/05/18 20:37:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT(r1, 0x4070aea0, &(0x7f00000000c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) 2018/05/18 20:37:14 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x2c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'bcsf0\x00', 'ipddp0\x00', 'yam0\x00', 'team_slave_0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xa8, 0x148, 0x198, [@cluster={'cluster\x00', 0x10}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x2, 'syz0\x00'}}}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x7, 'syz0\x00'}}}}, {{{0x15, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipddp0\x00', 'syz_tun\x00', 'rose0\x00', @random="60f9a9d474aa", [], @empty, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x340) 2018/05/18 20:37:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(r1, 0xc048ae65, &(0x7f00000000c0)) 2018/05/18 20:37:14 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x4001) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000001c0)={0x0, 0x22d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 78.600973] openvswitch: netlink: Flow set message rejected, Key attribute missing. 2018/05/18 20:37:14 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x402c4580, &(0x7f0000000200)) 2018/05/18 20:37:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0x4008ae6a, 0x0) 2018/05/18 20:37:14 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x2c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'bcsf0\x00', 'ipddp0\x00', 'yam0\x00', 'team_slave_0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xa8, 0x148, 0x198, [@cluster={'cluster\x00', 0x10}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x2, 'syz0\x00'}}}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x7, 'syz0\x00'}}}}, {{{0x15, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipddp0\x00', 'syz_tun\x00', 'rose0\x00', @random="60f9a9d474aa", [], @empty, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x340) 2018/05/18 20:37:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(r1, 0xc048ae65, &(0x7f00000000c0)) 2018/05/18 20:37:14 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(r1, 0xc048ae65, &(0x7f00000000c0)) 2018/05/18 20:37:14 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x4001) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000001c0)={0x0, 0x22d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2018/05/18 20:37:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT(r1, 0x4070aea0, &(0x7f00000000c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) 2018/05/18 20:37:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000)={0x10, 0xf0, 0x3000000000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x2e, 0x3, 0x0, 0x0, {0x400004}, [@nested={0x4}]}, 0x18}, 0x1}, 0x0) 2018/05/18 20:37:14 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x402c4580, &(0x7f0000000200)) [ 78.845454] openvswitch: netlink: Flow set message rejected, Key attribute missing. 2018/05/18 20:37:14 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x2c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'bcsf0\x00', 'ipddp0\x00', 'yam0\x00', 'team_slave_0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xa8, 0x148, 0x198, [@cluster={'cluster\x00', 0x10}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x2, 'syz0\x00'}}}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x7, 'syz0\x00'}}}}, {{{0x15, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipddp0\x00', 'syz_tun\x00', 'rose0\x00', @random="60f9a9d474aa", [], @empty, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x340) 2018/05/18 20:37:14 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x4001) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000001c0)={0x0, 0x22d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2018/05/18 20:37:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0x4008ae6a, 0x0) 2018/05/18 20:37:14 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x4001) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000001c0)={0x0, 0x22d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2018/05/18 20:37:14 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x4001) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000001c0)={0x0, 0x22d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2018/05/18 20:37:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000)={0x10, 0xf0, 0x3000000000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x2e, 0x3, 0x0, 0x0, {0x400004}, [@nested={0x4}]}, 0x18}, 0x1}, 0x0) 2018/05/18 20:37:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT(r1, 0x4070aea0, &(0x7f00000000c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) [ 79.124875] openvswitch: netlink: Flow set message rejected, Key attribute missing. 2018/05/18 20:37:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000)={0x10, 0xf0, 0x3000000000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x2e, 0x3, 0x0, 0x0, {0x400004}, [@nested={0x4}]}, 0x18}, 0x1}, 0x0) 2018/05/18 20:37:14 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x2c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'bcsf0\x00', 'ipddp0\x00', 'yam0\x00', 'team_slave_0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xa8, 0x148, 0x198, [@cluster={'cluster\x00', 0x10}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x2, 'syz0\x00'}}}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x7, 'syz0\x00'}}}}, {{{0x15, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipddp0\x00', 'syz_tun\x00', 'rose0\x00', @random="60f9a9d474aa", [], @empty, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x340) 2018/05/18 20:37:14 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x4001) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000001c0)={0x0, 0x22d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2018/05/18 20:37:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0x4008ae6a, 0x0) 2018/05/18 20:37:14 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x4001) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000001c0)={0x0, 0x22d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2018/05/18 20:37:14 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x4001) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000001c0)={0x0, 0x22d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2018/05/18 20:37:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT(r1, 0x4070aea0, &(0x7f00000000c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) 2018/05/18 20:37:14 executing program 2: unshare(0x60000000) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) [ 79.287860] IPVS: ftp: loaded support on port[0] = 21 [ 79.315781] openvswitch: netlink: Flow set message rejected, Key attribute missing. 2018/05/18 20:37:15 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') setns(r0, 0x0) 2018/05/18 20:37:15 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x4001) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000001c0)={0x0, 0x22d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2018/05/18 20:37:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0x4008ae6a, 0x0) 2018/05/18 20:37:15 executing program 0: r0 = socket(0xa, 0x802, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r3) r5 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f0000000380)="7f3ab8010000802435344c7898cd994672", 0x11, r4) r6 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r3) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r6, r6, r5}, &(0x7f0000000280)=""/132, 0x84, 0x0) 2018/05/18 20:37:15 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x4001) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000001c0)={0x0, 0x22d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2018/05/18 20:37:15 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') setns(r0, 0x0) 2018/05/18 20:37:15 executing program 6: r0 = socket$inet6(0xa, 0x803, 0x100000001) r1 = socket(0x2, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmmsg(r0, &(0x7f00000001c0)=[{{&(0x7f0000000200)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000280)="65a5bd0b", 0x4}], 0x1, &(0x7f0000000400)}}], 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000080)=0x7d, 0x4) recvfrom(r0, &(0x7f0000000000)=""/70, 0x46, 0x0, &(0x7f00000000c0)=@rc={0x1f}, 0x6f3000) 2018/05/18 20:37:15 executing program 5: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000480)={@void, @val, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000001}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000001, '\\'}}}, 0x27) 2018/05/18 20:37:15 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x4, 0x4) r1 = socket(0xa, 0x200000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000)='\f', 0x1, 0x1, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000180)="078fd1c9a5c5f3c4b10b3c04aed824d52976da04b17457afe303e6b8dba91cb1477c239848be2d2e224a86f6cdbf4bf01fc229ef3705d8a6fe5e54f8b954590f7e6fc6a121b4014ecfd25a5e2e90debd10ae3823ed3fd35a6e5f674d279a634ad5e4cb73ce7f24a089f1f2491d", 0x6d, 0x40011, &(0x7f0000000080)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/05/18 20:37:15 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000008000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r3, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000001040)={0x6, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/05/18 20:37:15 executing program 2: unshare(0x60000000) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) 2018/05/18 20:37:15 executing program 0: r0 = socket(0xa, 0x802, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r3) r5 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f0000000380)="7f3ab8010000802435344c7898cd994672", 0x11, r4) r6 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r3) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r6, r6, r5}, &(0x7f0000000280)=""/132, 0x84, 0x0) 2018/05/18 20:37:15 executing program 7: unshare(0x60000000) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) [ 79.730124] IPVS: ftp: loaded support on port[0] = 21 [ 79.770261] *** Guest State *** [ 79.773894] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 79.775859] IPVS: ftp: loaded support on port[0] = 21 [ 79.782982] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 79.797039] CR3 = 0x0000000000000000 [ 79.800818] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 79.806854] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 79.812891] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 79.819634] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 79.827683] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 79.835828] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 79.843870] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 79.851916] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 79.859957] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 79.867996] GDTR: limit=0x00000000, base=0x0000000000000000 [ 79.876086] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 79.884126] IDTR: limit=0x00000000, base=0x0000000000000000 [ 79.892177] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 79.900216] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 79.906688] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 79.914238] Interruptibility = 00000000 ActivityState = 00000000 2018/05/18 20:37:15 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') setns(r0, 0x0) 2018/05/18 20:37:15 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x4, 0x4) r1 = socket(0xa, 0x200000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000)='\f', 0x1, 0x1, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000180)="078fd1c9a5c5f3c4b10b3c04aed824d52976da04b17457afe303e6b8dba91cb1477c239848be2d2e224a86f6cdbf4bf01fc229ef3705d8a6fe5e54f8b954590f7e6fc6a121b4014ecfd25a5e2e90debd10ae3823ed3fd35a6e5f674d279a634ad5e4cb73ce7f24a089f1f2491d", 0x6d, 0x40011, &(0x7f0000000080)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/05/18 20:37:15 executing program 0: r0 = socket(0xa, 0x802, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r3) r5 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f0000000380)="7f3ab8010000802435344c7898cd994672", 0x11, r4) r6 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r3) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r6, r6, r5}, &(0x7f0000000280)=""/132, 0x84, 0x0) 2018/05/18 20:37:15 executing program 6: r0 = socket$inet6(0xa, 0x803, 0x100000001) r1 = socket(0x2, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmmsg(r0, &(0x7f00000001c0)=[{{&(0x7f0000000200)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000280)="65a5bd0b", 0x4}], 0x1, &(0x7f0000000400)}}], 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000080)=0x7d, 0x4) recvfrom(r0, &(0x7f0000000000)=""/70, 0x46, 0x0, &(0x7f00000000c0)=@rc={0x1f}, 0x6f3000) 2018/05/18 20:37:15 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') setns(r0, 0x0) [ 79.920527] *** Host State *** [ 79.923779] RIP = 0xffffffff811f76d9 RSP = 0xffff8801b45a7390 [ 79.929822] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 79.936307] FSBase=00007f6beb6a0700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 79.944168] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 79.950136] CR0=0000000080050033 CR3=000000019bc41000 CR4=00000000001426f0 [ 79.957221] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87801380 [ 79.963966] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 79.970088] *** Control State *** [ 79.973613] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 79.980339] EntryControls=0000d1ff ExitControls=0023efff [ 79.985967] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 79.992971] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 79.999720] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 80.006368] reason=80000021 qualification=0000000000000000 [ 80.012784] IDTVectoring: info=00000000 errcode=00000000 2018/05/18 20:37:15 executing program 4: r0 = socket(0xa, 0x802, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r3) r5 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f0000000380)="7f3ab8010000802435344c7898cd994672", 0x11, r4) r6 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r3) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r6, r6, r5}, &(0x7f0000000280)=""/132, 0x84, 0x0) [ 80.018294] TSC Offset = 0xffffffd181bc5c77 [ 80.022699] EPT pointer = 0x00000001c80cb01e 2018/05/18 20:37:15 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x4, 0x4) r1 = socket(0xa, 0x200000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000)='\f', 0x1, 0x1, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000180)="078fd1c9a5c5f3c4b10b3c04aed824d52976da04b17457afe303e6b8dba91cb1477c239848be2d2e224a86f6cdbf4bf01fc229ef3705d8a6fe5e54f8b954590f7e6fc6a121b4014ecfd25a5e2e90debd10ae3823ed3fd35a6e5f674d279a634ad5e4cb73ce7f24a089f1f2491d", 0x6d, 0x40011, &(0x7f0000000080)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) [ 80.084265] *** Guest State *** [ 80.087751] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 80.096803] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 80.105891] CR3 = 0x0000000000000000 [ 80.109844] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 80.115973] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 80.122058] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 80.128797] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 80.136844] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 80.144881] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 80.152926] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 80.160970] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 80.169021] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 2018/05/18 20:37:15 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x4, 0x4) r1 = socket(0xa, 0x200000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000)='\f', 0x1, 0x1, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000180)="078fd1c9a5c5f3c4b10b3c04aed824d52976da04b17457afe303e6b8dba91cb1477c239848be2d2e224a86f6cdbf4bf01fc229ef3705d8a6fe5e54f8b954590f7e6fc6a121b4014ecfd25a5e2e90debd10ae3823ed3fd35a6e5f674d279a634ad5e4cb73ce7f24a089f1f2491d", 0x6d, 0x40011, &(0x7f0000000080)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) [ 80.177089] GDTR: limit=0x00000000, base=0x0000000000000000 [ 80.185131] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 80.193163] IDTR: limit=0x00000000, base=0x0000000000000000 [ 80.201210] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 80.209247] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 80.215731] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 80.223247] Interruptibility = 00000000 ActivityState = 00000000 [ 80.229555] *** Host State *** [ 80.232833] RIP = 0xffffffff811f76d9 RSP = 0xffff8801ade7f390 [ 80.238911] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 80.245390] FSBase=00007f6beb67f700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 80.253249] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 80.259216] CR0=0000000080050033 CR3=000000019bc41000 CR4=00000000001426f0 [ 80.266301] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87801380 [ 80.273053] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 80.279179] *** Control State *** [ 80.282702] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 80.289451] EntryControls=0000d1ff ExitControls=0023efff [ 80.294964] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 80.301973] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 80.309151] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 80.315823] reason=80000021 qualification=0000000000000000 [ 80.322196] IDTVectoring: info=00000000 errcode=00000000 [ 80.330633] TSC Offset = 0xffffffd181bc5c77 [ 80.335046] EPT pointer = 0x00000001c80cb01e 2018/05/18 20:37:16 executing program 6: r0 = socket$inet6(0xa, 0x803, 0x100000001) r1 = socket(0x2, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmmsg(r0, &(0x7f00000001c0)=[{{&(0x7f0000000200)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000280)="65a5bd0b", 0x4}], 0x1, &(0x7f0000000400)}}], 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000080)=0x7d, 0x4) recvfrom(r0, &(0x7f0000000000)=""/70, 0x46, 0x0, &(0x7f00000000c0)=@rc={0x1f}, 0x6f3000) 2018/05/18 20:37:16 executing program 0: r0 = socket(0xa, 0x802, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r3) r5 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f0000000380)="7f3ab8010000802435344c7898cd994672", 0x11, r4) r6 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r3) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r6, r6, r5}, &(0x7f0000000280)=""/132, 0x84, 0x0) 2018/05/18 20:37:16 executing program 7: unshare(0x60000000) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) 2018/05/18 20:37:16 executing program 4: r0 = socket(0xa, 0x802, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r3) r5 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f0000000380)="7f3ab8010000802435344c7898cd994672", 0x11, r4) r6 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r3) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r6, r6, r5}, &(0x7f0000000280)=""/132, 0x84, 0x0) 2018/05/18 20:37:16 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000008000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r3, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000001040)={0x6, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/05/18 20:37:16 executing program 3: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000022ff0)={0x2, 0x4e23}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e23, @loopback=0x7f000001}, 0x80, &(0x7f0000007f80)=[{&(0x7f000000a000)='\f', 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080), 0x0, &(0x7f0000001100)=""/124, 0x7c}, 0x0) 2018/05/18 20:37:16 executing program 2: unshare(0x60000000) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) 2018/05/18 20:37:16 executing program 5: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000480)={@void, @val, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000001}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000001, '\\'}}}, 0x27) [ 80.508747] IPVS: ftp: loaded support on port[0] = 21 [ 80.540151] *** Guest State *** [ 80.543575] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 80.552483] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 80.561391] CR3 = 0x0000000000000000 [ 80.565151] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 80.571202] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 80.577261] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 80.583985] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 80.592072] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 80.600200] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 2018/05/18 20:37:16 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000080), 0x4) 2018/05/18 20:37:16 executing program 3: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000022ff0)={0x2, 0x4e23}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e23, @loopback=0x7f000001}, 0x80, &(0x7f0000007f80)=[{&(0x7f000000a000)='\f', 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080), 0x0, &(0x7f0000001100)=""/124, 0x7c}, 0x0) 2018/05/18 20:37:16 executing program 6: r0 = socket$inet6(0xa, 0x803, 0x100000001) r1 = socket(0x2, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmmsg(r0, &(0x7f00000001c0)=[{{&(0x7f0000000200)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000280)="65a5bd0b", 0x4}], 0x1, &(0x7f0000000400)}}], 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000080)=0x7d, 0x4) recvfrom(r0, &(0x7f0000000000)=""/70, 0x46, 0x0, &(0x7f00000000c0)=@rc={0x1f}, 0x6f3000) 2018/05/18 20:37:16 executing program 4: r0 = socket(0xa, 0x802, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r3) r5 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f0000000380)="7f3ab8010000802435344c7898cd994672", 0x11, r4) r6 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r3) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r6, r6, r5}, &(0x7f0000000280)=""/132, 0x84, 0x0) [ 80.608231] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 80.616264] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 80.624296] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 80.632324] GDTR: limit=0x00000000, base=0x0000000000000000 [ 80.640355] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 80.648400] IDTR: limit=0x00000000, base=0x0000000000000000 [ 80.648673] IPVS: ftp: loaded support on port[0] = 21 [ 80.656467] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 80.656481] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 80.656492] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 80.656501] Interruptibility = 00000000 ActivityState = 00000000 [ 80.656506] *** Host State *** [ 80.656518] RIP = 0xffffffff811f76d9 RSP = 0xffff8801b8a3f390 [ 80.656537] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 80.656548] FSBase=00007f6beb6a0700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 80.656558] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 80.656569] CR0=0000000080050033 CR3=00000001d6c8c000 CR4=00000000001426e0 [ 80.656580] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87801380 [ 80.656588] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 80.656591] *** Control State *** [ 80.656599] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 80.656606] EntryControls=0000d1ff ExitControls=0023efff 2018/05/18 20:37:16 executing program 5: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000480)={@void, @val, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000001}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000001, '\\'}}}, 0x27) [ 80.656618] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 80.656626] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 80.656635] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 80.656642] reason=80000021 qualification=0000000000000000 [ 80.656647] IDTVectoring: info=00000000 errcode=00000000 [ 80.656652] TSC Offset = 0xffffffd118a089fd [ 80.656659] EPT pointer = 0x00000001ad8a701e 2018/05/18 20:37:16 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000008000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r3, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000001040)={0x6, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/05/18 20:37:16 executing program 3: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000022ff0)={0x2, 0x4e23}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e23, @loopback=0x7f000001}, 0x80, &(0x7f0000007f80)=[{&(0x7f000000a000)='\f', 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080), 0x0, &(0x7f0000001100)=""/124, 0x7c}, 0x0) 2018/05/18 20:37:16 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="53ec"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 81.009949] *** Guest State *** [ 81.013361] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 81.023249] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 81.032166] CR3 = 0x0000000000000000 [ 81.035956] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 81.042000] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 81.048107] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 81.054888] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 81.063210] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 81.071367] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 81.079433] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 81.087493] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 81.095560] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 81.103609] GDTR: limit=0x00000000, base=0x0000000000000000 [ 81.111663] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 81.119718] IDTR: limit=0x00000000, base=0x0000000000000000 [ 81.127802] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 81.135872] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 81.142353] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 81.149867] Interruptibility = 00000000 ActivityState = 00000000 [ 81.156157] *** Host State *** [ 81.159411] RIP = 0xffffffff811f76d9 RSP = 0xffff8801b4adf390 [ 81.165463] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 81.171948] FSBase=00007f6beb6a0700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 81.179817] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 81.185809] CR0=0000000080050033 CR3=00000001b67f5000 CR4=00000000001426f0 [ 81.192890] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87801380 [ 81.199623] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 81.205734] *** Control State *** [ 81.209245] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 81.215975] EntryControls=0000d1ff ExitControls=0023efff [ 81.221514] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 81.228523] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 81.235259] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 81.241918] reason=80000021 qualification=0000000000000000 [ 81.248337] IDTVectoring: info=00000000 errcode=00000000 [ 81.253846] TSC Offset = 0xffffffd0d82f53e6 [ 81.258244] EPT pointer = 0x00000001b435d01e 2018/05/18 20:37:17 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000008000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r3, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000001040)={0x6, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/05/18 20:37:17 executing program 3: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000022ff0)={0x2, 0x4e23}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e23, @loopback=0x7f000001}, 0x80, &(0x7f0000007f80)=[{&(0x7f000000a000)='\f', 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080), 0x0, &(0x7f0000001100)=""/124, 0x7c}, 0x0) 2018/05/18 20:37:17 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000080), 0x4) 2018/05/18 20:37:17 executing program 5: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000480)={@void, @val, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000001}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000001, '\\'}}}, 0x27) 2018/05/18 20:37:17 executing program 7: unshare(0x60000000) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) 2018/05/18 20:37:17 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="53ec"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/18 20:37:17 executing program 2: unshare(0x60000000) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) 2018/05/18 20:37:17 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000080), 0x4) [ 81.488744] IPVS: ftp: loaded support on port[0] = 21 [ 81.533529] IPVS: ftp: loaded support on port[0] = 21 [ 81.539715] *** Guest State *** [ 81.543113] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 81.552123] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 81.561053] CR3 = 0x0000000000000000 [ 81.564813] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 81.570850] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 81.576906] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 81.583641] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 81.591672] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 81.599699] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 81.607735] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 81.615770] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 81.623800] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 81.631827] GDTR: limit=0x00000000, base=0x0000000000000000 [ 81.639856] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 81.647887] IDTR: limit=0x00000000, base=0x0000000000000000 [ 81.655935] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 81.663991] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 81.670473] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 2018/05/18 20:37:17 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="53ec"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 81.677973] Interruptibility = 00000000 ActivityState = 00000000 [ 81.684637] *** Host State *** [ 81.687932] RIP = 0xffffffff811f76d9 RSP = 0xffff88019b0bf390 [ 81.693989] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 81.700537] FSBase=00007f6beb6a0700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 81.708400] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 81.714344] CR0=0000000080050033 CR3=00000001b6a42000 CR4=00000000001426f0 [ 81.721427] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87801380 [ 81.728151] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 2018/05/18 20:37:17 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="53ec"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 81.734273] *** Control State *** [ 81.737781] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 81.744519] EntryControls=0000d1ff ExitControls=0023efff [ 81.750050] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 81.757052] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 81.763767] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 81.770413] reason=80000021 qualification=0000000000000000 [ 81.776786] IDTVectoring: info=00000000 errcode=00000000 2018/05/18 20:37:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000001800190000003fffffffda060200000000e80001040000040d000500000500000005000000", 0x29}], 0x1) [ 81.782291] TSC Offset = 0xffffffd08f8a70ee [ 81.786667] EPT pointer = 0x00000001b876801e 2018/05/18 20:37:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv4_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x2}, [@RTA_ENCAP_TYPE={0x8, 0x15}]}, 0x24}, 0x1}, 0x0) [ 81.833563] netlink: 'syz-executor3': attribute type 5 has an invalid length. 2018/05/18 20:37:17 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d66593ae164c990a0028e", 0x10) r1 = accept$alg(r0, 0x0, 0x0) read(r1, &(0x7f0000000000)=""/93, 0x5d) 2018/05/18 20:37:17 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000080), 0x4) 2018/05/18 20:37:17 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000080), 0x4) 2018/05/18 20:37:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000001800190000003fffffffda060200000000e80001040000040d000500000500000005000000", 0x29}], 0x1) 2018/05/18 20:37:17 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x7, 0x4) [ 81.979076] netlink: 'syz-executor5': attribute type 21 has an invalid length. 2018/05/18 20:37:17 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x7, 0x4) [ 82.082935] netlink: 'syz-executor5': attribute type 21 has an invalid length. [ 82.103195] netlink: 'syz-executor3': attribute type 5 has an invalid length. 2018/05/18 20:37:18 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000001c0)) 2018/05/18 20:37:18 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000080), 0x4) 2018/05/18 20:37:18 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d66593ae164c990a0028e", 0x10) r1 = accept$alg(r0, 0x0, 0x0) read(r1, &(0x7f0000000000)=""/93, 0x5d) 2018/05/18 20:37:18 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x7, 0x4) 2018/05/18 20:37:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000001800190000003fffffffda060200000000e80001040000040d000500000500000005000000", 0x29}], 0x1) 2018/05/18 20:37:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv4_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x2}, [@RTA_ENCAP_TYPE={0x8, 0x15}]}, 0x24}, 0x1}, 0x0) 2018/05/18 20:37:18 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000080), 0x4) 2018/05/18 20:37:18 executing program 2: perf_event_open(&(0x7f0000000240)={0x0, 0xff34, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/241, 0xf1}], 0x1, 0x0) pwritev(r1, &(0x7f00000000c0), 0x10000000000000b0, 0x0) [ 82.324769] netlink: 'syz-executor3': attribute type 5 has an invalid length. 2018/05/18 20:37:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000001800190000003fffffffda060200000000e80001040000040d000500000500000005000000", 0x29}], 0x1) 2018/05/18 20:37:18 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d66593ae164c990a0028e", 0x10) r1 = accept$alg(r0, 0x0, 0x0) read(r1, &(0x7f0000000000)=""/93, 0x5d) 2018/05/18 20:37:18 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x7, 0x4) [ 82.374184] netlink: 'syz-executor5': attribute type 21 has an invalid length. 2018/05/18 20:37:18 executing program 2: perf_event_open(&(0x7f0000000240)={0x0, 0xff34, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/241, 0xf1}], 0x1, 0x0) pwritev(r1, &(0x7f00000000c0), 0x10000000000000b0, 0x0) 2018/05/18 20:37:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv4_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x2}, [@RTA_ENCAP_TYPE={0x8, 0x15}]}, 0x24}, 0x1}, 0x0) [ 82.467490] netlink: 'syz-executor3': attribute type 5 has an invalid length. 2018/05/18 20:37:18 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000000)='dev ', 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ftruncate(r1, 0x40001) sendfile(r0, r1, &(0x7f000000a000), 0x200000000000002) 2018/05/18 20:37:18 executing program 4: r0 = timerfd_create(0x0, 0x0) read(r0, &(0x7f0000da2000)=""/8, 0x7) [ 82.564363] netlink: 'syz-executor5': attribute type 21 has an invalid length. 2018/05/18 20:37:19 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d66593ae164c990a0028e", 0x10) r1 = accept$alg(r0, 0x0, 0x0) read(r1, &(0x7f0000000000)=""/93, 0x5d) 2018/05/18 20:37:19 executing program 1: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) io_setup(0x469, &(0x7f0000000180)=0x0) io_submit(r2, 0x1, &(0x7f00000016c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100), 0x3f000000}]) 2018/05/18 20:37:19 executing program 2: perf_event_open(&(0x7f0000000240)={0x0, 0xff34, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/241, 0xf1}], 0x1, 0x0) pwritev(r1, &(0x7f00000000c0), 0x10000000000000b0, 0x0) 2018/05/18 20:37:19 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)="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", 0x0, 0x0) fcntl$notify(r0, 0x402, 0x800000000000000d) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) unshare(0x400) fcntl$notify(r1, 0x402, 0x4) 2018/05/18 20:37:19 executing program 4: r0 = timerfd_create(0x0, 0x0) read(r0, &(0x7f0000da2000)=""/8, 0x7) 2018/05/18 20:37:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv4_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x2}, [@RTA_ENCAP_TYPE={0x8, 0x15}]}, 0x24}, 0x1}, 0x0) 2018/05/18 20:37:19 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000001c0)) 2018/05/18 20:37:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000000)='dev ', 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ftruncate(r1, 0x40001) sendfile(r0, r1, &(0x7f000000a000), 0x200000000000002) [ 83.455615] netlink: 'syz-executor5': attribute type 21 has an invalid length. 2018/05/18 20:37:19 executing program 2: perf_event_open(&(0x7f0000000240)={0x0, 0xff34, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/241, 0xf1}], 0x1, 0x0) pwritev(r1, &(0x7f00000000c0), 0x10000000000000b0, 0x0) 2018/05/18 20:37:19 executing program 4: r0 = timerfd_create(0x0, 0x0) read(r0, &(0x7f0000da2000)=""/8, 0x7) 2018/05/18 20:37:19 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)="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", 0x0, 0x0) fcntl$notify(r0, 0x402, 0x800000000000000d) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) unshare(0x400) fcntl$notify(r1, 0x402, 0x4) 2018/05/18 20:37:19 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xa, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x50}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 2018/05/18 20:37:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000000)='dev ', 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ftruncate(r1, 0x40001) sendfile(r0, r1, &(0x7f000000a000), 0x200000000000002) 2018/05/18 20:37:19 executing program 1: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) io_setup(0x469, &(0x7f0000000180)=0x0) io_submit(r2, 0x1, &(0x7f00000016c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100), 0x3f000000}]) 2018/05/18 20:37:19 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in6}, {@in=@loopback=0x7f000001, 0x0, 0x6c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}, 0xfffff000}}]}, 0x138}, 0x1}, 0x0) 2018/05/18 20:37:19 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pselect6(0x0, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000080)={0x77359400}, &(0x7f0000000040)={&(0x7f0000000240), 0xffffff8a}) 2018/05/18 20:37:19 executing program 4: r0 = timerfd_create(0x0, 0x0) read(r0, &(0x7f0000da2000)=""/8, 0x7) 2018/05/18 20:37:20 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)="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", 0x0, 0x0) fcntl$notify(r0, 0x402, 0x800000000000000d) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) unshare(0x400) fcntl$notify(r1, 0x402, 0x4) 2018/05/18 20:37:20 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xa, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x50}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 2018/05/18 20:37:20 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in6}, {@in=@loopback=0x7f000001, 0x0, 0x6c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}, 0xfffff000}}]}, 0x138}, 0x1}, 0x0) 2018/05/18 20:37:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000000)='dev ', 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ftruncate(r1, 0x40001) sendfile(r0, r1, &(0x7f000000a000), 0x200000000000002) 2018/05/18 20:37:20 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pselect6(0x0, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000080)={0x77359400}, &(0x7f0000000040)={&(0x7f0000000240), 0xffffff8a}) 2018/05/18 20:37:20 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r1, 0x0) setreuid(r1, 0x0) 2018/05/18 20:37:20 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000001c0)) 2018/05/18 20:37:20 executing program 1: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) io_setup(0x469, &(0x7f0000000180)=0x0) io_submit(r2, 0x1, &(0x7f00000016c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100), 0x3f000000}]) 2018/05/18 20:37:20 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pselect6(0x0, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000080)={0x77359400}, &(0x7f0000000040)={&(0x7f0000000240), 0xffffff8a}) 2018/05/18 20:37:20 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r1, 0x0) setreuid(r1, 0x0) 2018/05/18 20:37:20 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xa, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x50}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 2018/05/18 20:37:20 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in6}, {@in=@loopback=0x7f000001, 0x0, 0x6c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}, 0xfffff000}}]}, 0x138}, 0x1}, 0x0) 2018/05/18 20:37:20 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)="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", 0x0, 0x0) fcntl$notify(r0, 0x402, 0x800000000000000d) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) unshare(0x400) fcntl$notify(r1, 0x402, 0x4) 2018/05/18 20:37:20 executing program 0: epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x45}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}], {0x95}}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x18) 2018/05/18 20:37:20 executing program 1: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) io_setup(0x469, &(0x7f0000000180)=0x0) io_submit(r2, 0x1, &(0x7f00000016c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100), 0x3f000000}]) 2018/05/18 20:37:20 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pselect6(0x0, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000080)={0x77359400}, &(0x7f0000000040)={&(0x7f0000000240), 0xffffff8a}) 2018/05/18 20:37:20 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in6}, {@in=@loopback=0x7f000001, 0x0, 0x6c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}, 0xfffff000}}]}, 0x138}, 0x1}, 0x0) 2018/05/18 20:37:20 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xa, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x50}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 2018/05/18 20:37:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 84.872595] binder: undelivered death notification, 0000000000000000 [ 84.883738] binder: BINDER_SET_CONTEXT_MGR already set [ 84.889573] binder: 7165:7169 ioctl 40046207 0 returned -16 [ 84.993142] binder: undelivered death notification, 0000000000000000 2018/05/18 20:37:21 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r1, 0x0) setreuid(r1, 0x0) 2018/05/18 20:37:21 executing program 0: epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x45}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}], {0x95}}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x18) 2018/05/18 20:37:21 executing program 2: syz_fuseblk_mount(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='ext4\x00', 0x0, 0x0) 2018/05/18 20:37:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140), 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 2018/05/18 20:37:21 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0105303, &(0x7f0000000040)={0x5, 0x0, 0x0, {0x77359400}}) 2018/05/18 20:37:21 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1af}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x2011, r0, 0x0) 2018/05/18 20:37:21 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000001c0)) 2018/05/18 20:37:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/18 20:37:21 executing program 0: epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x45}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}], {0x95}}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x18) [ 85.561280] binder: undelivered death notification, 0000000000000000 [ 85.593455] print_req_error: I/O error, dev loop199, sector 2 2018/05/18 20:37:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/18 20:37:21 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1af}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x2011, r0, 0x0) 2018/05/18 20:37:21 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r1, 0x0) setreuid(r1, 0x0) 2018/05/18 20:37:21 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0105303, &(0x7f0000000040)={0x5, 0x0, 0x0, {0x77359400}}) [ 85.609875] EXT4-fs (loop199): unable to read superblock 2018/05/18 20:37:21 executing program 2: syz_fuseblk_mount(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='ext4\x00', 0x0, 0x0) [ 85.665717] binder: undelivered death notification, 0000000000000000 2018/05/18 20:37:21 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1af}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x2011, r0, 0x0) 2018/05/18 20:37:21 executing program 0: epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x45}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}], {0x95}}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x18) 2018/05/18 20:37:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/18 20:37:21 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0105303, &(0x7f0000000040)={0x5, 0x0, 0x0, {0x77359400}}) 2018/05/18 20:37:21 executing program 4: syz_fuseblk_mount(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='ext4\x00', 0x0, 0x0) [ 85.823868] print_req_error: I/O error, dev loop199, sector 2 [ 85.832069] binder: undelivered death notification, 0000000000000000 [ 85.846737] EXT4-fs (loop199): unable to read superblock [ 85.875746] print_req_error: I/O error, dev loop199, sector 2 [ 85.881929] EXT4-fs (loop199): unable to read superblock 2018/05/18 20:37:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140), 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 2018/05/18 20:37:22 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1af}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x2011, r0, 0x0) 2018/05/18 20:37:22 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0105303, &(0x7f0000000040)={0x5, 0x0, 0x0, {0x77359400}}) 2018/05/18 20:37:23 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000078b056677ad5"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/05/18 20:37:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140), 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 2018/05/18 20:37:23 executing program 1: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"6966623000faffffffffffffff00", 0x20100f}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30a) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00\x00\x00\x00\x00\x00\x00!\x00', 0xa201}) 2018/05/18 20:37:23 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1af}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x2011, r0, 0x0) 2018/05/18 20:37:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/18 20:37:23 executing program 2: syz_fuseblk_mount(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='ext4\x00', 0x0, 0x0) 2018/05/18 20:37:23 executing program 4: syz_fuseblk_mount(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='ext4\x00', 0x0, 0x0) 2018/05/18 20:37:23 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2e, 0x119, 0x0, 0x0, {0x2001}, [@nested={0x8, 0x0, [@typed={0x4, 0x8, @binary}]}]}, 0x1c}, 0x1}, 0x0) [ 87.436162] binder: undelivered death notification, 0000000000000000 [ 87.461277] print_req_error: I/O error, dev loop199, sector 2 [ 87.467461] EXT4-fs (loop199): unable to read superblock 2018/05/18 20:37:23 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1af}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x2011, r0, 0x0) 2018/05/18 20:37:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/18 20:37:23 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2e, 0x119, 0x0, 0x0, {0x2001}, [@nested={0x8, 0x0, [@typed={0x4, 0x8, @binary}]}]}, 0x1c}, 0x1}, 0x0) [ 87.506106] print_req_error: I/O error, dev loop199, sector 2 [ 87.512290] EXT4-fs (loop199): unable to read superblock 2018/05/18 20:37:23 executing program 4: syz_fuseblk_mount(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='ext4\x00', 0x0, 0x0) 2018/05/18 20:37:23 executing program 2: syz_fuseblk_mount(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='ext4\x00', 0x0, 0x0) 2018/05/18 20:37:23 executing program 1: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"6966623000faffffffffffffff00", 0x20100f}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30a) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00\x00\x00\x00\x00\x00\x00!\x00', 0xa201}) [ 87.582969] binder: undelivered death notification, 0000000000000000 2018/05/18 20:37:23 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1af}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x2011, r0, 0x0) 2018/05/18 20:37:23 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2e, 0x119, 0x0, 0x0, {0x2001}, [@nested={0x8, 0x0, [@typed={0x4, 0x8, @binary}]}]}, 0x1c}, 0x1}, 0x0) [ 87.643918] print_req_error: I/O error, dev loop199, sector 2 [ 87.655594] EXT4-fs (loop199): unable to read superblock [ 87.698164] print_req_error: I/O error, dev loop199, sector 2 [ 87.704327] EXT4-fs (loop199): unable to read superblock 2018/05/18 20:37:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140), 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 2018/05/18 20:37:24 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2e, 0x119, 0x0, 0x0, {0x2001}, [@nested={0x8, 0x0, [@typed={0x4, 0x8, @binary}]}]}, 0x1c}, 0x1}, 0x0) 2018/05/18 20:37:24 executing program 0: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f000002efe2)=[{0x0, 0x4}], 0x1) semop(r0, &(0x7f000001a000)=[{}], 0x1) semop(r0, &(0x7f0000000000)=[{}], 0x1) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000140)=""/246) 2018/05/18 20:37:24 executing program 1: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"6966623000faffffffffffffff00", 0x20100f}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30a) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00\x00\x00\x00\x00\x00\x00!\x00', 0xa201}) 2018/05/18 20:37:24 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000fd7000)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10, &(0x7f000043cfff)=[{&(0x7f0000718f0a)="be", 0x1}], 0x1, &(0x7f000036cfa0)}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f000093eee8)=[{&(0x7f00001f6000)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x203}}], 0x20}], 0x1, 0x0) 2018/05/18 20:37:24 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") unshare(0x40000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={'lo\x00', {0x2, 0x0, @rand_addr=0x2000000}}) 2018/05/18 20:37:24 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000078b056677ad5"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/05/18 20:37:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/18 20:37:24 executing program 7: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/100, 0x64}, {&(0x7f0000000380)=""/196, 0xc4}, {&(0x7f0000001580)=""/4096, 0x1000}], 0x3, &(0x7f0000000080)=""/49, 0x31}}, {{&(0x7f0000000580)=@nl, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000700)=""/221, 0xdd}}, {{&(0x7f0000000800)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000b00), 0x0, &(0x7f0000000b80)=""/205, 0xcd}}, {{&(0x7f0000000c80)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f0000004b80)=""/4096, 0x1000}}, {{&(0x7f0000000d40)=@hci, 0x80, &(0x7f0000001240), 0x0, &(0x7f00000012c0)=""/41, 0x29}}, {{&(0x7f0000001300)=@alg, 0x80, &(0x7f0000001480), 0x0, &(0x7f0000002580)=""/84, 0x54}}, {{&(0x7f0000002600)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f0000005d40), 0x0, &(0x7f0000005dc0)=""/205, 0xcd}}], 0x7, 0x0, &(0x7f0000007800)={0x77359400}) [ 88.416771] binder: undelivered death notification, 0000000000000000 [ 88.425138] IPVS: ftp: loaded support on port[0] = 21 2018/05/18 20:37:24 executing program 1: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"6966623000faffffffffffffff00", 0x20100f}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30a) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00\x00\x00\x00\x00\x00\x00!\x00', 0xa201}) 2018/05/18 20:37:24 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x0, 0x0, 0x7af1) lseek(r0, 0x0, 0x4) 2018/05/18 20:37:24 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000078b056677ad5"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/05/18 20:37:24 executing program 7: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/100, 0x64}, {&(0x7f0000000380)=""/196, 0xc4}, {&(0x7f0000001580)=""/4096, 0x1000}], 0x3, &(0x7f0000000080)=""/49, 0x31}}, {{&(0x7f0000000580)=@nl, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000700)=""/221, 0xdd}}, {{&(0x7f0000000800)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000b00), 0x0, &(0x7f0000000b80)=""/205, 0xcd}}, {{&(0x7f0000000c80)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f0000004b80)=""/4096, 0x1000}}, {{&(0x7f0000000d40)=@hci, 0x80, &(0x7f0000001240), 0x0, &(0x7f00000012c0)=""/41, 0x29}}, {{&(0x7f0000001300)=@alg, 0x80, &(0x7f0000001480), 0x0, &(0x7f0000002580)=""/84, 0x54}}, {{&(0x7f0000002600)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f0000005d40), 0x0, &(0x7f0000005dc0)=""/205, 0xcd}}], 0x7, 0x0, &(0x7f0000007800)={0x77359400}) 2018/05/18 20:37:24 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x0, 0x0, 0x7af1) lseek(r0, 0x0, 0x4) [ 88.612881] device lo entered promiscuous mode 2018/05/18 20:37:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) clock_gettime(0x0, &(0x7f0000000780)={0x0}) ppoll(&(0x7f0000000740)=[{r1}], 0x1, &(0x7f00000007c0)={r2}, &(0x7f0000000800), 0x8) ioctl$TCSETAF(r1, 0x5412, &(0x7f00000000c0)={0x4}) 2018/05/18 20:37:24 executing program 7: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/100, 0x64}, {&(0x7f0000000380)=""/196, 0xc4}, {&(0x7f0000001580)=""/4096, 0x1000}], 0x3, &(0x7f0000000080)=""/49, 0x31}}, {{&(0x7f0000000580)=@nl, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000700)=""/221, 0xdd}}, {{&(0x7f0000000800)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000b00), 0x0, &(0x7f0000000b80)=""/205, 0xcd}}, {{&(0x7f0000000c80)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f0000004b80)=""/4096, 0x1000}}, {{&(0x7f0000000d40)=@hci, 0x80, &(0x7f0000001240), 0x0, &(0x7f00000012c0)=""/41, 0x29}}, {{&(0x7f0000001300)=@alg, 0x80, &(0x7f0000001480), 0x0, &(0x7f0000002580)=""/84, 0x54}}, {{&(0x7f0000002600)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f0000005d40), 0x0, &(0x7f0000005dc0)=""/205, 0xcd}}], 0x7, 0x0, &(0x7f0000007800)={0x77359400}) [ 88.674117] IPVS: ftp: loaded support on port[0] = 21 2018/05/18 20:37:25 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") unshare(0x40000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={'lo\x00', {0x2, 0x0, @rand_addr=0x2000000}}) 2018/05/18 20:37:25 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000078b056677ad5"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/05/18 20:37:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) clock_gettime(0x0, &(0x7f0000000780)={0x0}) ppoll(&(0x7f0000000740)=[{r1}], 0x1, &(0x7f00000007c0)={r2}, &(0x7f0000000800), 0x8) ioctl$TCSETAF(r1, 0x5412, &(0x7f00000000c0)={0x4}) 2018/05/18 20:37:25 executing program 0: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f000002efe2)=[{0x0, 0x4}], 0x1) semop(r0, &(0x7f000001a000)=[{}], 0x1) semop(r0, &(0x7f0000000000)=[{}], 0x1) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000140)=""/246) 2018/05/18 20:37:25 executing program 7: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/100, 0x64}, {&(0x7f0000000380)=""/196, 0xc4}, {&(0x7f0000001580)=""/4096, 0x1000}], 0x3, &(0x7f0000000080)=""/49, 0x31}}, {{&(0x7f0000000580)=@nl, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000700)=""/221, 0xdd}}, {{&(0x7f0000000800)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000b00), 0x0, &(0x7f0000000b80)=""/205, 0xcd}}, {{&(0x7f0000000c80)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f0000004b80)=""/4096, 0x1000}}, {{&(0x7f0000000d40)=@hci, 0x80, &(0x7f0000001240), 0x0, &(0x7f00000012c0)=""/41, 0x29}}, {{&(0x7f0000001300)=@alg, 0x80, &(0x7f0000001480), 0x0, &(0x7f0000002580)=""/84, 0x54}}, {{&(0x7f0000002600)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f0000005d40), 0x0, &(0x7f0000005dc0)=""/205, 0xcd}}], 0x7, 0x0, &(0x7f0000007800)={0x77359400}) 2018/05/18 20:37:25 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x0, 0x0, 0x7af1) lseek(r0, 0x0, 0x4) 2018/05/18 20:37:25 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") unshare(0x40000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={'lo\x00', {0x2, 0x0, @rand_addr=0x2000000}}) 2018/05/18 20:37:25 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000fd7000)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10, &(0x7f000043cfff)=[{&(0x7f0000718f0a)="be", 0x1}], 0x1, &(0x7f000036cfa0)}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f000093eee8)=[{&(0x7f00001f6000)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x203}}], 0x20}], 0x1, 0x0) [ 89.682678] IPVS: ftp: loaded support on port[0] = 21 2018/05/18 20:37:25 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x0, 0x0, 0x7af1) lseek(r0, 0x0, 0x4) [ 89.713773] IPVS: ftp: loaded support on port[0] = 21 2018/05/18 20:37:25 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") unshare(0x40000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={'lo\x00', {0x2, 0x0, @rand_addr=0x2000000}}) 2018/05/18 20:37:25 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)="2e2f6367726f75702e63707500eac5bea7af575a45fddd5af3a7709295a69e7bc5fd0592bf2a4dc8ace908be8842141ca2a714ed0163d4afd8ac48123d4869e05556a93347d6a7430e03a5f2beb186f16bacf2e4dcdcf3b9ff1d99165ce38d996e7798fe471d9a0d81acd08788fcc9892a2487efcde7a649614b14ba1c18", 0x200002, 0x0) r1 = socket(0xa, 0x6, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = openat$cgroup_int(r0, &(0x7f0000000400)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r2, r2, &(0x7f00000000c0), 0x5) 2018/05/18 20:37:25 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='tmpfs.', 0x0, &(0x7f0000000280)) [ 89.855901] IPVS: ftp: loaded support on port[0] = 21 2018/05/18 20:37:25 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)="2e2f6367726f75702e63707500eac5bea7af575a45fddd5af3a7709295a69e7bc5fd0592bf2a4dc8ace908be8842141ca2a714ed0163d4afd8ac48123d4869e05556a93347d6a7430e03a5f2beb186f16bacf2e4dcdcf3b9ff1d99165ce38d996e7798fe471d9a0d81acd08788fcc9892a2487efcde7a649614b14ba1c18", 0x200002, 0x0) r1 = socket(0xa, 0x6, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = openat$cgroup_int(r0, &(0x7f0000000400)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r2, r2, &(0x7f00000000c0), 0x5) [ 89.939494] device lo entered promiscuous mode 2018/05/18 20:37:25 executing program 3: r0 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1e0000001800030007fffd946fa283bc8020000000040005031d85681300", 0x1e}], 0x1}, 0x0) [ 90.060154] device lo entered promiscuous mode [ 90.115153] device lo entered promiscuous mode 2018/05/18 20:37:26 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") unshare(0x40000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={'lo\x00', {0x2, 0x0, @rand_addr=0x2000000}}) 2018/05/18 20:37:26 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)="2e2f6367726f75702e63707500eac5bea7af575a45fddd5af3a7709295a69e7bc5fd0592bf2a4dc8ace908be8842141ca2a714ed0163d4afd8ac48123d4869e05556a93347d6a7430e03a5f2beb186f16bacf2e4dcdcf3b9ff1d99165ce38d996e7798fe471d9a0d81acd08788fcc9892a2487efcde7a649614b14ba1c18", 0x200002, 0x0) r1 = socket(0xa, 0x6, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = openat$cgroup_int(r0, &(0x7f0000000400)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r2, r2, &(0x7f00000000c0), 0x5) 2018/05/18 20:37:26 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") unshare(0x40000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={'lo\x00', {0x2, 0x0, @rand_addr=0x2000000}}) 2018/05/18 20:37:26 executing program 3: r0 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1e0000001800030007fffd946fa283bc8020000000040005031d85681300", 0x1e}], 0x1}, 0x0) 2018/05/18 20:37:26 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") unshare(0x40000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={'lo\x00', {0x2, 0x0, @rand_addr=0x2000000}}) 2018/05/18 20:37:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000fd7000)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10, &(0x7f000043cfff)=[{&(0x7f0000718f0a)="be", 0x1}], 0x1, &(0x7f000036cfa0)}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f000093eee8)=[{&(0x7f00001f6000)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x203}}], 0x20}], 0x1, 0x0) 2018/05/18 20:37:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) clock_gettime(0x0, &(0x7f0000000780)={0x0}) ppoll(&(0x7f0000000740)=[{r1}], 0x1, &(0x7f00000007c0)={r2}, &(0x7f0000000800), 0x8) ioctl$TCSETAF(r1, 0x5412, &(0x7f00000000c0)={0x4}) 2018/05/18 20:37:26 executing program 0: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f000002efe2)=[{0x0, 0x4}], 0x1) semop(r0, &(0x7f000001a000)=[{}], 0x1) semop(r0, &(0x7f0000000000)=[{}], 0x1) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000140)=""/246) 2018/05/18 20:37:26 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)="2e2f6367726f75702e63707500eac5bea7af575a45fddd5af3a7709295a69e7bc5fd0592bf2a4dc8ace908be8842141ca2a714ed0163d4afd8ac48123d4869e05556a93347d6a7430e03a5f2beb186f16bacf2e4dcdcf3b9ff1d99165ce38d996e7798fe471d9a0d81acd08788fcc9892a2487efcde7a649614b14ba1c18", 0x200002, 0x0) r1 = socket(0xa, 0x6, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = openat$cgroup_int(r0, &(0x7f0000000400)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r2, r2, &(0x7f00000000c0), 0x5) 2018/05/18 20:37:26 executing program 3: r0 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1e0000001800030007fffd946fa283bc8020000000040005031d85681300", 0x1e}], 0x1}, 0x0) [ 90.665713] IPVS: ftp: loaded support on port[0] = 21 [ 90.680545] IPVS: ftp: loaded support on port[0] = 21 [ 90.697523] IPVS: ftp: loaded support on port[0] = 21 2018/05/18 20:37:26 executing program 3: r0 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1e0000001800030007fffd946fa283bc8020000000040005031d85681300", 0x1e}], 0x1}, 0x0) 2018/05/18 20:37:26 executing program 6: unshare(0x2000400) r0 = epoll_create(0x9) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040), 0x8) 2018/05/18 20:37:26 executing program 3: r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x1000200100000114, 0x2714, &(0x7f0000000080)=""/1, &(0x7f0000000280)=0xfec0) [ 90.924419] device lo entered promiscuous mode 2018/05/18 20:37:26 executing program 6: unshare(0x2000400) r0 = epoll_create(0x9) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040), 0x8) [ 90.946158] device lo entered promiscuous mode 2018/05/18 20:37:26 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") unshare(0x40000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={'lo\x00', {0x2, 0x0, @rand_addr=0x2000000}}) [ 90.992536] device lo entered promiscuous mode 2018/05/18 20:37:26 executing program 3: r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x1000200100000114, 0x2714, &(0x7f0000000080)=""/1, &(0x7f0000000280)=0xfec0) [ 91.065614] IPVS: ftp: loaded support on port[0] = 21 [ 91.214132] device lo entered promiscuous mode 2018/05/18 20:37:27 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") unshare(0x40000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={'lo\x00', {0x2, 0x0, @rand_addr=0x2000000}}) 2018/05/18 20:37:27 executing program 6: unshare(0x2000400) r0 = epoll_create(0x9) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040), 0x8) 2018/05/18 20:37:27 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") unshare(0x40000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={'lo\x00', {0x2, 0x0, @rand_addr=0x2000000}}) 2018/05/18 20:37:27 executing program 3: r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x1000200100000114, 0x2714, &(0x7f0000000080)=""/1, &(0x7f0000000280)=0xfec0) 2018/05/18 20:37:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4008ae93, &(0x7f0000000080)) 2018/05/18 20:37:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000fd7000)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10, &(0x7f000043cfff)=[{&(0x7f0000718f0a)="be", 0x1}], 0x1, &(0x7f000036cfa0)}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f000093eee8)=[{&(0x7f00001f6000)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x203}}], 0x20}], 0x1, 0x0) 2018/05/18 20:37:27 executing program 0: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f000002efe2)=[{0x0, 0x4}], 0x1) semop(r0, &(0x7f000001a000)=[{}], 0x1) semop(r0, &(0x7f0000000000)=[{}], 0x1) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000140)=""/246) 2018/05/18 20:37:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) clock_gettime(0x0, &(0x7f0000000780)={0x0}) ppoll(&(0x7f0000000740)=[{r1}], 0x1, &(0x7f00000007c0)={r2}, &(0x7f0000000800), 0x8) ioctl$TCSETAF(r1, 0x5412, &(0x7f00000000c0)={0x4}) 2018/05/18 20:37:27 executing program 6: unshare(0x2000400) r0 = epoll_create(0x9) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040), 0x8) 2018/05/18 20:37:27 executing program 3: r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x1000200100000114, 0x2714, &(0x7f0000000080)=""/1, &(0x7f0000000280)=0xfec0) [ 91.715990] IPVS: ftp: loaded support on port[0] = 21 [ 91.735907] IPVS: ftp: loaded support on port[0] = 21 2018/05/18 20:37:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4008ae93, &(0x7f0000000080)) 2018/05/18 20:37:27 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7005, &(0x7f0000000040)) 2018/05/18 20:37:27 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, 0x0) syz_fuse_mount(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x20) [ 91.922614] cgroup: cgroup2: unknown option "fd=19" 2018/05/18 20:37:27 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7005, &(0x7f0000000040)) 2018/05/18 20:37:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4008ae93, &(0x7f0000000080)) [ 91.951533] cgroup: cgroup2: unknown option "fd=20" [ 91.994990] device lo entered promiscuous mode 2018/05/18 20:37:27 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, 0x0) syz_fuse_mount(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x20) [ 92.020058] device lo entered promiscuous mode [ 92.098672] cgroup: cgroup2: unknown option "fd=19" 2018/05/18 20:37:28 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, 0x0) syz_fuse_mount(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x20) 2018/05/18 20:37:28 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7005, &(0x7f0000000040)) 2018/05/18 20:37:28 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, 0x0) syz_fuse_mount(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x20) 2018/05/18 20:37:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4008ae93, &(0x7f0000000080)) 2018/05/18 20:37:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @loopback=0x7f000001}, {0x304, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x4, {0x2, 0x0, @multicast1=0xe0000001}, "00000080000001000000007000"}) 2018/05/18 20:37:28 executing program 1: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00005cfff6)='/dev/cuse\x00', 0x0, 0x0) pread64(r1, &(0x7f0000a4c000)=""/56, 0x38, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x3) 2018/05/18 20:37:28 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000004000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000008000)={{&(0x7f0000cf7000/0x4000)=nil, 0x4000}, 0x7fffdf308000, 0xffff8000}) 2018/05/18 20:37:28 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0xa, 0x3, 0x87) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0xffffff87, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 92.722721] cgroup: cgroup2: unknown option "fd=19" [ 92.728918] cgroup: cgroup2: unknown option "fd=19" 2018/05/18 20:37:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @loopback=0x7f000001}, {0x304, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x4, {0x2, 0x0, @multicast1=0xe0000001}, "00000080000001000000007000"}) 2018/05/18 20:37:28 executing program 1: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00005cfff6)='/dev/cuse\x00', 0x0, 0x0) pread64(r1, &(0x7f0000a4c000)=""/56, 0x38, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x3) 2018/05/18 20:37:28 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7005, &(0x7f0000000040)) 2018/05/18 20:37:28 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, 0x0) syz_fuse_mount(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x20) 2018/05/18 20:37:28 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, 0x0) syz_fuse_mount(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x20) 2018/05/18 20:37:28 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000004000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000008000)={{&(0x7f0000cf7000/0x4000)=nil, 0x4000}, 0x7fffdf308000, 0xffff8000}) 2018/05/18 20:37:28 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffc000/0x2000)=nil) 2018/05/18 20:37:28 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0xa, 0x3, 0x87) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0xffffff87, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 2018/05/18 20:37:28 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents(r0, &(0x7f00000001c0)=""/69, 0xfe) getdents64(r0, &(0x7f0000004100)=""/4096, 0x111e) 2018/05/18 20:37:28 executing program 1: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00005cfff6)='/dev/cuse\x00', 0x0, 0x0) pread64(r1, &(0x7f0000a4c000)=""/56, 0x38, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x3) 2018/05/18 20:37:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @loopback=0x7f000001}, {0x304, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x4, {0x2, 0x0, @multicast1=0xe0000001}, "00000080000001000000007000"}) [ 93.001494] cgroup: cgroup2: unknown option "fd=19" [ 93.016399] cgroup: cgroup2: unknown option "fd=19" 2018/05/18 20:37:28 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000004000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000008000)={{&(0x7f0000cf7000/0x4000)=nil, 0x4000}, 0x7fffdf308000, 0xffff8000}) 2018/05/18 20:37:28 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0xa, 0x3, 0x87) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0xffffff87, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 2018/05/18 20:37:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @loopback=0x7f000001}, {0x304, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x4, {0x2, 0x0, @multicast1=0xe0000001}, "00000080000001000000007000"}) 2018/05/18 20:37:28 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents(r0, &(0x7f00000001c0)=""/69, 0xfe) getdents64(r0, &(0x7f0000004100)=""/4096, 0x111e) 2018/05/18 20:37:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents(r0, &(0x7f00000001c0)=""/69, 0xfe) getdents64(r0, &(0x7f0000004100)=""/4096, 0x111e) 2018/05/18 20:37:28 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, 0x0) syz_fuse_mount(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x20) 2018/05/18 20:37:28 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffc000/0x2000)=nil) 2018/05/18 20:37:28 executing program 1: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00005cfff6)='/dev/cuse\x00', 0x0, 0x0) pread64(r1, &(0x7f0000a4c000)=""/56, 0x38, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x3) 2018/05/18 20:37:28 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0xa, 0x3, 0x87) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0xffffff87, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 2018/05/18 20:37:28 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000004000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000008000)={{&(0x7f0000cf7000/0x4000)=nil, 0x4000}, 0x7fffdf308000, 0xffff8000}) [ 93.305850] cgroup: cgroup2: unknown option "fd=19" 2018/05/18 20:37:29 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x4, 0x1, &(0x7f0000cc3ff0), &(0x7f000044b000), 0x0) 2018/05/18 20:37:29 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents(r0, &(0x7f00000001c0)=""/69, 0xfe) getdents64(r0, &(0x7f0000004100)=""/4096, 0x111e) 2018/05/18 20:37:29 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001a00)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001840)=@delpolicy={0x5c, 0x14, 0x3, 0x0, 0x0, {{@in6=@loopback={0x0, 0x1}, @in6=@loopback={0x0, 0x1}}}, [@mark={0xc, 0x15}]}, 0x5c}, 0x1}, 0x0) 2018/05/18 20:37:29 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffc000/0x2000)=nil) 2018/05/18 20:37:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3f00000000000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="00010000000800000000000000000000f4000204000000000000000000000000002000000020000000010000000000016e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)) 2018/05/18 20:37:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents(r0, &(0x7f00000001c0)=""/69, 0xfe) getdents64(r0, &(0x7f0000004100)=""/4096, 0x111e) 2018/05/18 20:37:29 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={"6966623000faffffffffffffff00", 0x12}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000001c0)=0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) ppoll(&(0x7f0000000080)=[{r1}], 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) 2018/05/18 20:37:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2284, &(0x7f0000000080)={0x102, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f0000000400)}, &(0x7f0000000100), &(0x7f0000001400)=""/71, 0x0, 0x0, 0x0, &(0x7f0000000040)}) 2018/05/18 20:37:29 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001a00)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001840)=@delpolicy={0x5c, 0x14, 0x3, 0x0, 0x0, {{@in6=@loopback={0x0, 0x1}, @in6=@loopback={0x0, 0x1}}}, [@mark={0xc, 0x15}]}, 0x5c}, 0x1}, 0x0) 2018/05/18 20:37:29 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents(r0, &(0x7f00000001c0)=""/69, 0xfe) getdents64(r0, &(0x7f0000004100)=""/4096, 0x111e) [ 93.556685] EXT4-fs error (device loop4): ext4_iget:4756: inode #2: comm syz-executor4: root inode unallocated [ 93.593155] EXT4-fs (loop4): Remounting filesystem read-only [ 93.599295] EXT4-fs (loop4): get root inode failed [ 93.604517] EXT4-fs (loop4): mount failed [ 93.754890] EXT4-fs error (device loop4): ext4_iget:4756: inode #2: comm syz-executor4: root inode unallocated [ 93.769967] EXT4-fs (loop4): Remounting filesystem read-only [ 93.776081] EXT4-fs (loop4): get root inode failed [ 93.781124] EXT4-fs (loop4): mount failed 2018/05/18 20:37:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents(r0, &(0x7f00000001c0)=""/69, 0xfe) getdents64(r0, &(0x7f0000004100)=""/4096, 0x111e) 2018/05/18 20:37:30 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffc000/0x2000)=nil) 2018/05/18 20:37:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2284, &(0x7f0000000080)={0x102, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f0000000400)}, &(0x7f0000000100), &(0x7f0000001400)=""/71, 0x0, 0x0, 0x0, &(0x7f0000000040)}) 2018/05/18 20:37:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001a00)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001840)=@delpolicy={0x5c, 0x14, 0x3, 0x0, 0x0, {{@in6=@loopback={0x0, 0x1}, @in6=@loopback={0x0, 0x1}}}, [@mark={0xc, 0x15}]}, 0x5c}, 0x1}, 0x0) 2018/05/18 20:37:30 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={"6966623000faffffffffffffff00", 0x12}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000001c0)=0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) ppoll(&(0x7f0000000080)=[{r1}], 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) 2018/05/18 20:37:30 executing program 6: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x7b, &(0x7f0000000000)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}], 0x10) 2018/05/18 20:37:30 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x4, 0x1, &(0x7f0000cc3ff0), &(0x7f000044b000), 0x0) 2018/05/18 20:37:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3f00000000000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="00010000000800000000000000000000f4000204000000000000000000000000002000000020000000010000000000016e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)) 2018/05/18 20:37:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2284, &(0x7f0000000080)={0x102, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f0000000400)}, &(0x7f0000000100), &(0x7f0000001400)=""/71, 0x0, 0x0, 0x0, &(0x7f0000000040)}) [ 94.364203] EXT4-fs error (device loop4): ext4_iget:4756: inode #2: comm syz-executor4: root inode unallocated 2018/05/18 20:37:30 executing program 6: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x7b, &(0x7f0000000000)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}], 0x10) 2018/05/18 20:37:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001a00)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001840)=@delpolicy={0x5c, 0x14, 0x3, 0x0, 0x0, {{@in6=@loopback={0x0, 0x1}, @in6=@loopback={0x0, 0x1}}}, [@mark={0xc, 0x15}]}, 0x5c}, 0x1}, 0x0) 2018/05/18 20:37:30 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000fe3), 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r1, r0) 2018/05/18 20:37:30 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000080)) [ 94.431457] EXT4-fs (loop4): Remounting filesystem read-only [ 94.437507] EXT4-fs (loop4): get root inode failed [ 94.442531] EXT4-fs (loop4): mount failed 2018/05/18 20:37:30 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={"6966623000faffffffffffffff00", 0x12}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000001c0)=0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) ppoll(&(0x7f0000000080)=[{r1}], 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) 2018/05/18 20:37:30 executing program 6: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x7b, &(0x7f0000000000)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}], 0x10) 2018/05/18 20:37:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_snmp6\x00') syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, &(0x7f00000001c0)="baf80c66b8047ea28a66efbafc0ced0f20c06635000004000f22c00f3566b9800000c00f326635000800000f300f01ca66b9fa0300000f323e2e0fc7a9d654baf80c66b8bec49a8b66efbafc0cb8ce69ef862c0f01f7", 0x56}], 0x1, 0x0, &(0x7f00000003c0), 0x0) 2018/05/18 20:37:31 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x4, 0x1, &(0x7f0000cc3ff0), &(0x7f000044b000), 0x0) 2018/05/18 20:37:31 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000080)) 2018/05/18 20:37:31 executing program 6: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x7b, &(0x7f0000000000)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}], 0x10) 2018/05/18 20:37:31 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000fe3), 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r1, r0) 2018/05/18 20:37:31 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={"6966623000faffffffffffffff00", 0x12}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000001c0)=0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) ppoll(&(0x7f0000000080)=[{r1}], 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) 2018/05/18 20:37:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3f00000000000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="00010000000800000000000000000000f4000204000000000000000000000000002000000020000000010000000000016e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)) 2018/05/18 20:37:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_snmp6\x00') syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, &(0x7f00000001c0)="baf80c66b8047ea28a66efbafc0ced0f20c06635000004000f22c00f3566b9800000c00f326635000800000f300f01ca66b9fa0300000f323e2e0fc7a9d654baf80c66b8bec49a8b66efbafc0cb8ce69ef862c0f01f7", 0x56}], 0x1, 0x0, &(0x7f00000003c0), 0x0) 2018/05/18 20:37:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2284, &(0x7f0000000080)={0x102, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f0000000400)}, &(0x7f0000000100), &(0x7f0000001400)=""/71, 0x0, 0x0, 0x0, &(0x7f0000000040)}) 2018/05/18 20:37:31 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000200), 0x0) sendmmsg(r1, &(0x7f0000006f40)=[{{&(0x7f0000000e40)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000001180), 0x0, &(0x7f0000002840)}}, {{&(0x7f0000001340)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000001500), 0x0, &(0x7f0000005880)}}], 0x2, 0x0) 2018/05/18 20:37:31 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000fe3), 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r1, r0) [ 95.364085] EXT4-fs error (device loop4): ext4_iget:4756: inode #2: comm syz-executor4: root inode unallocated 2018/05/18 20:37:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 2018/05/18 20:37:31 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000080)) [ 95.428716] EXT4-fs (loop4): Remounting filesystem read-only [ 95.434796] EXT4-fs (loop4): get root inode failed [ 95.439796] EXT4-fs (loop4): mount failed 2018/05/18 20:37:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_snmp6\x00') syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, &(0x7f00000001c0)="baf80c66b8047ea28a66efbafc0ced0f20c06635000004000f22c00f3566b9800000c00f326635000800000f300f01ca66b9fa0300000f323e2e0fc7a9d654baf80c66b8bec49a8b66efbafc0cb8ce69ef862c0f01f7", 0x56}], 0x1, 0x0, &(0x7f00000003c0), 0x0) 2018/05/18 20:37:31 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x1a, 0x201, 0x0, 0x0, {}, [@typed={0x8, 0x0, @u32=0xffffffff}]}, 0x1c}, 0x1}, 0x0) 2018/05/18 20:37:31 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000200), 0x0) sendmmsg(r1, &(0x7f0000006f40)=[{{&(0x7f0000000e40)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000001180), 0x0, &(0x7f0000002840)}}, {{&(0x7f0000001340)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000001500), 0x0, &(0x7f0000005880)}}], 0x2, 0x0) 2018/05/18 20:37:31 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000fe3), 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r1, r0) 2018/05/18 20:37:31 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x4, 0x1, &(0x7f0000cc3ff0), &(0x7f000044b000), 0x0) 2018/05/18 20:37:31 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x1a, 0x201, 0x0, 0x0, {}, [@typed={0x8, 0x0, @u32=0xffffffff}]}, 0x1c}, 0x1}, 0x0) 2018/05/18 20:37:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3f00000000000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="00010000000800000000000000000000f4000204000000000000000000000000002000000020000000010000000000016e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)) 2018/05/18 20:37:31 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000200), 0x0) sendmmsg(r1, &(0x7f0000006f40)=[{{&(0x7f0000000e40)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000001180), 0x0, &(0x7f0000002840)}}, {{&(0x7f0000001340)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000001500), 0x0, &(0x7f0000005880)}}], 0x2, 0x0) 2018/05/18 20:37:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_snmp6\x00') syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, &(0x7f00000001c0)="baf80c66b8047ea28a66efbafc0ced0f20c06635000004000f22c00f3566b9800000c00f326635000800000f300f01ca66b9fa0300000f323e2e0fc7a9d654baf80c66b8bec49a8b66efbafc0cb8ce69ef862c0f01f7", 0x56}], 0x1, 0x0, &(0x7f00000003c0), 0x0) 2018/05/18 20:37:31 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005", 0x5) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000000)={&(0x7f0000f7ffa8)=@alg, 0x80, &(0x7f0000001200)=[{&(0x7f0000000080)=""/93, 0x5d}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0) 2018/05/18 20:37:32 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000200), 0x0) sendmmsg(r1, &(0x7f0000006f40)=[{{&(0x7f0000000e40)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000001180), 0x0, &(0x7f0000002840)}}, {{&(0x7f0000001340)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000001500), 0x0, &(0x7f0000005880)}}], 0x2, 0x0) 2018/05/18 20:37:32 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x1a, 0x201, 0x0, 0x0, {}, [@typed={0x8, 0x0, @u32=0xffffffff}]}, 0x1c}, 0x1}, 0x0) [ 96.254227] EXT4-fs error (device loop4): ext4_iget:4756: inode #2: comm syz-executor4: root inode unallocated [ 96.320737] EXT4-fs (loop4): Remounting filesystem read-only [ 96.326826] EXT4-fs (loop4): get root inode failed [ 96.331852] EXT4-fs (loop4): mount failed 2018/05/18 20:37:32 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a539d39c2bd6a40fa8c8aa024d86cdc834bc921c0525fec2541e21ccf67e1d7b55cabe9e068dd58ce565aa9a9d325ebac7627ffe7a54cdbd77b3"}, 0x60) 2018/05/18 20:37:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 2018/05/18 20:37:33 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000080)) 2018/05/18 20:37:33 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005", 0x5) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000000)={&(0x7f0000f7ffa8)=@alg, 0x80, &(0x7f0000001200)=[{&(0x7f0000000080)=""/93, 0x5d}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0) 2018/05/18 20:37:33 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x1a, 0x201, 0x0, 0x0, {}, [@typed={0x8, 0x0, @u32=0xffffffff}]}, 0x1c}, 0x1}, 0x0) 2018/05/18 20:37:33 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 2018/05/18 20:37:33 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 2018/05/18 20:37:33 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a539d39c2bd6a40fa8c8aa024d86cdc834bc921c0525fec2541e21ccf67e1d7b55cabe9e068dd58ce565aa9a9d325ebac7627ffe7a54cdbd77b3"}, 0x60) 2018/05/18 20:37:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 2018/05/18 20:37:33 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000002640)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x702, 0x0) 2018/05/18 20:37:33 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000002640)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x702, 0x0) 2018/05/18 20:37:33 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005", 0x5) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000000)={&(0x7f0000f7ffa8)=@alg, 0x80, &(0x7f0000001200)=[{&(0x7f0000000080)=""/93, 0x5d}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0) 2018/05/18 20:37:33 executing program 7: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x3}, 0xb) 2018/05/18 20:37:33 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={@empty, 0x0, r1}) 2018/05/18 20:37:33 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a539d39c2bd6a40fa8c8aa024d86cdc834bc921c0525fec2541e21ccf67e1d7b55cabe9e068dd58ce565aa9a9d325ebac7627ffe7a54cdbd77b3"}, 0x60) 2018/05/18 20:37:33 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000002640)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x702, 0x0) 2018/05/18 20:37:33 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 2018/05/18 20:37:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 2018/05/18 20:37:33 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 2018/05/18 20:37:34 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={@empty, 0x0, r1}) 2018/05/18 20:37:34 executing program 7: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x3}, 0xb) 2018/05/18 20:37:34 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000002640)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x702, 0x0) 2018/05/18 20:37:34 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005", 0x5) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000000)={&(0x7f0000f7ffa8)=@alg, 0x80, &(0x7f0000001200)=[{&(0x7f0000000080)=""/93, 0x5d}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0) 2018/05/18 20:37:34 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a539d39c2bd6a40fa8c8aa024d86cdc834bc921c0525fec2541e21ccf67e1d7b55cabe9e068dd58ce565aa9a9d325ebac7627ffe7a54cdbd77b3"}, 0x60) 2018/05/18 20:37:34 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0xfffffffd}}, @icmp=@parameter_prob={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000040)) 2018/05/18 20:37:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0x5}, {0x0, 0x5, 0x0, [], 0x1ff}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/18 20:37:34 executing program 7: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x3}, 0xb) 2018/05/18 20:37:34 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={@empty, 0x0, r1}) 2018/05/18 20:37:34 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0xfffffffd}}, @icmp=@parameter_prob={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000040)) 2018/05/18 20:37:34 executing program 6: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) 2018/05/18 20:37:34 executing program 7: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x3}, 0xb) 2018/05/18 20:37:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0x5}, {0x0, 0x5, 0x0, [], 0x1ff}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/18 20:37:34 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 2018/05/18 20:37:34 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 2018/05/18 20:37:34 executing program 0: symlink(&(0x7f0000000180)='/\x00', &(0x7f0000000140)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000013c0), 0x10a032, &(0x7f0000000440)={[{@errors_remount='errors=remount-ro', 0x2c}]}) 2018/05/18 20:37:34 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0xfffffffd}}, @icmp=@parameter_prob={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000040)) [ 124.042029] watchdog: BUG: soft lockup - CPU#0 stuck for 22s! [syz-executor2:4571] [ 124.049916] Modules linked in: [ 124.053107] irq event stamp: 12657832 [ 124.056908] hardirqs last enabled at (12657831): [] d_walk+0x80f/0xc80 [ 124.065226] hardirqs last disabled at (12657832): [] interrupt_entry+0xb5/0xf0 [ 124.074150] softirqs last enabled at (469588): [] __do_softirq+0x778/0xaf5 [ 124.082812] softirqs last disabled at (469527): [] irq_exit+0x1d1/0x200 [ 124.091127] CPU: 0 PID: 4571 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #57 [ 124.099088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 124.108446] RIP: 0010:d_walk+0x840/0xc80 [ 124.112496] RSP: 0018:ffff88019c3f79f8 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 124.120207] RAX: ffff8801b244e780 RBX: 0000000000000293 RCX: 1ffff10036489e05 [ 124.127474] RDX: 0000000000000000 RSI: ffffffff81c6503b RDI: 0000000000000293 [ 124.134739] RBP: ffff88019c3f7b78 R08: ffff8801b244efb8 R09: 0000000000000006 [ 124.142014] R10: ffff8801b244e780 R11: 0000000000000000 R12: 0000000000000200 [ 124.149279] R13: dffffc0000000000 R14: 1ffff1003387ef82 R15: ffff88019c3f7b50 [ 124.156546] FS: 0000000002586940(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 124.164769] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.170652] CR2: 0000000020989000 CR3: 000000019c2f1000 CR4: 00000000001426f0 [ 124.177926] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 124.185203] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 124.192468] Call Trace: [ 124.195063] ? d_shrink_del+0x3b0/0x3b0 [ 124.199040] ? dget_parent+0x680/0x680 [ 124.202922] ? shrink_dentry_list+0x2c/0x7c0 [ 124.207326] ? shrink_dentry_list+0x5a8/0x7c0 [ 124.211824] ? is_subdir+0x480/0x480 [ 124.215535] ? shrink_dcache_parent+0x199/0x230 [ 124.220204] ? shrink_dcache_parent+0xc7/0x230 [ 124.224790] shrink_dcache_parent+0x179/0x230 [ 124.229288] ? path_has_submounts+0x1a0/0x1a0 [ 124.233800] ? down_write+0x87/0x120 [ 124.237508] ? vfs_rmdir+0xe0/0x470 [ 124.241132] ? down_read+0x1b0/0x1b0 [ 124.244850] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 124.250391] ? security_inode_rmdir+0xf4/0x130 [ 124.254974] vfs_rmdir+0x202/0x470 [ 124.258512] do_rmdir+0x523/0x610 [ 124.261966] ? __ia32_sys_mkdir+0x80/0x80 [ 124.266128] ? exit_to_usermode_loop+0x87/0x310 [ 124.270800] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 124.276333] ? exit_to_usermode_loop+0x1ef/0x310 [ 124.281100] ? do_syscall_64+0x92/0x800 [ 124.285078] __x64_sys_rmdir+0x36/0x40 [ 124.288963] do_syscall_64+0x1b1/0x800 [ 124.292852] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 124.297691] ? syscall_return_slowpath+0x5c0/0x5c0 [ 124.302622] ? syscall_return_slowpath+0x30f/0x5c0 [ 124.307553] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 124.312922] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 124.317866] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 124.323051] RIP: 0033:0x455777 [ 124.326233] RSP: 002b:00007fffe0ba5dc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000054 [ 124.333938] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 0000000000455777 [ 124.341207] RDX: 0000000000000000 RSI: 00007fffe0ba7b70 RDI: 00007fffe0ba7b70 [ 124.348472] RBP: 00007fffe0ba7b70 R08: 0000000000000000 R09: 0000000000000001 [ 124.355740] R10: 0000000000000006 R11: 0000000000000202 R12: 0000000002587940 [ 124.363021] R13: 0000000000000000 R14: 000000000000015c R15: 000000000001837f [ 124.370298] Code: 88 48 89 f8 48 c1 e8 03 42 80 3c 28 00 0f 85 1e 04 00 00 48 83 3d f8 36 0b 07 00 0f 84 29 02 00 00 e8 b5 de b2 ff 48 89 df 57 9d <0f> 1f 44 00 00 e8 a6 de b2 ff 49 8d 5f 80 48 c1 eb 03 4c 01 eb [ 124.389676] Sending NMI from CPU 0 to CPUs 1: [ 124.394176] NMI backtrace for cpu 1 [ 124.394187] CPU: 1 PID: 4570 Comm: syz-executor7 Not tainted 4.17.0-rc5+ #57 [ 124.394191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 124.394206] RIP: 0010:__lock_acquire+0x927/0x5140 [ 124.394210] RSP: 0018:ffff88019c3bf520 EFLAGS: 00000046 [ 124.394217] RAX: dffffc0000000000 RBX: 0000000000000111 RCX: 0000000000000001 [ 124.394222] RDX: 98baf3c4bc3101bd RSI: ffff88019c3b0cf8 RDI: ffff88019c3b0db9 [ 124.394227] RBP: ffff88019c3bf8a8 R08: 0000000000000008 R09: 0000000000000004 [ 124.394232] R10: ffff88019c3b0d98 R11: ffff88019c3b04c0 R12: 0000000000000111 [ 124.394237] R13: 0000000000000000 R14: 0000000000000004 R15: 0000000000000000 [ 124.394244] FS: 00000000019b5940(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 124.394249] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.394254] CR2: 000000c42e42a010 CR3: 000000019c314000 CR4: 00000000001426e0 [ 124.394261] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 124.394265] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 124.394267] Call Trace: [ 124.394276] ? __lock_acquire+0x7f5/0x5140 [ 124.394284] ? __lock_acquire+0x7f5/0x5140 [ 124.394291] ? __lock_acquire+0x7f5/0x5140 [ 124.394298] ? __lock_acquire+0x7f5/0x5140 [ 124.394308] ? debug_check_no_locks_freed+0x310/0x310 [ 124.394316] ? debug_check_no_locks_freed+0x310/0x310 [ 124.394324] ? debug_check_no_locks_freed+0x310/0x310 [ 124.394331] ? print_usage_bug+0xc0/0xc0 [ 124.394338] ? print_usage_bug+0xc0/0xc0 [ 124.394345] ? __lock_acquire+0x7f5/0x5140 [ 124.394353] ? print_usage_bug+0xc0/0xc0 [ 124.394360] ? print_usage_bug+0xc0/0xc0 [ 124.394367] ? print_usage_bug+0xc0/0xc0 [ 124.394375] ? print_usage_bug+0xc0/0xc0 [ 124.394382] ? print_usage_bug+0xc0/0xc0 [ 124.394388] ? print_usage_bug+0xc0/0xc0 [ 124.394396] ? mark_held_locks+0xc9/0x160 [ 124.394405] ? retint_kernel+0x10/0x10 [ 124.394412] ? print_usage_bug+0xc0/0xc0 [ 124.394420] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 124.394427] ? graph_lock+0x170/0x170 [ 124.394433] ? graph_lock+0x170/0x170 [ 124.394439] ? graph_lock+0x170/0x170 [ 124.394447] ? retint_kernel+0x10/0x10 [ 124.394455] ? find_held_lock+0x36/0x1c0 [ 124.394464] lock_acquire+0x1dc/0x520 [ 124.394473] ? d_walk+0x3ad/0xc80 [ 124.394481] ? lock_downgrade+0x8e0/0x8e0 [ 124.394488] ? lock_release+0xa10/0xa10 [ 124.394499] ? kasan_check_read+0x11/0x20 [ 124.394508] ? do_raw_spin_unlock+0x9e/0x2e0 [ 124.394517] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 124.394525] ? kasan_check_write+0x14/0x20 [ 124.394533] ? do_raw_spin_lock+0xc1/0x200 [ 124.394543] _raw_spin_lock_nested+0x28/0x40 [ 124.394549] ? d_walk+0x3ad/0xc80 [ 124.394556] d_walk+0x3ad/0xc80 [ 124.394564] ? d_shrink_del+0x3b0/0x3b0 [ 124.394572] ? dget_parent+0x680/0x680 [ 124.394579] ? shrink_dentry_list+0x8d/0x7c0 [ 124.394586] ? shrink_dentry_list+0x5a8/0x7c0 [ 124.394594] ? is_subdir+0x480/0x480 [ 124.394602] ? shrink_dcache_parent+0x199/0x230 [ 124.394610] ? shrink_dcache_parent+0xb1/0x230 [ 124.394618] shrink_dcache_parent+0x179/0x230 [ 124.394626] ? path_has_submounts+0x1a0/0x1a0 [ 124.394635] ? down_write+0x87/0x120 [ 124.394642] ? vfs_rmdir+0xe0/0x470 [ 124.394650] ? down_read+0x1b0/0x1b0 [ 124.394663] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 124.394677] ? security_inode_rmdir+0xf4/0x130 [ 124.394685] vfs_rmdir+0x202/0x470 [ 124.394694] do_rmdir+0x523/0x610 [ 124.394703] ? __ia32_sys_mkdir+0x80/0x80 [ 124.394713] ? exit_to_usermode_loop+0x87/0x310 [ 124.394723] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 124.394731] ? exit_to_usermode_loop+0x1ef/0x310 [ 124.394740] ? do_syscall_64+0x92/0x800 [ 124.394749] __x64_sys_rmdir+0x36/0x40 [ 124.394757] do_syscall_64+0x1b1/0x800 [ 124.394766] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 124.394774] ? syscall_return_slowpath+0x5c0/0x5c0 [ 124.394783] ? syscall_return_slowpath+0x30f/0x5c0 [ 124.394792] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 124.394801] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 124.394810] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 124.394815] RIP: 0033:0x455777 [ 124.394819] RSP: 002b:00007fff112ecc48 EFLAGS: 00000206 ORIG_RAX: 0000000000000054 [ 124.394826] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 0000000000455777 [ 124.394831] RDX: 0000000000000000 RSI: 00007fff112ee9f0 RDI: 00007fff112ee9f0 [ 124.394836] RBP: 00007fff112ee9f0 R08: 0000000000000000 R09: 0000000000000001 [ 124.394840] R10: 0000000000000006 R11: 0000000000000206 R12: 00000000019b6940 [ 124.394845] R13: 0000000000000000 R14: 0000000000000164 R15: 0000000000018380 [ 124.394849] Code: e9 03 0f b6 04 01 48 89 f9 83 e1 07 38 c8 7f 08 84 c0 0f 85 7c 32 00 00 49 8d 7a 21 45 0f b6 6d 21 48 b8 00 00 00 00 00 fc ff df <48> 89 f9 48 c1 e9 03 0f b6 04 01 48 89 f9 83 e1 07 38 c8 7f 08 [ 124.395188] Kernel panic - not syncing: softlockup: hung tasks [ 124.853058] CPU: 0 PID: 4571 Comm: syz-executor2 Tainted: G L 4.17.0-rc5+ #57 [ 124.861625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 124.870970] Call Trace: [ 124.873546] [ 124.875705] dump_stack+0x1b9/0x294 [ 124.879339] ? dump_stack_print_info.cold.2+0x52/0x52 [ 124.884535] ? printk_safe_log_store+0x260/0x260 [ 124.889294] panic+0x22f/0x4de [ 124.892486] ? add_taint.cold.5+0x16/0x16 [ 124.896638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 124.902191] ? watchdog_timer_fn.cold.5+0xe2/0x126 [ 124.907121] ? watchdog_timer_fn.cold.5+0xd9/0x126 [ 124.912161] watchdog_timer_fn.cold.5+0xf3/0x126 [ 124.916927] __hrtimer_run_queues+0x3e3/0x10a0 [ 124.921518] ? watchdog+0x30/0x30 [ 124.924974] ? hrtimer_start_range_ns+0xd10/0xd10 [ 124.929864] ? pvclock_read_flags+0x160/0x160 [ 124.934361] ? kvm_clock_read+0x25/0x30 [ 124.938338] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 124.943356] ? kvm_clock_read+0x25/0x30 [ 124.947340] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 124.952360] ? ktime_get_update_offsets_now+0x3d3/0x5c0 [ 124.957741] ? do_timer+0x50/0x50 [ 124.961393] ? rcu_nmi_exit+0xd7/0x2b0 [ 124.965283] ? do_raw_spin_lock+0xc1/0x200 [ 124.969522] hrtimer_interrupt+0x2f3/0x750 [ 124.973772] smp_apic_timer_interrupt+0x15d/0x710 [ 124.978613] ? smp_call_function_single_interrupt+0x650/0x650 [ 124.984500] ? _raw_spin_lock+0x32/0x40 [ 124.988480] ? _raw_spin_unlock+0x22/0x30 [ 124.992638] ? handle_edge_irq+0x330/0x870 [ 124.996884] ? task_prio+0x50/0x50 [ 125.000608] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 125.005465] apic_timer_interrupt+0xf/0x20 [ 125.009708] [ 125.012735] RIP: 0010:d_walk+0x840/0xc80 [ 125.016790] RSP: 0018:ffff88019c3f79f8 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 125.024496] RAX: ffff8801b244e780 RBX: 0000000000000293 RCX: 1ffff10036489e05 [ 125.031758] RDX: 0000000000000000 RSI: ffffffff81c6503b RDI: 0000000000000293 [ 125.039021] RBP: ffff88019c3f7b78 R08: ffff8801b244efb8 R09: 0000000000000006 [ 125.046285] R10: ffff8801b244e780 R11: 0000000000000000 R12: 0000000000000200 [ 125.053556] R13: dffffc0000000000 R14: 1ffff1003387ef82 R15: ffff88019c3f7b50 [ 125.060837] ? d_walk+0x83b/0xc80 [ 125.064820] ? d_shrink_del+0x3b0/0x3b0 [ 125.068792] ? dget_parent+0x680/0x680 [ 125.072673] ? shrink_dentry_list+0x2c/0x7c0 [ 125.077079] ? shrink_dentry_list+0x5a8/0x7c0 [ 125.081577] ? is_subdir+0x480/0x480 [ 125.085289] ? shrink_dcache_parent+0x199/0x230 [ 125.089961] ? shrink_dcache_parent+0xc7/0x230 [ 125.094541] shrink_dcache_parent+0x179/0x230 [ 125.099037] ? path_has_submounts+0x1a0/0x1a0 [ 125.103533] ? down_write+0x87/0x120 [ 125.107243] ? vfs_rmdir+0xe0/0x470 [ 125.110876] ? down_read+0x1b0/0x1b0 [ 125.114594] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 125.120137] ? security_inode_rmdir+0xf4/0x130 [ 125.124719] vfs_rmdir+0x202/0x470 [ 125.128262] do_rmdir+0x523/0x610 [ 125.131723] ? __ia32_sys_mkdir+0x80/0x80 [ 125.135870] ? exit_to_usermode_loop+0x87/0x310 [ 125.140544] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 125.146082] ? exit_to_usermode_loop+0x1ef/0x310 [ 125.150841] ? do_syscall_64+0x92/0x800 [ 125.154818] __x64_sys_rmdir+0x36/0x40 [ 125.158703] do_syscall_64+0x1b1/0x800 [ 125.162588] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 125.167431] ? syscall_return_slowpath+0x5c0/0x5c0 [ 125.172359] ? syscall_return_slowpath+0x30f/0x5c0 [ 125.177292] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 125.182661] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 125.187506] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 125.192689] RIP: 0033:0x455777 [ 125.195875] RSP: 002b:00007fffe0ba5dc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000054 [ 125.203580] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 0000000000455777 [ 125.210844] RDX: 0000000000000000 RSI: 00007fffe0ba7b70 RDI: 00007fffe0ba7b70 [ 125.218116] RBP: 00007fffe0ba7b70 R08: 0000000000000000 R09: 0000000000000001 [ 125.225385] R10: 0000000000000006 R11: 0000000000000202 R12: 0000000002587940 [ 125.232653] R13: 0000000000000000 R14: 000000000000015c R15: 000000000001837f [ 125.240748] Dumping ftrace buffer: [ 125.244506] (ftrace buffer empty) [ 125.248296] Kernel Offset: disabled [ 125.251912] Rebooting in 86400 seconds..