INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.40' (ECDSA) to the list of known hosts. 2018/04/20 00:51:18 fuzzer started 2018/04/20 00:51:18 dialing manager at 10.128.0.26:44273 syzkaller login: [ 28.913612] random: crng init done 2018/04/20 00:51:25 kcov=true, comps=false 2018/04/20 00:51:28 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) exit(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000080)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 2018/04/20 00:51:28 executing program 2: mknod(&(0x7f00000006c0)='./file0\x00', 0x0, 0x0) acct(&(0x7f0000000140)='./file0\x00') 2018/04/20 00:51:28 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000238fc8)={&(0x7f000028afe4)=@in6={0xa, 0x4e20}, 0x80, &(0x7f00000012c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000360000005200000000000000"], 0x18}, 0x0) 2018/04/20 00:51:28 executing program 3: r0 = epoll_create(0x9) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00003b5000)='/dev/rfkill\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00002b9ff4)) 2018/04/20 00:51:28 executing program 4: capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) 2018/04/20 00:51:28 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000fb4fa0)=@hopopts={0x0, 0x2, [], [@calipso={0x7, 0x8}, @calipso={0x7, 0x8}]}, 0x20) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f000016a000)=@dstopts, 0x8) 2018/04/20 00:51:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000380)) 2018/04/20 00:51:28 executing program 6: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000180)=0x7) setreuid(r1, 0x0) ioprio_get$uid(0x3, r1) [ 35.898363] IPVS: Creating netns size=2536 id=1 [ 35.973083] IPVS: Creating netns size=2536 id=2 [ 36.007698] IPVS: Creating netns size=2536 id=3 [ 36.042609] IPVS: Creating netns size=2536 id=4 [ 36.085760] IPVS: Creating netns size=2536 id=5 [ 36.143225] IPVS: Creating netns size=2536 id=6 [ 36.211533] IPVS: Creating netns size=2536 id=7 [ 36.292324] IPVS: Creating netns size=2536 id=8 [ 36.696011] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 36.753569] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 36.786744] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 36.822431] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 36.848035] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 36.878128] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 36.966503] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 37.018008] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 37.038413] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 37.048375] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 37.067291] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 37.115687] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 37.138633] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 37.166200] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 37.196608] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 37.205648] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 37.216411] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 37.226932] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 37.246737] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 37.257168] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 37.346971] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 37.396722] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 37.420118] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 37.429623] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 37.438739] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 37.471144] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 37.496954] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 37.505815] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 37.545942] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 37.553502] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 37.562736] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 37.570080] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 37.578630] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 37.586925] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 37.596711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.607405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.628602] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 37.637063] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 37.646159] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 37.655396] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 37.662535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.670020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.679247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.686967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.695364] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 37.707975] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 37.720346] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 37.742276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.749741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.770990] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 37.782294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.789768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.803735] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 37.822786] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 37.830310] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 37.844009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.851479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.873697] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 37.881308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.904316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.921518] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 37.931174] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 37.941424] ip (4553) used greatest stack depth: 24408 bytes left [ 37.945682] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 37.950689] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 37.965487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.989048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.999521] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 38.011749] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 38.024071] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 38.038094] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 38.051539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.067005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.077240] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 38.086326] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 38.104188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.111649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.130985] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 38.138982] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 38.146876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.154988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.162852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.170230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.185142] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 38.195575] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 38.207308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.222046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.229593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.237380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.320379] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 38.377441] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 38.440073] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 38.458092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.469840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.485536] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 38.498526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.511389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.577730] ip (5207) used greatest stack depth: 24008 bytes left [ 41.480744] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.590882] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.679106] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.696232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.704603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.713254] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.785359] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.791492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.800847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.856966] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.864810] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.884073] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.890849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.901185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.966290] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.990236] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 42.062224] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 42.068343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.076082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.085975] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 42.100003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.108167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.194318] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 42.200457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.209767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.223939] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 42.236961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.250832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.285024] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 42.462955] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 42.473169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.479861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/20 00:51:35 executing program 2: r0 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00002c3000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)) dup3(r1, r0, 0x0) poll(&(0x7f0000000080), 0x0, 0xffffffffffffffff) epoll_pwait(r1, &(0x7f0000c58000)=[{}], 0x1, 0x8000000000000075, &(0x7f0000654ff8), 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 43.088784] Process accounting resumed 2018/04/20 00:51:35 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/04/20 00:51:35 executing program 7: unshare(0x8000400) r0 = mq_open(&(0x7f000004b000)='cgroup-\\\x00', 0xc2, 0x0, &(0x7f000004b000)={0xffffffffffffffff, 0x1, 0x4}) ftruncate(r0, 0x0) 2018/04/20 00:51:35 executing program 7: unshare(0x8000400) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) signalfd(r0, &(0x7f0000000040), 0x8) 2018/04/20 00:51:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) [ 43.396162] capability: warning: `syz-executor4' uses 32-bit capabilities (legacy support in use) 2018/04/20 00:51:36 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}, 'ip6tnl0\x00'}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000010c0)="9421e5271f45907f567d604a09fe27abfa55e2aebecfe4a0aeda13b3d2418870405797686467855ad166a77fa809f72ab92d438b38975596f98c0c03126989f5a4a3fe4878335988dfb98b11d880cc928c21fccdcf2086d98e2ac4ab265ff234ba0a86ee14bbb2bf4cc210f6ca6a5d3d18d3110ac82704ac8a979bebe6ea1a803cb5a21babf0a28c6741f5493a7189c764564aa039257ce92830f1a25bb6fb553231195be0ff72269d4b8503dbb0bc6c23f0341aa626735a002006f6c2b036efa5d1e087ee6181ffb3", 0xc9}], 0x1}}], 0x1, 0x0) sendmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000001980)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000004c80)="3c347df1a2e99f6a630440372c806045fef41f34fb43ee66", 0x18}], 0x1, &(0x7f0000001b80)}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'team_slave_1\x00'}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000200)="6ba4c0c6b5b92ede308b8deccd086680187e74d58a9c4a2aed1119aaeb43eacf6d290b3eea39f888fe93387d3958299e694c7ff6c35bd931c6e788b0f74cd1425e05d1693123d3008d738b6adfacb8a8ca260e843b9f7e7929855c58eb0362649fd4e76522ed9bd0603fa75896f6c76688c531637a4a9e742462587697fd6df5c9cdc1e95f3d739a43a913e6550eb0b08146346168125026f29247e77b22c28d66350c3416da10bbb97f6ad1e38ba447a639b63e7909f3d420b2af5c86275f58e4", 0xc1}], 0x1}, 0x1) 2018/04/20 00:51:36 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x2004e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f000043cf32), 0x0, 0x600007ff, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="90", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xef) sendto$inet(r0, &(0x7f0000000200)="b4", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) read(r1, &(0x7f0000004f45)=""/187, 0xbb) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000340)=""/157, &(0x7f0000000140)=0x9d) 2018/04/20 00:51:36 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000fb4fa0)=@hopopts={0x0, 0x2, [], [@calipso={0x7, 0x8}, @calipso={0x7, 0x8}]}, 0x20) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f000016a000)=@dstopts, 0x8) 2018/04/20 00:51:37 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0xfffffffffffffffd) 2018/04/20 00:51:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000001c0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) dup2(r1, r2) 2018/04/20 00:51:37 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}, 'ip6tnl0\x00'}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000010c0)="9421e5271f45907f567d604a09fe27abfa55e2aebecfe4a0aeda13b3d2418870405797686467855ad166a77fa809f72ab92d438b38975596f98c0c03126989f5a4a3fe4878335988dfb98b11d880cc928c21fccdcf2086d98e2ac4ab265ff234ba0a86ee14bbb2bf4cc210f6ca6a5d3d18d3110ac82704ac8a979bebe6ea1a803cb5a21babf0a28c6741f5493a7189c764564aa039257ce92830f1a25bb6fb553231195be0ff72269d4b8503dbb0bc6c23f0341aa626735a002006f6c2b036efa5d1e087ee6181ffb3", 0xc9}], 0x1}}], 0x1, 0x0) sendmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000001980)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000004c80)="3c347df1a2e99f6a630440372c806045fef41f34fb43ee66", 0x18}], 0x1, &(0x7f0000001b80)}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'team_slave_1\x00'}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000200)="6ba4c0c6b5b92ede308b8deccd086680187e74d58a9c4a2aed1119aaeb43eacf6d290b3eea39f888fe93387d3958299e694c7ff6c35bd931c6e788b0f74cd1425e05d1693123d3008d738b6adfacb8a8ca260e843b9f7e7929855c58eb0362649fd4e76522ed9bd0603fa75896f6c76688c531637a4a9e742462587697fd6df5c9cdc1e95f3d739a43a913e6550eb0b08146346168125026f29247e77b22c28d66350c3416da10bbb97f6ad1e38ba447a639b63e7909f3d420b2af5c86275f58e4", 0xc1}], 0x1}, 0x1) 2018/04/20 00:51:37 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000fb4fa0)=@hopopts={0x0, 0x2, [], [@calipso={0x7, 0x8}, @calipso={0x7, 0x8}]}, 0x20) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f000016a000)=@dstopts, 0x8) 2018/04/20 00:51:37 executing program 6: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000180)=0x7) setreuid(r1, 0x0) ioprio_get$uid(0x3, r1) 2018/04/20 00:51:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000336ff4)) 2018/04/20 00:51:37 executing program 2: r0 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00002c3000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)) dup3(r1, r0, 0x0) poll(&(0x7f0000000080), 0x0, 0xffffffffffffffff) epoll_pwait(r1, &(0x7f0000c58000)=[{}], 0x1, 0x8000000000000075, &(0x7f0000654ff8), 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/04/20 00:51:37 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x2004e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f000043cf32), 0x0, 0x600007ff, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="90", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xef) sendto$inet(r0, &(0x7f0000000200)="b4", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) read(r1, &(0x7f0000004f45)=""/187, 0xbb) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000340)=""/157, &(0x7f0000000140)=0x9d) 2018/04/20 00:51:37 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000fb4fa0)=@hopopts={0x0, 0x2, [], [@calipso={0x7, 0x8}, @calipso={0x7, 0x8}]}, 0x20) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f000016a000)=@dstopts, 0x8) 2018/04/20 00:51:37 executing program 6: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000180)=0x7) setreuid(r1, 0x0) ioprio_get$uid(0x3, r1) 2018/04/20 00:51:37 executing program 0: r0 = open(&(0x7f0000448000)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x2, 0x0) 2018/04/20 00:51:37 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000058ff7)='/dev/sg#\x00', 0x0, 0x40002) ioctl(r0, 0x5380, &(0x7f0000000000)) 2018/04/20 00:51:37 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x8, &(0x7f0000d1bfb8)=""/72, &(0x7f0000d1b252)=0x3e) 2018/04/20 00:51:37 executing program 2: r0 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00002c3000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)) dup3(r1, r0, 0x0) poll(&(0x7f0000000080), 0x0, 0xffffffffffffffff) epoll_pwait(r1, &(0x7f0000c58000)=[{}], 0x1, 0x8000000000000075, &(0x7f0000654ff8), 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/04/20 00:51:37 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}, 'ip6tnl0\x00'}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000010c0)="9421e5271f45907f567d604a09fe27abfa55e2aebecfe4a0aeda13b3d2418870405797686467855ad166a77fa809f72ab92d438b38975596f98c0c03126989f5a4a3fe4878335988dfb98b11d880cc928c21fccdcf2086d98e2ac4ab265ff234ba0a86ee14bbb2bf4cc210f6ca6a5d3d18d3110ac82704ac8a979bebe6ea1a803cb5a21babf0a28c6741f5493a7189c764564aa039257ce92830f1a25bb6fb553231195be0ff72269d4b8503dbb0bc6c23f0341aa626735a002006f6c2b036efa5d1e087ee6181ffb3", 0xc9}], 0x1}}], 0x1, 0x0) sendmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000001980)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000004c80)="3c347df1a2e99f6a630440372c806045fef41f34fb43ee66", 0x18}], 0x1, &(0x7f0000001b80)}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'team_slave_1\x00'}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000200)="6ba4c0c6b5b92ede308b8deccd086680187e74d58a9c4a2aed1119aaeb43eacf6d290b3eea39f888fe93387d3958299e694c7ff6c35bd931c6e788b0f74cd1425e05d1693123d3008d738b6adfacb8a8ca260e843b9f7e7929855c58eb0362649fd4e76522ed9bd0603fa75896f6c76688c531637a4a9e742462587697fd6df5c9cdc1e95f3d739a43a913e6550eb0b08146346168125026f29247e77b22c28d66350c3416da10bbb97f6ad1e38ba447a639b63e7909f3d420b2af5c86275f58e4", 0xc1}], 0x1}, 0x1) 2018/04/20 00:51:37 executing program 6: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000180)=0x7) setreuid(r1, 0x0) ioprio_get$uid(0x3, r1) 2018/04/20 00:51:37 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x2004e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f000043cf32), 0x0, 0x600007ff, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="90", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xef) sendto$inet(r0, &(0x7f0000000200)="b4", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) read(r1, &(0x7f0000004f45)=""/187, 0xbb) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000340)=""/157, &(0x7f0000000140)=0x9d) 2018/04/20 00:51:37 executing program 3: prctl$setmm(0x23, 0x7, &(0x7f0000ffc000/0x2000)=nil) 2018/04/20 00:51:37 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x1d, 0x1) 2018/04/20 00:51:38 executing program 3: r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0) lseek(r0, 0x0, 0x4) 2018/04/20 00:51:38 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}, 'ip6tnl0\x00'}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000010c0)="9421e5271f45907f567d604a09fe27abfa55e2aebecfe4a0aeda13b3d2418870405797686467855ad166a77fa809f72ab92d438b38975596f98c0c03126989f5a4a3fe4878335988dfb98b11d880cc928c21fccdcf2086d98e2ac4ab265ff234ba0a86ee14bbb2bf4cc210f6ca6a5d3d18d3110ac82704ac8a979bebe6ea1a803cb5a21babf0a28c6741f5493a7189c764564aa039257ce92830f1a25bb6fb553231195be0ff72269d4b8503dbb0bc6c23f0341aa626735a002006f6c2b036efa5d1e087ee6181ffb3", 0xc9}], 0x1}}], 0x1, 0x0) sendmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000001980)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000004c80)="3c347df1a2e99f6a630440372c806045fef41f34fb43ee66", 0x18}], 0x1, &(0x7f0000001b80)}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'team_slave_1\x00'}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000200)="6ba4c0c6b5b92ede308b8deccd086680187e74d58a9c4a2aed1119aaeb43eacf6d290b3eea39f888fe93387d3958299e694c7ff6c35bd931c6e788b0f74cd1425e05d1693123d3008d738b6adfacb8a8ca260e843b9f7e7929855c58eb0362649fd4e76522ed9bd0603fa75896f6c76688c531637a4a9e742462587697fd6df5c9cdc1e95f3d739a43a913e6550eb0b08146346168125026f29247e77b22c28d66350c3416da10bbb97f6ad1e38ba447a639b63e7909f3d420b2af5c86275f58e4", 0xc1}], 0x1}, 0x1) 2018/04/20 00:51:38 executing program 0: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) 2018/04/20 00:51:38 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) chroot(&(0x7f000009a000)='./file0\x00') chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f00000004c0)='..', &(0x7f0000000500)='../file0\x00') lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00') 2018/04/20 00:51:38 executing program 6: rt_sigtimedwait(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x77359400}, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) 2018/04/20 00:51:38 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000200)) clone(0x0, &(0x7f0000000240), &(0x7f0000000000), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x80000000, &(0x7f0000000080)) 2018/04/20 00:51:38 executing program 1: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = timerfd_create(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000000)=""/146, 0x92}], 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() dup3(r0, r1, 0x0) tkill(r2, 0x16) 2018/04/20 00:51:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x20db) recvmmsg(r0, &(0x7f0000007100)=[{{&(0x7f0000006900)=@nfc, 0x80, &(0x7f0000006b80), 0x0, &(0x7f0000006bc0)=""/34, 0x22}}], 0x1, 0x0, 0x0) 2018/04/20 00:51:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000cc7fe4)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@rand_addr, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local={0xfe, 0x80, [], 0xaa}, 0x0, 0x32}, 0x0, @in=@rand_addr, 0x0, 0x4}}, 0xe8) shutdown(r0, 0x2) 2018/04/20 00:51:38 executing program 5: mq_open(&(0x7f0000112000)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x1}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') [ 45.503225] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/04/20 00:51:39 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x2004e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f000043cf32), 0x0, 0x600007ff, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="90", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xef) sendto$inet(r0, &(0x7f0000000200)="b4", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) read(r1, &(0x7f0000004f45)=""/187, 0xbb) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000340)=""/157, &(0x7f0000000140)=0x9d) 2018/04/20 00:51:39 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000009c0)='smaps\x00') r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000000), 0x7fffffff) 2018/04/20 00:51:39 executing program 2: r0 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00002c3000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)) dup3(r1, r0, 0x0) poll(&(0x7f0000000080), 0x0, 0xffffffffffffffff) epoll_pwait(r1, &(0x7f0000c58000)=[{}], 0x1, 0x8000000000000075, &(0x7f0000654ff8), 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/04/20 00:51:39 executing program 0: syz_mount_image$ext4(&(0x7f0000000140)="63512d1c00", &(0x7f0000000080)='/\x00', 0x0, 0x0, &(0x7f0000000100), 0x28020, &(0x7f0000001940)={[{@resuid={'resuid', 0x3d, [0x34]}, 0x2c}]}) 2018/04/20 00:51:39 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) faccessat(0xffffffffffffffff, &(0x7f0000000000)='/', 0x2, 0x0) 2018/04/20 00:51:39 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000000000)=[{{}, 0x0, 0x2000000000002}], 0x1c1) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000734ffc)=0x1) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)) 2018/04/20 00:51:39 executing program 5: mq_open(&(0x7f0000112000)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x1}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') 2018/04/20 00:51:39 executing program 4: prctl$intptr(0x200000002f, 0x3) 2018/04/20 00:51:39 executing program 4: rt_sigpending(&(0x7f00000000c0), 0xfffffffffffffdaa) 2018/04/20 00:51:39 executing program 1: socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000b4eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @multicast1=0xe0000001}, @in={0x2, 0x0, @multicast1=0xe0000001}, @in6={0xa, 0x0, 0xfffffffffffffffd, @mcast1={0xff, 0x1, [], 0x1}}], 0x3c) sendmmsg$unix(r0, &(0x7f0000000040), 0x4924924924925be, 0x0) 2018/04/20 00:51:39 executing program 5: mq_open(&(0x7f0000112000)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x1}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') 2018/04/20 00:51:39 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x361, 0x7a5) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000016ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, &(0x7f0000040000)) 2018/04/20 00:51:39 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000009c0)='smaps\x00') r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000000), 0x7fffffff) 2018/04/20 00:51:39 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x80045105, &(0x7f0000000000)) 2018/04/20 00:51:39 executing program 5: mq_open(&(0x7f0000112000)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x1}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') [ 46.603258] EXT4-fs (sda1): re-mounted. Opts: resuid=4, 2018/04/20 00:51:39 executing program 1: mkdir(&(0x7f000000e000)='./control\x00', 0x0) mount(&(0x7f0000000040)='./control\x00', &(0x7f0000000080)='./control\x00', &(0x7f00000000c0)='mqueue\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./control\x00', 0x0, 0x0) faccessat(r0, &(0x7f000003fff6)='./control\x00', 0x3, 0x0) [ 46.673128] EXT4-fs (sda1): re-mounted. Opts: resuid=4, 2018/04/20 00:51:40 executing program 0: syz_mount_image$ext4(&(0x7f0000000140)="63512d1c00", &(0x7f0000000080)='/\x00', 0x0, 0x0, &(0x7f0000000100), 0x28020, &(0x7f0000001940)={[{@resuid={'resuid', 0x3d, [0x34]}, 0x2c}]}) 2018/04/20 00:51:40 executing program 3: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000040)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 2018/04/20 00:51:40 executing program 7: syz_read_part_table(0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000240), 0x0, 0x100}]) 2018/04/20 00:51:40 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000000100), 0x361, 0x10400003) 2018/04/20 00:51:40 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) tee(r1, r0, 0x9, 0x0) 2018/04/20 00:51:40 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000009c0)='smaps\x00') r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000000), 0x7fffffff) 2018/04/20 00:51:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 2018/04/20 00:51:40 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0x108) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') preadv(r0, &(0x7f0000000100), 0x2d9, 0x0) 2018/04/20 00:51:40 executing program 5: seccomp(0x4000000001, 0x0, &(0x7f00001a2ff0)={0x2, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x50003}, {0x16}]}) socket$inet(0x2, 0x0, 0x0) 2018/04/20 00:51:40 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d16ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) connect$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x14) 2018/04/20 00:51:40 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000009c0)='smaps\x00') r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000000), 0x7fffffff) [ 47.578756] EXT4-fs (sda1): re-mounted. Opts: resuid=4, [ 47.606357] Dev loop7: unable to read RDB block 1 [ 47.613896] loop7: unable to read partition table [ 47.644164] loop7: partition table beyond EOD, truncated [ 47.663625] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 47.752454] Dev loop7: unable to read RDB block 1 [ 47.757346] loop7: unable to read partition table [ 47.762391] loop7: partition table beyond EOD, truncated [ 47.767965] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) 2018/04/20 00:51:41 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000000100), 0x361, 0x10400003) 2018/04/20 00:51:41 executing program 0: syz_mount_image$ext4(&(0x7f0000000140)="63512d1c00", &(0x7f0000000080)='/\x00', 0x0, 0x0, &(0x7f0000000100), 0x28020, &(0x7f0000001940)={[{@resuid={'resuid', 0x3d, [0x34]}, 0x2c}]}) 2018/04/20 00:51:41 executing program 1: r0 = memfd_create(&(0x7f0000000300)="bcf6", 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) mount(&(0x7f0000000000)='./file0/file0/file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hpfs\x00', 0x2201000, &(0x7f00000000c0)) 2018/04/20 00:51:41 executing program 5: seccomp(0x4000000001, 0x0, &(0x7f00001a2ff0)={0x2, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x50003}, {0x16}]}) socket$inet(0x2, 0x0, 0x0) 2018/04/20 00:51:41 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa}, 0x1c) 2018/04/20 00:51:41 executing program 7: creat(&(0x7f0000000000)='./file0/\x00', 0x0) 2018/04/20 00:51:41 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=@ipv4_newaddr={0x34, 0x14, 0xa3a5529e14c77eb9, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x1}}, @IFA_LOCAL={0x8, 0x2, @loopback=0x7f000001}]}, 0x34}, 0x1}, 0x0) 2018/04/20 00:51:41 executing program 3: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x40000) 2018/04/20 00:51:41 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00006ffff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101}) recvmmsg(r0, &(0x7f0000000000), 0x379, 0x0, 0x0) 2018/04/20 00:51:41 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000a8d000)={&(0x7f0000e4e000)={0x10}, 0xc, &(0x7f0000011000)={&(0x7f00005d5000)=@updsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in=@dev={0xac, 0x14}}, {@in6, 0xffffffffffffffff, 0x3c}, @in=@loopback=0x7f000001, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}]}, 0x104}, 0x1}, 0x0) 2018/04/20 00:51:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x2284, &(0x7f000035bfbc)={{0x3, 0x0, @rand_addr}, {}, 0x0, {0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) 2018/04/20 00:51:41 executing program 5: seccomp(0x4000000001, 0x0, &(0x7f00001a2ff0)={0x2, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x50003}, {0x16}]}) socket$inet(0x2, 0x0, 0x0) 2018/04/20 00:51:41 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000265000/0x14000)=nil, 0x14000, 0x0, 0x10011, r0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) [ 48.540427] EXT4-fs (sda1): re-mounted. Opts: resuid=4, 2018/04/20 00:51:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x2284, &(0x7f000035bfbc)={{0x3, 0x0, @rand_addr}, {}, 0x0, {0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) [ 48.571127] mip6: mip6_destopt_init_state: spi is not 0: 4294967295 [ 48.623734] binder: 7178:7179 got transaction with invalid data ptr 2018/04/20 00:51:41 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa}, 0x1c) 2018/04/20 00:51:41 executing program 6: prctl$seccomp(0x29, 0x0, &(0x7f0000000040)={0x218}) 2018/04/20 00:51:41 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000000100), 0x361, 0x10400003) 2018/04/20 00:51:41 executing program 5: seccomp(0x4000000001, 0x0, &(0x7f00001a2ff0)={0x2, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x50003}, {0x16}]}) socket$inet(0x2, 0x0, 0x0) 2018/04/20 00:51:41 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) recvmsg(r0, &(0x7f0000000480)={&(0x7f0000000080)=@ll, 0x14, &(0x7f0000000400), 0x0, &(0x7f0000000700)=""/150, 0x96}, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000000c0)=0x9, 0x4) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x2, 0x2, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/20 00:51:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x2284, &(0x7f000035bfbc)={{0x3, 0x0, @rand_addr}, {}, 0x0, {0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) 2018/04/20 00:51:41 executing program 0: syz_mount_image$ext4(&(0x7f0000000140)="63512d1c00", &(0x7f0000000080)='/\x00', 0x0, 0x0, &(0x7f0000000100), 0x28020, &(0x7f0000001940)={[{@resuid={'resuid', 0x3d, [0x34]}, 0x2c}]}) 2018/04/20 00:51:41 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="a2", 0x1}], 0x1, 0x0) close(r0) syz_mount_image$vfat(&(0x7f0000001800)='vfat\x00', &(0x7f0000001840)='./file0\x00', 0x0, 0xaaaaaaaaaaaab46, &(0x7f0000000440)=[{&(0x7f0000000380), 0xffffffffffffffb6}], 0x0, &(0x7f00000000c0)=ANY=[]) lseek(r0, 0x0, 0x4) [ 48.623767] binder: 7178:7179 transaction failed 29201/-14, size 40-0 line 3152 [ 48.628834] binder: BINDER_SET_CONTEXT_MGR already set [ 48.628842] binder: 7178:7184 ioctl 40046207 0 returned -16 [ 48.649807] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/20 00:51:41 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000080)=0x79, 0x3b9) sendto$inet6(r0, &(0x7f0000000100)="1ddd94b2", 0x4, 0x0, &(0x7f0000000040)={0xa, 0x4e1f}, 0x1c) recvfrom$inet6(r0, &(0x7f00006f4000)=""/246, 0xffffffffffffff9b, 0x23fffd, 0x0, 0x111) 2018/04/20 00:51:41 executing program 2: rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='/\x00') 2018/04/20 00:51:41 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000000100), 0x361, 0x10400003) 2018/04/20 00:51:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x2284, &(0x7f000035bfbc)={{0x3, 0x0, @rand_addr}, {}, 0x0, {0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) 2018/04/20 00:51:41 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x110) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x190) 2018/04/20 00:51:41 executing program 2: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000140)={0x6, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) 2018/04/20 00:51:41 executing program 6: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="240000005e000379946fa283bc0ae6e60000a6ffff000000000000000000000000000000", 0x24}], 0x1}, 0x0) [ 48.768948] EXT4-fs (sda1): re-mounted. Opts: resuid=4, 2018/04/20 00:51:41 executing program 0: r0 = socket(0x18, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000004fc4)=[{{&(0x7f0000003000)=@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x80, &(0x7f0000004fa0)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000002d30)}}], 0x1, 0x0) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f00000000c0)=""/20, &(0x7f0000000100)=0x14) 2018/04/20 00:51:41 executing program 2: r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x40000000001fffe, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000140)) fcntl$setlease(r0, 0x400, 0x2) 2018/04/20 00:51:41 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$selinux_access(r0, &(0x7f0000000080)={'system_u:object_r:framebuf_device_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20}, 0x58) 2018/04/20 00:51:41 executing program 3: r0 = epoll_create1(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000a09ff1)='net/ipv6_route\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000e37ff4)={0x20000005}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000557ff4)={0xa90d0101}) [ 48.886402] sg_write: data in/out 1969188161/40 bytes for SCSI command 0x73-- guessing data in; [ 48.886402] program syz-executor6 not setting count and/or reply_len properly 2018/04/20 00:51:42 executing program 7: r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f00000002c0), 0x2e2, 0xfffffffe, &(0x7f0000000040)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/20 00:51:42 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x110) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x190) 2018/04/20 00:51:42 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x68) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000300), 0x1b5, &(0x7f0000000600)}}], 0x2, 0x0) 2018/04/20 00:51:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f17000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000000005421, &(0x7f0000000000)) 2018/04/20 00:51:42 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x4e20}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f0000000100)=@in={0x2, 0x4e21, @broadcast=0xffffffff}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1400000000000000000000000200000047552000"], 0x14}}], 0x2, 0x0) 2018/04/20 00:51:42 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) sendfile(r0, r0, &(0x7f00000000c0), 0x2) 2018/04/20 00:51:42 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="a2", 0x1}], 0x1, 0x0) close(r0) syz_mount_image$vfat(&(0x7f0000001800)='vfat\x00', &(0x7f0000001840)='./file0\x00', 0x0, 0xaaaaaaaaaaaab46, &(0x7f0000000440)=[{&(0x7f0000000380), 0xffffffffffffffb6}], 0x0, &(0x7f00000000c0)=ANY=[]) lseek(r0, 0x0, 0x4) 2018/04/20 00:51:42 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000dd3000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000140)={{0x4}, 'port0\x00'}) 2018/04/20 00:51:42 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x110) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x190) 2018/04/20 00:51:42 executing program 6: r0 = getpgrp(0x0) setpriority(0x2, r0, 0x0) 2018/04/20 00:51:42 executing program 7: r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/member\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000100)="79fbea790563e668559f0d80afba7bf00ea982a46b98a7274080d03f3670ae34d675fd9a119cdcdffedee5cf5b0c38", 0x2f}, {&(0x7f0000000280)="8b", 0x1}], 0x2, 0x0) 2018/04/20 00:51:42 executing program 2: perf_event_open(&(0x7f0000000780)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/20 00:51:43 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @broadcast=0xffffffff}, {0x0, @link_local={0x1, 0x80, 0xc2}}, 0x6e, {0x2, 0x0, @rand_addr}}) 2018/04/20 00:51:43 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000214ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f000001dffc)=0x9) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) poll(&(0x7f0000050fd8)=[{r1}], 0x1, 0x0) 2018/04/20 00:51:43 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x110) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x190) 2018/04/20 00:51:43 executing program 3: munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 2018/04/20 00:51:43 executing program 7: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000aed000), &(0x7f00002dc000), &(0x7f000045e000), &(0x7f0000e30fff)) 2018/04/20 00:51:43 executing program 0: r0 = socket(0xa, 0x3, 0x2) getsockname$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, @remote}, &(0x7f0000000440)=0x10) ioctl(r0, 0x8916, &(0x7f0000000000)) 2018/04/20 00:51:43 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="a2", 0x1}], 0x1, 0x0) close(r0) syz_mount_image$vfat(&(0x7f0000001800)='vfat\x00', &(0x7f0000001840)='./file0\x00', 0x0, 0xaaaaaaaaaaaab46, &(0x7f0000000440)=[{&(0x7f0000000380), 0xffffffffffffffb6}], 0x0, &(0x7f00000000c0)=ANY=[]) lseek(r0, 0x0, 0x4) 2018/04/20 00:51:43 executing program 2: syz_open_procfs(0x0, &(0x7f0000001840)='ns/uts\x00') 2018/04/20 00:51:43 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140), 0x0, 0x200}], 0x0, &(0x7f0000000500)) 2018/04/20 00:51:43 executing program 7: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000aed000), &(0x7f00002dc000), &(0x7f000045e000), &(0x7f0000e30fff)) 2018/04/20 00:51:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) delete_module(&(0x7f0000000080)='\x00', 0x0) 2018/04/20 00:51:43 executing program 6: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)}) 2018/04/20 00:51:43 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 2018/04/20 00:51:43 executing program 4: r0 = socket(0x2, 0x803, 0x3) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000000d80), 0x0, &(0x7f0000000e00)=[{0x10, 0x100}], 0x10}}], 0x1, 0x0) 2018/04/20 00:51:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@ipv4_newaddr={0x20, 0x14, 0xb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14}}]}, 0x20}, 0x1}, 0x0) 2018/04/20 00:51:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000014000)={&(0x7f0000016edc)={0x14, 0x1e, 0x2ff, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) [ 50.833566] F2FS-fs (loop3): Unable to read 1th superblock 2018/04/20 00:51:43 executing program 7: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000aed000), &(0x7f00002dc000), &(0x7f000045e000), &(0x7f0000e30fff)) 2018/04/20 00:51:43 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f00005c9000), 0x6a, 0x800000020000000, &(0x7f0000000300)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) [ 50.860710] binder: BINDER_SET_CONTEXT_MGR already set [ 50.860719] binder: 7342:7344 ioctl 40046207 0 returned -16 [ 50.934179] F2FS-fs (loop3): Unable to read 2th superblock [ 50.940028] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 50.947587] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 50.955249] F2FS-fs (loop3): Unable to read 2th superblock [ 50.980137] F2FS-fs (loop3): Unable to read 1th superblock [ 50.988029] F2FS-fs (loop3): Unable to read 2th superblock [ 50.996266] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 51.003522] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 51.011025] F2FS-fs (loop3): Unable to read 2th superblock 2018/04/20 00:51:44 executing program 6: r0 = creat(&(0x7f0000002540)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000480)=ANY=[]) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000100)=ANY=[], 0x1023c) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000100)={0x0, 0x8001, 0x1}) 2018/04/20 00:51:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'bond_slave_0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x27}}) 2018/04/20 00:51:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f1fffefffffe03edf8fef5dd00000010000100000a0900fcff4d00040e05a5", 0x58}], 0x1) 2018/04/20 00:51:44 executing program 7: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000aed000), &(0x7f00002dc000), &(0x7f000045e000), &(0x7f0000e30fff)) 2018/04/20 00:51:44 executing program 4: r0 = memfd_create(&(0x7f0000001fc1)="00ac3d9dd2dbe6bfb408ed634a8e84d44e129b1f09bd112b865416a3b3ae309f393fef6fa46b01323ea19c86781c9f841935de975f097ef3591222705ec10f", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = socket(0x2, 0x2000080003, 0x2) getsockopt(r1, 0x0, 0xd0, &(0x7f0000001ff8)=""/8, &(0x7f0000000ffc)=0xf5a7) 2018/04/20 00:51:44 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000040), 0x3) 2018/04/20 00:51:44 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="a2", 0x1}], 0x1, 0x0) close(r0) syz_mount_image$vfat(&(0x7f0000001800)='vfat\x00', &(0x7f0000001840)='./file0\x00', 0x0, 0xaaaaaaaaaaaab46, &(0x7f0000000440)=[{&(0x7f0000000380), 0xffffffffffffffb6}], 0x0, &(0x7f00000000c0)=ANY=[]) lseek(r0, 0x0, 0x4) 2018/04/20 00:51:44 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140), 0x0, 0x200}], 0x0, &(0x7f0000000500)) 2018/04/20 00:51:44 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x200000000003c) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000001580)=0x5, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000004c0)=""/246, 0xf6}, 0x0) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000001700)}, 0x0) 2018/04/20 00:51:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8000000000000a, &(0x7f0000de1000)=0x7fff, 0x4) recvmsg(r0, &(0x7f0000000300)={&(0x7f0000000040)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, 0x26, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=""/25, 0x19}, 0x43) 2018/04/20 00:51:44 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000265ff7)='/dev/sg#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa}}}}, &(0x7f00000000c0)=0xb8) ioctl(r0, 0x227b, &(0x7f0000000000)="ff") write$fuse(r0, &(0x7f000012f000)={0x50, 0x0, 0x0, @fuse_init_out={0x7, 0x1a}}, 0x50) read(r0, &(0x7f0000000000)=""/154, 0x57) 2018/04/20 00:51:44 executing program 4: r0 = socket$inet(0x2, 0x3, 0x19) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000200)={@multicast2=0xe0000002, @local={0xac, 0x14, 0x14, 0xaa}}, 0x93) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) 2018/04/20 00:51:44 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140), 0x0, 0x200}], 0x0, &(0x7f0000000500)) 2018/04/20 00:51:44 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000c75ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x400000000000125e, &(0x7f0000000180)) 2018/04/20 00:51:44 executing program 6: r0 = creat(&(0x7f0000002540)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000480)=ANY=[]) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000100)=ANY=[], 0x1023c) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000100)={0x0, 0x8001, 0x1}) 2018/04/20 00:51:45 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140), 0x0, 0x200}], 0x0, &(0x7f0000000500)) 2018/04/20 00:51:45 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5404, &(0x7f00009d4000)) ioctl$KDGKBLED(r0, 0xc0045405, &(0x7f0000000080)) 2018/04/20 00:51:45 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000c75ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x400000000000125e, &(0x7f0000000180)) 2018/04/20 00:51:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x20c01) 2018/04/20 00:51:45 executing program 6: r0 = creat(&(0x7f0000002540)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000480)=ANY=[]) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000100)=ANY=[], 0x1023c) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000100)={0x0, 0x8001, 0x1}) 2018/04/20 00:51:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000380)=[@fd={0x66642a85}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0), 0x1}], &(0x7f0000000300)=[0x38]}}], 0x0, 0x0, &(0x7f0000000200)}) 2018/04/20 00:51:45 executing program 4: clone(0x200, &(0x7f0000251dca), &(0x7f0000744000), &(0x7f00008c8000), &(0x7f0000828ffe)) mknod(&(0x7f0000000000)='./file0\x00', 0x1000000000001040, 0x0) execve(&(0x7f000007b000)='./file0\x00', &(0x7f0000000180), &(0x7f0000000040)) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480), &(0x7f0000000680)) open$dir(&(0x7f0000a67000)='./file0\x00', 0x26102, 0x0) clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000dacfc9)) 2018/04/20 00:51:45 executing program 1: mknod(&(0x7f0000000840)='./file0\x00', 0x0, 0x0) r0 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r0}], 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f00000002c0), 0x8) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 2018/04/20 00:51:45 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000c75ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x400000000000125e, &(0x7f0000000180)) 2018/04/20 00:51:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x20c01) 2018/04/20 00:51:45 executing program 6: r0 = creat(&(0x7f0000002540)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000480)=ANY=[]) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000100)=ANY=[], 0x1023c) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000100)={0x0, 0x8001, 0x1}) 2018/04/20 00:51:45 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000180)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000100)='./file0/file1\x00', &(0x7f0000000080)) syz_fuse_mount(&(0x7f0000000040)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r1) [ 52.722391] binder: 7453:7461 got transaction with invalid offset (56, min 0 max 64) or object. 2018/04/20 00:51:45 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000c75ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x400000000000125e, &(0x7f0000000180)) 2018/04/20 00:51:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') pread64(r0, &(0x7f0000904000), 0x3c0, 0x0) 2018/04/20 00:51:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x20c01) [ 52.768894] binder: 7453:7461 transaction failed 29201/-22, size 64-8 line 3196 [ 52.813628] binder: BINDER_SET_CONTEXT_MGR already set [ 52.825802] binder: 7453:7461 ioctl 40046207 0 returned -16 [ 52.858259] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/20 00:51:46 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000180)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000100)='./file0/file1\x00', &(0x7f0000000080)) syz_fuse_mount(&(0x7f0000000040)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r1) 2018/04/20 00:51:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') pread64(r0, &(0x7f0000904000), 0x3c0, 0x0) 2018/04/20 00:51:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x20c01) 2018/04/20 00:51:46 executing program 7: r0 = epoll_create1(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000a09ff1)='net/ipv6_route\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000e37ff4)={0x20000005}) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 2018/04/20 00:51:46 executing program 1: mknod(&(0x7f0000000840)='./file0\x00', 0x0, 0x0) r0 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r0}], 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f00000002c0), 0x8) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 2018/04/20 00:51:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000880)={&(0x7f0000000600)={0x10}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x1c, r1, 0x801, 0x0, 0x0, {0xc}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6}]}, 0x1c}, 0x1}, 0x0) 2018/04/20 00:51:46 executing program 6: clone(0x200, &(0x7f0000251dca), &(0x7f0000744000), &(0x7f00008c8000), &(0x7f0000828ffe)) mknod(&(0x7f0000000000)='./file0\x00', 0x1000000000001040, 0x0) execve(&(0x7f000007b000)='./file0\x00', &(0x7f0000000180), &(0x7f0000000040)) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480), &(0x7f0000000680)) open$dir(&(0x7f0000a67000)='./file0\x00', 0x26102, 0x0) clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000dacfc9)) 2018/04/20 00:51:46 executing program 4: clone(0x200, &(0x7f0000251dca), &(0x7f0000744000), &(0x7f00008c8000), &(0x7f0000828ffe)) mknod(&(0x7f0000000000)='./file0\x00', 0x1000000000001040, 0x0) execve(&(0x7f000007b000)='./file0\x00', &(0x7f0000000180), &(0x7f0000000040)) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480), &(0x7f0000000680)) open$dir(&(0x7f0000a67000)='./file0\x00', 0x26102, 0x0) clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000dacfc9)) 2018/04/20 00:51:46 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000180)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000100)='./file0/file1\x00', &(0x7f0000000080)) syz_fuse_mount(&(0x7f0000000040)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r1) 2018/04/20 00:51:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') pread64(r0, &(0x7f0000904000), 0x3c0, 0x0) 2018/04/20 00:51:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000880)={&(0x7f0000000600)={0x10}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x1c, r1, 0x801, 0x0, 0x0, {0xc}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6}]}, 0x1c}, 0x1}, 0x0) 2018/04/20 00:51:46 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000180)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000100)='./file0/file1\x00', &(0x7f0000000080)) syz_fuse_mount(&(0x7f0000000040)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r1) 2018/04/20 00:51:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') pread64(r0, &(0x7f0000904000), 0x3c0, 0x0) 2018/04/20 00:51:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000880)={&(0x7f0000000600)={0x10}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x1c, r1, 0x801, 0x0, 0x0, {0xc}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6}]}, 0x1c}, 0x1}, 0x0) 2018/04/20 00:51:46 executing program 3: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, 0xffffffffffffffff, 0x5, 0x0) 2018/04/20 00:51:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000880)={&(0x7f0000000600)={0x10}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x1c, r1, 0x801, 0x0, 0x0, {0xc}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6}]}, 0x1c}, 0x1}, 0x0) 2018/04/20 00:51:46 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000180)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000100)='./file0/file1\x00', &(0x7f0000000080)) syz_fuse_mount(&(0x7f0000000040)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r1) 2018/04/20 00:51:46 executing program 1: mknod(&(0x7f0000000840)='./file0\x00', 0x0, 0x0) r0 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r0}], 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f00000002c0), 0x8) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 2018/04/20 00:51:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300094700bb61e107000000070000000200000000040000000b800019001a000d00ff1c43f4000000fd17e9ff0000060400000000", 0x39}], 0x1) 2018/04/20 00:51:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f00001f7000)={0x10}, 0xc, &(0x7f0000e22ff0)={&(0x7f0000004400)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}, 0x1}, 0x0) 2018/04/20 00:51:46 executing program 5: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2) 2018/04/20 00:51:46 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000680)={0x1, 'bond_slave_0\x00'}, 0x18) [ 53.941320] IPVS: Error connecting to the multicast addr 2018/04/20 00:51:47 executing program 4: clone(0x200, &(0x7f0000251dca), &(0x7f0000744000), &(0x7f00008c8000), &(0x7f0000828ffe)) mknod(&(0x7f0000000000)='./file0\x00', 0x1000000000001040, 0x0) execve(&(0x7f000007b000)='./file0\x00', &(0x7f0000000180), &(0x7f0000000040)) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480), &(0x7f0000000680)) open$dir(&(0x7f0000a67000)='./file0\x00', 0x26102, 0x0) clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000dacfc9)) 2018/04/20 00:51:47 executing program 6: clone(0x200, &(0x7f0000251dca), &(0x7f0000744000), &(0x7f00008c8000), &(0x7f0000828ffe)) mknod(&(0x7f0000000000)='./file0\x00', 0x1000000000001040, 0x0) execve(&(0x7f000007b000)='./file0\x00', &(0x7f0000000180), &(0x7f0000000040)) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480), &(0x7f0000000680)) open$dir(&(0x7f0000a67000)='./file0\x00', 0x26102, 0x0) clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000dacfc9)) 2018/04/20 00:51:47 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000180)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000100)='./file0/file1\x00', &(0x7f0000000080)) syz_fuse_mount(&(0x7f0000000040)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r1) 2018/04/20 00:51:47 executing program 5: add_key$user(&(0x7f0000499000)='user\x00', &(0x7f0000a1e000)={0x73, 0x79, 0x7a}, &(0x7f0000889000)="3257fa", 0x3, 0xfffffffffffffff8) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006f3ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x40045108, &(0x7f0000888fff)) 2018/04/20 00:51:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0xc0ed0000, &(0x7f0000000180)) [ 54.581457] FAT-fs (loop3): bogus number of reserved sectors [ 54.587465] FAT-fs (loop3): Can't find a valid FAT filesystem [ 54.626137] FAT-fs (loop3): bogus number of reserved sectors [ 54.632035] FAT-fs (loop3): Can't find a valid FAT filesystem [ 57.214275] IPVS: Creating netns size=2536 id=9 [ 57.237893] IPVS: Creating netns size=2536 id=10 [ 57.422017] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 57.432119] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 57.439504] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 57.449308] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 57.497565] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 57.505519] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 57.549339] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 57.556286] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 57.602068] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 57.609289] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 57.616669] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 57.626394] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 57.634355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.644221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.077330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.086214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.700265] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 58.732179] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.738264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.745583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.760197] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 58.791291] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.797388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.804214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/20 00:51:52 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000180)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000100)='./file0/file1\x00', &(0x7f0000000080)) syz_fuse_mount(&(0x7f0000000040)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r1) 2018/04/20 00:51:52 executing program 4: clone(0x200, &(0x7f0000251dca), &(0x7f0000744000), &(0x7f00008c8000), &(0x7f0000828ffe)) mknod(&(0x7f0000000000)='./file0\x00', 0x1000000000001040, 0x0) execve(&(0x7f000007b000)='./file0\x00', &(0x7f0000000180), &(0x7f0000000040)) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480), &(0x7f0000000680)) open$dir(&(0x7f0000a67000)='./file0\x00', 0x26102, 0x0) clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000dacfc9)) 2018/04/20 00:51:52 executing program 3: keyctl$reject(0x13, 0x0, 0x0, 0x201, 0x0) 2018/04/20 00:51:52 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000180)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000100)='./file0/file1\x00', &(0x7f0000000080)) syz_fuse_mount(&(0x7f0000000040)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r1) 2018/04/20 00:51:52 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000180)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000100)='./file0/file1\x00', &(0x7f0000000080)) syz_fuse_mount(&(0x7f0000000040)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r1) 2018/04/20 00:51:52 executing program 6: clone(0x200, &(0x7f0000251dca), &(0x7f0000744000), &(0x7f00008c8000), &(0x7f0000828ffe)) mknod(&(0x7f0000000000)='./file0\x00', 0x1000000000001040, 0x0) execve(&(0x7f000007b000)='./file0\x00', &(0x7f0000000180), &(0x7f0000000040)) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480), &(0x7f0000000680)) open$dir(&(0x7f0000a67000)='./file0\x00', 0x26102, 0x0) clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000dacfc9)) 2018/04/20 00:51:52 executing program 1: mknod(&(0x7f0000000840)='./file0\x00', 0x0, 0x0) r0 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r0}], 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f00000002c0), 0x8) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 2018/04/20 00:51:52 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) unshare(0x8000400) sendmmsg(r0, &(0x7f0000003ec0)=[{{&(0x7f00000003c0)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000003f40), 0x0, &(0x7f0000001800)}}], 0x1, 0x0) 2018/04/20 00:51:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@local, @in6=@local}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@loopback, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) getpeername$packet(0xffffffffffffff9c, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000002700)) mlockall(0x1) 2018/04/20 00:51:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5414, &(0x7f0000000040)) 2018/04/20 00:51:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5414, &(0x7f0000000040)) 2018/04/20 00:51:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5414, &(0x7f0000000040)) 2018/04/20 00:51:52 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=@fragment, 0x8) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f000042d000)=@routing={0x0, 0x2, 0x2, 0x80000001, 0x0, [@mcast1={0xff, 0x1, [], 0x1}]}, 0x18) sendto$inet6(r0, &(0x7f00001e2000), 0x0, 0x0, &(0x7f0000f14000)={0xa, 0x4e21}, 0x1c) 2018/04/20 00:51:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@local, @in6=@local}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@loopback, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) getpeername$packet(0xffffffffffffff9c, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000002700)) mlockall(0x1) 2018/04/20 00:51:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5414, &(0x7f0000000040)) 2018/04/20 00:51:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b80)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000036c0)=[{&(0x7f0000000bc0)=@abs, 0x6e, &(0x7f0000000e40), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES64], 0x18}], 0x1, 0x0) [ 65.000651] IPVS: Creating netns size=2536 id=11 [ 65.032725] IPVS: Creating netns size=2536 id=12 [ 65.070004] IPVS: Creating netns size=2536 id=13 [ 65.412679] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 65.429515] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 65.438342] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 65.447369] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 65.455299] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 65.474003] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 65.565804] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 65.576346] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 65.588510] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 65.595948] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 65.604586] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 65.612056] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 65.709574] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 65.719177] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 65.735285] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 65.743332] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 65.752593] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 65.767573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.785127] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 65.793644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.805134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.812743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.833209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.847006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.184256] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 67.191277] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 67.247060] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 67.253537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.260154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.283876] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 67.291070] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 67.297412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.305188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.354687] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 67.362647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.369605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/20 00:52:01 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000180)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000100)='./file0/file1\x00', &(0x7f0000000080)) syz_fuse_mount(&(0x7f0000000040)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r1) 2018/04/20 00:52:01 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setopts(0x420b, r1, 0x8, 0x2000000000000) 2018/04/20 00:52:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@local, @in6=@local}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@loopback, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) getpeername$packet(0xffffffffffffff9c, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000002700)) mlockall(0x1) 2018/04/20 00:52:01 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'vhan0\x00', 0x10000000000400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'ip6_vti0\x00', 0x200}) 2018/04/20 00:52:01 executing program 1: mmap(&(0x7f0000038000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @broadcast=0xffffffff}, @in={0x2, 0x0, @multicast1=0xe0000001}, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}], 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x60, &(0x7f0000000000), 0x0) 2018/04/20 00:52:01 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000c79000)='stat\x00') r1 = syz_open_procfs(0x0, &(0x7f0000ab9000)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000317ff8), 0x3) 2018/04/20 00:52:01 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f000031efd4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0x4613ccb868eb6398) 2018/04/20 00:52:01 executing program 2: pipe(&(0x7f0000055000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00007d3000)=[{&(0x7f0000000000)='$', 0x1}], 0x1, 0x0) pipe(&(0x7f0000041000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f000000b000)=[{&(0x7f0000066000)=',', 0x1}], 0x1) tee(r2, r1, 0x5, 0x0) 2018/04/20 00:52:01 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) clock_settime(0x0, &(0x7f00000000c0)) 2018/04/20 00:52:01 executing program 1: prctl$intptr(0x22, 0x3) 2018/04/20 00:52:01 executing program 6: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000040)='/\x00', 0x0, 0x0, &(0x7f00000000c0), 0xa40e0, &(0x7f0000000080)={[{@min_batch_time={'min_batch_time', 0x3d, [0x30]}, 0x2c}]}) 2018/04/20 00:52:01 executing program 4: mremap(&(0x7f0000ffd000/0x1000)=nil, 0x800020ffc000, 0x7ffffffff000, 0x0, &(0x7f0000ffd000/0x2000)=nil) 2018/04/20 00:52:01 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000005780)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000005740)={&(0x7f0000005400)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6, @in6=@local={0xfe, 0x80, [], 0xaa}}, {@in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x6c}, @in=@loopback=0x7f000001}, 0x0, 0x1000}, [@mark={0xc, 0x15, {0x0, 0x9}}]}, 0x104}, 0x1}, 0x0) 2018/04/20 00:52:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @multicast1=0xe0000001}, 0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='bridge_slave_0\x00'}) 2018/04/20 00:52:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000a8bfff)=""/1, 0x805031ae) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000000c0)) 2018/04/20 00:52:01 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000005780)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000005740)={&(0x7f0000005400)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6, @in6=@local={0xfe, 0x80, [], 0xaa}}, {@in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x6c}, @in=@loopback=0x7f000001}, 0x0, 0x1000}, [@mark={0xc, 0x15, {0x0, 0x9}}]}, 0x104}, 0x1}, 0x0) [ 68.797871] EXT4-fs (sda1): re-mounted. Opts: min_batch_time=0, [ 68.875049] EXT4-fs (sda1): re-mounted. Opts: min_batch_time=0, 2018/04/20 00:52:02 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000005780)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000005740)={&(0x7f0000005400)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6, @in6=@local={0xfe, 0x80, [], 0xaa}}, {@in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x6c}, @in=@loopback=0x7f000001}, 0x0, 0x1000}, [@mark={0xc, 0x15, {0x0, 0x9}}]}, 0x104}, 0x1}, 0x0) 2018/04/20 00:52:02 executing program 6: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000877000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f00000017c0), &(0x7f0000000080), 0x0) 2018/04/20 00:52:02 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010c00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'macturkish'}, 0x2c}]}) 2018/04/20 00:52:02 executing program 7: r0 = syz_open_dev$sg(&(0x7f00000006c0)='/dev/sg#\x00', 0x0, 0x8006) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000000180)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b6f90)=[{&(0x7f0000000040)="e59bc053050000007bb51f597ea6feb27c6371100ca6f5c53ded1a2f0fd1c92c1f8082d61217feadb3af", 0x2a}], 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x227c, &(0x7f0000000100)={{0x2, 0x0, @loopback=0x7f000001}, {}, 0x0, {0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, "e8e1ffc9920000200001000100"}) 2018/04/20 00:52:02 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000041bff4)) 2018/04/20 00:52:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@local, @in6=@local}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@loopback, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) getpeername$packet(0xffffffffffffff9c, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000002700)) mlockall(0x1) 2018/04/20 00:52:02 executing program 4: mkdir(&(0x7f000053bff8)='./file0\x00', 0x0) mount(&(0x7f0000000a80)='./file0\x00', &(0x7f00000008c0)='./file0\x00', &(0x7f0000000a40)='sysfs\x00', 0x0, &(0x7f0000cde000)) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r0, 0x40000000, 0x0) getdents64(r0, &(0x7f0000000ac0)=""/4096, 0x1000) 2018/04/20 00:52:02 executing program 1: getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x1) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x10000002284, &(0x7f00000000c0)) [ 69.835385] sd 0:0:1:0: device reset [ 69.854852] sd 0:0:1:0: device reset [ 72.373425] IPVS: Creating netns size=2536 id=14 [ 72.406655] IPVS: Creating netns size=2536 id=15 [ 72.637318] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 72.655503] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 72.678833] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 72.695854] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 72.736102] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 72.753889] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 72.806811] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 72.823894] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 72.847701] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 72.865157] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 72.882827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.900732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.909036] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 72.926698] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 72.944771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.964736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.890179] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.937056] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.943729] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 73.949843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.957280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.997987] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.004124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.010719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/20 00:52:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000005780)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000005740)={&(0x7f0000005400)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6, @in6=@local={0xfe, 0x80, [], 0xaa}}, {@in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x6c}, @in=@loopback=0x7f000001}, 0x0, 0x1000}, [@mark={0xc, 0x15, {0x0, 0x9}}]}, 0x104}, 0x1}, 0x0) 2018/04/20 00:52:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000001000)="390000001300090469000000810000000700004003000000450001070000001419001a000400020d070000000200000000000000000003e400", 0x39}], 0x1) 2018/04/20 00:52:06 executing program 4: mkdir(&(0x7f000053bff8)='./file0\x00', 0x0) mount(&(0x7f0000000a80)='./file0\x00', &(0x7f00000008c0)='./file0\x00', &(0x7f0000000a40)='sysfs\x00', 0x0, &(0x7f0000cde000)) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r0, 0x40000000, 0x0) getdents64(r0, &(0x7f0000000ac0)=""/4096, 0x1000) 2018/04/20 00:52:06 executing program 1: getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x1) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x10000002284, &(0x7f00000000c0)) 2018/04/20 00:52:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000cd8ff4)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000007000)={0xffffffffe0000001}) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x1, 0x0) 2018/04/20 00:52:06 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') pread64(r0, &(0x7f0000000400)=""/141, 0x8d, 0x3f) 2018/04/20 00:52:06 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$evdev(r0, &(0x7f0000000600)=[{{0x0, 0x7530}}], 0x18) 2018/04/20 00:52:06 executing program 7: capset(&(0x7f0000be6ff8)={0x19980330}, &(0x7f000032e000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) process_vm_writev(r1, &(0x7f0000000840)=[{&(0x7f00000007c0)=""/102, 0x66}], 0x1, &(0x7f0000000940)=[{&(0x7f0000000900)=""/11, 0xb}], 0x1, 0x0) r2 = dup2(r0, r0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000080)={0x0, 0x5, 0x7fff, 0x0, 0x1f}) 2018/04/20 00:52:07 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000280)='])em0\x00') 2018/04/20 00:52:07 executing program 4: mkdir(&(0x7f000053bff8)='./file0\x00', 0x0) mount(&(0x7f0000000a80)='./file0\x00', &(0x7f00000008c0)='./file0\x00', &(0x7f0000000a40)='sysfs\x00', 0x0, &(0x7f0000cde000)) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r0, 0x40000000, 0x0) getdents64(r0, &(0x7f0000000ac0)=""/4096, 0x1000) 2018/04/20 00:52:07 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f00000000c0)) 2018/04/20 00:52:07 executing program 3: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$notify(r0, 0x0, 0x282) [ 74.399377] sd 0:0:1:0: device reset 2018/04/20 00:52:07 executing program 1: getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x1) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x10000002284, &(0x7f00000000c0)) 2018/04/20 00:52:07 executing program 6: clone(0x200, &(0x7f0000000380), &(0x7f0000000280), &(0x7f00000003c0), &(0x7f0000000200)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000280), &(0x7f0000000240)) r0 = syz_open_procfs(0x0, &(0x7f00000e0000)='stack\x00') r1 = getpgid(0x0) process_vm_readv(r1, &(0x7f0000000040)=[{&(0x7f0000000340)=""/97, 0x61}], 0x1, &(0x7f0000001800)=[{&(0x7f0000001700)=""/205, 0xcd}], 0x1, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00008ad000)=""/178, 0xb2}], 0x1) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/04/20 00:52:07 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x4002}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x0, &(0x7f0000000100)}) 2018/04/20 00:52:07 executing program 5: openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x4a) 2018/04/20 00:52:07 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/04/20 00:52:07 executing program 4: mkdir(&(0x7f000053bff8)='./file0\x00', 0x0) mount(&(0x7f0000000a80)='./file0\x00', &(0x7f00000008c0)='./file0\x00', &(0x7f0000000a40)='sysfs\x00', 0x0, &(0x7f0000cde000)) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r0, 0x40000000, 0x0) getdents64(r0, &(0x7f0000000ac0)=""/4096, 0x1000) 2018/04/20 00:52:07 executing program 1: getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x1) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x10000002284, &(0x7f00000000c0)) [ 74.482297] sd 0:0:1:0: device reset [ 74.534391] sd 0:0:1:0: device reset 2018/04/20 00:52:08 executing program 2: clone(0x200, &(0x7f0000000380), &(0x7f0000000280), &(0x7f00000003c0), &(0x7f0000000200)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000280), &(0x7f0000000240)) r0 = syz_open_procfs(0x0, &(0x7f00000e0000)='stack\x00') r1 = getpgid(0x0) process_vm_readv(r1, &(0x7f0000000040)=[{&(0x7f0000000340)=""/97, 0x61}], 0x1, &(0x7f0000001800)=[{&(0x7f0000001700)=""/205, 0xcd}], 0x1, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00008ad000)=""/178, 0xb2}], 0x1) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/04/20 00:52:08 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) 2018/04/20 00:52:08 executing program 1: r0 = memfd_create(&(0x7f0000041000)="01800d05", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000fddff3)='/dev/snd/seq\x00', 0x0, 0x40000000001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000042f74)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x2, 0x0, 0x0, @time={0x0, 0x989680}, {}, {}, @time=@time={0x0, 0x989680}}], 0x30) 2018/04/20 00:52:08 executing program 3: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$notify(r0, 0x0, 0x282) 2018/04/20 00:52:08 executing program 7: r0 = socket$inet6(0xa, 0x400000000001, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f000074fffc)=0x3, 0xffd6) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xfc) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000400), 0x4) rt_sigaction(0x0, &(0x7f0000000040), &(0x7f00000001c0), 0x8, &(0x7f0000000200)) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000640), &(0x7f0000000680)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000006c0)={0x0, @in={{0x2}}}, &(0x7f0000000780)=0x90) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000007c0), &(0x7f0000000b00)=0x14) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000b40), &(0x7f0000000b80)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000c40), &(0x7f0000000c80)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000cc0), &(0x7f0000000d00)=0x20) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000480)=@in6={0xa}, 0x1c, &(0x7f0000000600), 0x0, &(0x7f0000000d40)}, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000800)=ANY=[], &(0x7f0000000080)) renameat(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', 0xffffffffffffffff, &(0x7f0000000280)='./bus\x00') setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0), 0x14) ftruncate(0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x1fc, 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fcntl$setsig(r2, 0xa, 0x27) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000440), 0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000380)={r3, 0x3, 0x20}, 0xc) ftruncate(r2, 0x7fff) 2018/04/20 00:52:08 executing program 6: clone(0x200, &(0x7f0000000380), &(0x7f0000000280), &(0x7f00000003c0), &(0x7f0000000200)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000280), &(0x7f0000000240)) r0 = syz_open_procfs(0x0, &(0x7f00000e0000)='stack\x00') r1 = getpgid(0x0) process_vm_readv(r1, &(0x7f0000000040)=[{&(0x7f0000000340)=""/97, 0x61}], 0x1, &(0x7f0000001800)=[{&(0x7f0000001700)=""/205, 0xcd}], 0x1, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00008ad000)=""/178, 0xb2}], 0x1) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/04/20 00:52:08 executing program 4: clock_adjtime(0x0, &(0x7f0000000140)={0xd9, 0xff00000000000000, 0x0, 0x0, 0x0, 0x1}) 2018/04/20 00:52:08 executing program 5: openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x4a) 2018/04/20 00:52:08 executing program 4: clone(0x200, &(0x7f0000000380), &(0x7f0000000280), &(0x7f00000003c0), &(0x7f0000000200)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000280), &(0x7f0000000240)) r0 = syz_open_procfs(0x0, &(0x7f00000e0000)='stack\x00') r1 = getpgid(0x0) process_vm_readv(r1, &(0x7f0000000040)=[{&(0x7f0000000340)=""/97, 0x61}], 0x1, &(0x7f0000001800)=[{&(0x7f0000001700)=""/205, 0xcd}], 0x1, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00008ad000)=""/178, 0xb2}], 0x1) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/04/20 00:52:08 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x101042, 0x0) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000080)='./file0\x00', 0x0, r2) chown(&(0x7f0000000200)='./file0\x00', 0x0, r1) 2018/04/20 00:52:08 executing program 1: perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000039000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000002c000)=[{&(0x7f0000000000)=',', 0x1}], 0x1, &(0x7f0000021000)}, 0xc100) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000002b40)="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", 0xb23}], 0x1, &(0x7f0000003b40)}, 0x0) 2018/04/20 00:52:08 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000865000), 0xebce, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) r3 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000865000), 0xebce, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 2018/04/20 00:52:08 executing program 3: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$notify(r0, 0x0, 0x282) 2018/04/20 00:52:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000fdfffc)=0x18, 0x4) write(r1, &(0x7f0000019f97), 0x0) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000000)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, 0x80, &(0x7f00000003c0)}, 0x0) 2018/04/20 00:52:08 executing program 5: openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x4a) 2018/04/20 00:52:08 executing program 1: perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000039000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000002c000)=[{&(0x7f0000000000)=',', 0x1}], 0x1, &(0x7f0000021000)}, 0xc100) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000002b40)="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", 0xb23}], 0x1, &(0x7f0000003b40)}, 0x0) 2018/04/20 00:52:08 executing program 6: clone(0x200, &(0x7f0000000380), &(0x7f0000000280), &(0x7f00000003c0), &(0x7f0000000200)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000280), &(0x7f0000000240)) r0 = syz_open_procfs(0x0, &(0x7f00000e0000)='stack\x00') r1 = getpgid(0x0) process_vm_readv(r1, &(0x7f0000000040)=[{&(0x7f0000000340)=""/97, 0x61}], 0x1, &(0x7f0000001800)=[{&(0x7f0000001700)=""/205, 0xcd}], 0x1, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00008ad000)=""/178, 0xb2}], 0x1) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/04/20 00:52:08 executing program 2: clone(0x200, &(0x7f0000000380), &(0x7f0000000280), &(0x7f00000003c0), &(0x7f0000000200)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000280), &(0x7f0000000240)) r0 = syz_open_procfs(0x0, &(0x7f00000e0000)='stack\x00') r1 = getpgid(0x0) process_vm_readv(r1, &(0x7f0000000040)=[{&(0x7f0000000340)=""/97, 0x61}], 0x1, &(0x7f0000001800)=[{&(0x7f0000001700)=""/205, 0xcd}], 0x1, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00008ad000)=""/178, 0xb2}], 0x1) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/04/20 00:52:08 executing program 4: clone(0x200, &(0x7f0000000380), &(0x7f0000000280), &(0x7f00000003c0), &(0x7f0000000200)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000280), &(0x7f0000000240)) r0 = syz_open_procfs(0x0, &(0x7f00000e0000)='stack\x00') r1 = getpgid(0x0) process_vm_readv(r1, &(0x7f0000000040)=[{&(0x7f0000000340)=""/97, 0x61}], 0x1, &(0x7f0000001800)=[{&(0x7f0000001700)=""/205, 0xcd}], 0x1, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00008ad000)=""/178, 0xb2}], 0x1) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/04/20 00:52:08 executing program 1: perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000039000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000002c000)=[{&(0x7f0000000000)=',', 0x1}], 0x1, &(0x7f0000021000)}, 0xc100) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000002b40)="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", 0xb23}], 0x1, &(0x7f0000003b40)}, 0x0) 2018/04/20 00:52:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0xffffffc3}]}, 0x28}, 0x1}, 0x0) 2018/04/20 00:52:08 executing program 5: openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x4a) 2018/04/20 00:52:08 executing program 3: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$notify(r0, 0x0, 0x282) 2018/04/20 00:52:08 executing program 7: futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x8002) futex(&(0x7f000000cffc), 0xa, 0x0, &(0x7f00006f7000)={0xfffffffffffffffc, 0x100000000000000}, &(0x7f0000000080), 0x20) 2018/04/20 00:52:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000015ff0)={&(0x7f0000013000)={0x2c, 0x21, 0x2ff, 0x0, 0x0, {0xa}, [@typed={0xc, 0x0, @u32}, @typed={0xc, 0x14, @u32=0xffffffffffffffff}]}, 0x2c}, 0x1}, 0x0) [ 76.376808] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 2018/04/20 00:52:09 executing program 4: clone(0x200, &(0x7f0000000380), &(0x7f0000000280), &(0x7f00000003c0), &(0x7f0000000200)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000280), &(0x7f0000000240)) r0 = syz_open_procfs(0x0, &(0x7f00000e0000)='stack\x00') r1 = getpgid(0x0) process_vm_readv(r1, &(0x7f0000000040)=[{&(0x7f0000000340)=""/97, 0x61}], 0x1, &(0x7f0000001800)=[{&(0x7f0000001700)=""/205, 0xcd}], 0x1, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00008ad000)=""/178, 0xb2}], 0x1) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/04/20 00:52:09 executing program 1: perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000039000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000002c000)=[{&(0x7f0000000000)=',', 0x1}], 0x1, &(0x7f0000021000)}, 0xc100) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000002b40)="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", 0xb23}], 0x1, &(0x7f0000003b40)}, 0x0) 2018/04/20 00:52:09 executing program 0: pipe(&(0x7f0000a41000)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r1, 0x2) flock(r0, 0x1) close(r1) 2018/04/20 00:52:09 executing program 5: ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={&(0x7f0000230000/0x600000)=nil, 0x600000}) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)) 2018/04/20 00:52:09 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmsg(r0, &(0x7f000001b000)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="97aa89464f0e2f2b932aee627aea1f84aebe73c4f424656cff31c4cd179af23a0b908e1eeebdb364", 0x28}], 0x1, &(0x7f000001ef08)}, 0x0) 2018/04/20 00:52:09 executing program 7: r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000180)='P', 0x1, 0xffffffffffffffff) keyctl$update(0x2, r0, 0x0, 0x0) 2018/04/20 00:52:09 executing program 2: clone(0x200, &(0x7f0000000380), &(0x7f0000000280), &(0x7f00000003c0), &(0x7f0000000200)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000280), &(0x7f0000000240)) r0 = syz_open_procfs(0x0, &(0x7f00000e0000)='stack\x00') r1 = getpgid(0x0) process_vm_readv(r1, &(0x7f0000000040)=[{&(0x7f0000000340)=""/97, 0x61}], 0x1, &(0x7f0000001800)=[{&(0x7f0000001700)=""/205, 0xcd}], 0x1, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00008ad000)=""/178, 0xb2}], 0x1) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/04/20 00:52:09 executing program 6: clone(0x200, &(0x7f0000000380), &(0x7f0000000280), &(0x7f00000003c0), &(0x7f0000000200)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000280), &(0x7f0000000240)) r0 = syz_open_procfs(0x0, &(0x7f00000e0000)='stack\x00') r1 = getpgid(0x0) process_vm_readv(r1, &(0x7f0000000040)=[{&(0x7f0000000340)=""/97, 0x61}], 0x1, &(0x7f0000001800)=[{&(0x7f0000001700)=""/205, 0xcd}], 0x1, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00008ad000)=""/178, 0xb2}], 0x1) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/04/20 00:52:09 executing program 1: r0 = syz_open_dev$mice(&(0x7f00002ac000)='/dev/input/mice\x00', 0x0, 0x3e) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="6e65742f6970365f7461626c65735f6e616d65730017") sendfile(r0, r1, &(0x7f00008d1000), 0x401) 2018/04/20 00:52:09 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/20 00:52:09 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000f72ffc), 0xf) 2018/04/20 00:52:09 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) chdir(&(0x7f0000000080)='./file1\x00') 2018/04/20 00:52:09 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013000901690000008100000007000040030000003d51a6050000001419001a00040002010700000000000000000000000000000000", 0x39}], 0x1) 2018/04/20 00:52:09 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x0) capset(&(0x7f0000000700)={0x20071026}, &(0x7f0000000740)) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000007c0)={@ipv4={[], [0xff, 0xff], @rand_addr}}) 2018/04/20 00:52:09 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) [ 77.416552] capability: warning: `syz-executor3' uses deprecated v2 capabilities in a way that may be insecure 2018/04/20 00:52:10 executing program 7: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) sendto$ax25(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000040)={0x3, {"65a21c61a839d6"}, 0x6}, 0x10) preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/73, 0x49}, {&(0x7f00000001c0)=""/39, 0x27}, {&(0x7f0000000340)=""/106, 0x6a}, {&(0x7f00000003c0)=""/243, 0xf3}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x6, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000015c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x40000, 0x8, 0x1, 0x10000, 0x0, 0x0, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0x9, 0x5, 0x8, 0x4, 0x7, 0x99, 0x8000, 0x6, 0xae, 0xb5, 0x8000, 0xb6a3, 0x7, 0x7, 0x2, 0xfffffffffffffff8, 0xf7a, 0xfffffffffffffff7, 0x8, 0x1, 0x2639, 0x0, 0xff, 0x22, 0x9, 0xe35, 0x0, 0x0, 0x2, @perf_config_ext={0x7f, 0x1000}, 0x11001, 0x7, 0x0, 0x7, 0x1, 0xe5, 0x3edf}, r1, 0x6, r0, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0004000000100000cc000000490b0000ec03000001000000000000000000000000200000002000000004000000000000e95dbe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000011a00)="0000000000000000000000000000000000000000000000000000000074800000ed41000000040000e95dbe5ae95dbe5ae95dbe5a00000000000005000200000000000800000000000af301000400000000000000000000000100000023", 0x5d, 0x10860}], 0x0, &(0x7f0000012f00)) open$dir(&(0x7f0000000e40)='./file0//ile0\x00', 0xc240, 0x0) truncate(&(0x7f0000000440)='./file0//ile0\x00', 0xffff) 2018/04/20 00:52:10 executing program 5: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x2000000000000b}, 0x1c) 2018/04/20 00:52:10 executing program 1: r0 = socket(0x10, 0x4000000000000802, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x20, 0x12, 0x1, 0x0, 0x0, {}, [@generic="5d501934f155f4f32a"]}, 0x20}, 0x1}, 0x0) 2018/04/20 00:52:10 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/sockcreate\x00') prctl$seccomp(0x16, 0x1, &(0x7f0000000b40)) pkey_free(0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x40) 2018/04/20 00:52:10 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 2018/04/20 00:52:10 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="a8", 0x1}], 0x1, 0x0) fallocate(r0, 0x0, 0x0, 0x0) syz_open_dev$random(&(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) 2018/04/20 00:52:10 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000453ff6)='attr/prev\x00') mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) read$eventfd(r0, &(0x7f0000ffcffd), 0x8) 2018/04/20 00:52:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0x100000162) write$sndseq(0xffffffffffffffff, &(0x7f0000000140), 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KDGKBSENT(0xffffffffffffffff, 0xc004743e, &(0x7f0000837000)) 2018/04/20 00:52:10 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40802, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) write$evdev(r1, &(0x7f0000037fe8)=[{}], 0x18) sendfile(r1, r1, &(0x7f0000000040), 0x7fc) 2018/04/20 00:52:10 executing program 5: mremap(&(0x7f000000a000/0x3000)=nil, 0x3000, 0x1000, 0x40000000003, &(0x7f0000002000/0x1000)=nil) 2018/04/20 00:52:10 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000453ff6)='attr/prev\x00') mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) read$eventfd(r0, &(0x7f0000ffcffd), 0x8) 2018/04/20 00:52:10 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="a8", 0x1}], 0x1, 0x0) fallocate(r0, 0x0, 0x0, 0x0) syz_open_dev$random(&(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) 2018/04/20 00:52:10 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000453ff6)='attr/prev\x00') mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) read$eventfd(r0, &(0x7f0000ffcffd), 0x8) 2018/04/20 00:52:10 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000fc0000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000914ff0)={0x0, 0x0, &(0x7f0000fb2000)}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000dd5000)) [ 78.258546] hrtimer: interrupt took 63914 ns 2018/04/20 00:52:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0xffffffff, 0x0, 0x0, 0x1fb, 0x0, 0x9}) ioctl$TIOCGLCKTRMIOS(r1, 0x5412, &(0x7f0000000000)={0x9}) 2018/04/20 00:52:10 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000453ff6)='attr/prev\x00') mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) read$eventfd(r0, &(0x7f0000ffcffd), 0x8) [ 78.341734] IPVS: Creating netns size=2536 id=16 [ 78.396332] EXT4-fs (loop7): bad geometry: block count 4096 exceeds size of device (132 blocks) [ 78.453683] IPVS: Creating netns size=2536 id=17 [ 78.463117] EXT4-fs (loop7): bad geometry: block count 4096 exceeds size of device (132 blocks) 2018/04/20 00:52:11 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) sendto$ax25(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000040)={0x3, {"65a21c61a839d6"}, 0x6}, 0x10) preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/73, 0x49}, {&(0x7f00000001c0)=""/39, 0x27}, {&(0x7f0000000340)=""/106, 0x6a}, {&(0x7f00000003c0)=""/243, 0xf3}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x6, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000015c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x40000, 0x8, 0x1, 0x10000, 0x0, 0x0, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0x9, 0x5, 0x8, 0x4, 0x7, 0x99, 0x8000, 0x6, 0xae, 0xb5, 0x8000, 0xb6a3, 0x7, 0x7, 0x2, 0xfffffffffffffff8, 0xf7a, 0xfffffffffffffff7, 0x8, 0x1, 0x2639, 0x0, 0xff, 0x22, 0x9, 0xe35, 0x0, 0x0, 0x2, @perf_config_ext={0x7f, 0x1000}, 0x11001, 0x7, 0x0, 0x7, 0x1, 0xe5, 0x3edf}, r1, 0x6, r0, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0004000000100000cc000000490b0000ec03000001000000000000000000000000200000002000000004000000000000e95dbe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000011a00)="0000000000000000000000000000000000000000000000000000000074800000ed41000000040000e95dbe5ae95dbe5ae95dbe5a00000000000005000200000000000800000000000af301000400000000000000000000000100000023", 0x5d, 0x10860}], 0x0, &(0x7f0000012f00)) open$dir(&(0x7f0000000e40)='./file0//ile0\x00', 0xc240, 0x0) truncate(&(0x7f0000000440)='./file0//ile0\x00', 0xffff) 2018/04/20 00:52:11 executing program 7: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) sendto$ax25(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000040)={0x3, {"65a21c61a839d6"}, 0x6}, 0x10) preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/73, 0x49}, {&(0x7f00000001c0)=""/39, 0x27}, {&(0x7f0000000340)=""/106, 0x6a}, {&(0x7f00000003c0)=""/243, 0xf3}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x6, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000015c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x40000, 0x8, 0x1, 0x10000, 0x0, 0x0, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0x9, 0x5, 0x8, 0x4, 0x7, 0x99, 0x8000, 0x6, 0xae, 0xb5, 0x8000, 0xb6a3, 0x7, 0x7, 0x2, 0xfffffffffffffff8, 0xf7a, 0xfffffffffffffff7, 0x8, 0x1, 0x2639, 0x0, 0xff, 0x22, 0x9, 0xe35, 0x0, 0x0, 0x2, @perf_config_ext={0x7f, 0x1000}, 0x11001, 0x7, 0x0, 0x7, 0x1, 0xe5, 0x3edf}, r1, 0x6, r0, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0004000000100000cc000000490b0000ec03000001000000000000000000000000200000002000000004000000000000e95dbe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000011a00)="0000000000000000000000000000000000000000000000000000000074800000ed41000000040000e95dbe5ae95dbe5ae95dbe5a00000000000005000200000000000800000000000af301000400000000000000000000000100000023", 0x5d, 0x10860}], 0x0, &(0x7f0000012f00)) open$dir(&(0x7f0000000e40)='./file0//ile0\x00', 0xc240, 0x0) truncate(&(0x7f0000000440)='./file0//ile0\x00', 0xffff) 2018/04/20 00:52:11 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40802, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) write$evdev(r1, &(0x7f0000037fe8)=[{}], 0x18) sendfile(r1, r1, &(0x7f0000000040), 0x7fc) 2018/04/20 00:52:11 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40802, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) write$evdev(r1, &(0x7f0000037fe8)=[{}], 0x18) sendfile(r1, r1, &(0x7f0000000040), 0x7fc) 2018/04/20 00:52:11 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002380)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000002340)={&(0x7f0000001000)=@ipv6_newroute={0x24, 0x18, 0x401, 0x0, 0x0, {0xa, 0x34}, [@RTA_IIF={0x8, 0x1}]}, 0x24}, 0x1}, 0x0) 2018/04/20 00:52:11 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="a8", 0x1}], 0x1, 0x0) fallocate(r0, 0x0, 0x0, 0x0) syz_open_dev$random(&(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) 2018/04/20 00:52:11 executing program 1: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={[{@quiet='quiet', 0x2c}, {@discard='discard', 0x2c}, {@codepage={'codepage', 0x3d}, 0x2c}]}) 2018/04/20 00:52:11 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, &(0x7f0000000180)) chdir(&(0x7f0000f95000)='./file0\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) 2018/04/20 00:52:11 executing program 6: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) sendto$ax25(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000040)={0x3, {"65a21c61a839d6"}, 0x6}, 0x10) preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/73, 0x49}, {&(0x7f00000001c0)=""/39, 0x27}, {&(0x7f0000000340)=""/106, 0x6a}, {&(0x7f00000003c0)=""/243, 0xf3}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x6, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000015c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x40000, 0x8, 0x1, 0x10000, 0x0, 0x0, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0x9, 0x5, 0x8, 0x4, 0x7, 0x99, 0x8000, 0x6, 0xae, 0xb5, 0x8000, 0xb6a3, 0x7, 0x7, 0x2, 0xfffffffffffffff8, 0xf7a, 0xfffffffffffffff7, 0x8, 0x1, 0x2639, 0x0, 0xff, 0x22, 0x9, 0xe35, 0x0, 0x0, 0x2, @perf_config_ext={0x7f, 0x1000}, 0x11001, 0x7, 0x0, 0x7, 0x1, 0xe5, 0x3edf}, r1, 0x6, r0, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0004000000100000cc000000490b0000ec03000001000000000000000000000000200000002000000004000000000000e95dbe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000011a00)="0000000000000000000000000000000000000000000000000000000074800000ed41000000040000e95dbe5ae95dbe5ae95dbe5a00000000000005000200000000000800000000000af301000400000000000000000000000100000023", 0x5d, 0x10860}], 0x0, &(0x7f0000012f00)) open$dir(&(0x7f0000000e40)='./file0//ile0\x00', 0xc240, 0x0) truncate(&(0x7f0000000440)='./file0//ile0\x00', 0xffff) 2018/04/20 00:52:11 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="a8", 0x1}], 0x1, 0x0) fallocate(r0, 0x0, 0x0, 0x0) syz_open_dev$random(&(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) 2018/04/20 00:52:11 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) sendto$ax25(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000040)={0x3, {"65a21c61a839d6"}, 0x6}, 0x10) preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/73, 0x49}, {&(0x7f00000001c0)=""/39, 0x27}, {&(0x7f0000000340)=""/106, 0x6a}, {&(0x7f00000003c0)=""/243, 0xf3}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x6, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000015c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x40000, 0x8, 0x1, 0x10000, 0x0, 0x0, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0x9, 0x5, 0x8, 0x4, 0x7, 0x99, 0x8000, 0x6, 0xae, 0xb5, 0x8000, 0xb6a3, 0x7, 0x7, 0x2, 0xfffffffffffffff8, 0xf7a, 0xfffffffffffffff7, 0x8, 0x1, 0x2639, 0x0, 0xff, 0x22, 0x9, 0xe35, 0x0, 0x0, 0x2, @perf_config_ext={0x7f, 0x1000}, 0x11001, 0x7, 0x0, 0x7, 0x1, 0xe5, 0x3edf}, r1, 0x6, r0, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0004000000100000cc000000490b0000ec03000001000000000000000000000000200000002000000004000000000000e95dbe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000011a00)="0000000000000000000000000000000000000000000000000000000074800000ed41000000040000e95dbe5ae95dbe5ae95dbe5a00000000000005000200000000000800000000000af301000400000000000000000000000100000023", 0x5d, 0x10860}], 0x0, &(0x7f0000012f00)) open$dir(&(0x7f0000000e40)='./file0//ile0\x00', 0xc240, 0x0) truncate(&(0x7f0000000440)='./file0//ile0\x00', 0xffff) 2018/04/20 00:52:11 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) sendto$ax25(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000040)={0x3, {"65a21c61a839d6"}, 0x6}, 0x10) preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/73, 0x49}, {&(0x7f00000001c0)=""/39, 0x27}, {&(0x7f0000000340)=""/106, 0x6a}, {&(0x7f00000003c0)=""/243, 0xf3}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x6, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000015c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x40000, 0x8, 0x1, 0x10000, 0x0, 0x0, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0x9, 0x5, 0x8, 0x4, 0x7, 0x99, 0x8000, 0x6, 0xae, 0xb5, 0x8000, 0xb6a3, 0x7, 0x7, 0x2, 0xfffffffffffffff8, 0xf7a, 0xfffffffffffffff7, 0x8, 0x1, 0x2639, 0x0, 0xff, 0x22, 0x9, 0xe35, 0x0, 0x0, 0x2, @perf_config_ext={0x7f, 0x1000}, 0x11001, 0x7, 0x0, 0x7, 0x1, 0xe5, 0x3edf}, r1, 0x6, r0, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0004000000100000cc000000490b0000ec03000001000000000000000000000000200000002000000004000000000000e95dbe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000011a00)="0000000000000000000000000000000000000000000000000000000074800000ed41000000040000e95dbe5ae95dbe5ae95dbe5a00000000000005000200000000000800000000000af301000400000000000000000000000100000023", 0x5d, 0x10860}], 0x0, &(0x7f0000012f00)) open$dir(&(0x7f0000000e40)='./file0//ile0\x00', 0xc240, 0x0) truncate(&(0x7f0000000440)='./file0//ile0\x00', 0xffff) [ 79.182610] FAT-fs (loop1): Unrecognized mount option "codepage=" or missing value 2018/04/20 00:52:11 executing program 1: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={[{@quiet='quiet', 0x2c}, {@discard='discard', 0x2c}, {@codepage={'codepage', 0x3d}, 0x2c}]}) [ 79.252589] FAT-fs (loop1): Unrecognized mount option "codepage=" or missing value [ 79.314896] IPVS: Creating netns size=2536 id=18 [ 79.323241] FAT-fs (loop1): Unrecognized mount option "codepage=" or missing value 2018/04/20 00:52:11 executing program 1: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={[{@quiet='quiet', 0x2c}, {@discard='discard', 0x2c}, {@codepage={'codepage', 0x3d}, 0x2c}]}) [ 79.426555] FAT-fs (loop1): Unrecognized mount option "codepage=" or missing value [ 79.449812] IPVS: Creating netns size=2536 id=19 [ 79.458472] EXT4-fs (loop7): bad geometry: block count 4096 exceeds size of device (132 blocks) [ 79.613200] EXT4-fs (loop5): bad geometry: block count 4096 exceeds size of device (132 blocks) [ 79.626040] IPVS: Creating netns size=2536 id=20 [ 79.715490] EXT4-fs (loop6): bad geometry: block count 4096 exceeds size of device (132 blocks) [ 79.750159] IPVS: Creating netns size=2536 id=21 [ 79.867649] EXT4-fs (loop0): bad geometry: block count 4096 exceeds size of device (132 blocks) [ 79.880948] IPVS: Creating netns size=2536 id=22 2018/04/20 00:52:12 executing program 1: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={[{@quiet='quiet', 0x2c}, {@discard='discard', 0x2c}, {@codepage={'codepage', 0x3d}, 0x2c}]}) 2018/04/20 00:52:12 executing program 7: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) sendto$ax25(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000040)={0x3, {"65a21c61a839d6"}, 0x6}, 0x10) preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/73, 0x49}, {&(0x7f00000001c0)=""/39, 0x27}, {&(0x7f0000000340)=""/106, 0x6a}, {&(0x7f00000003c0)=""/243, 0xf3}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x6, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000015c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x40000, 0x8, 0x1, 0x10000, 0x0, 0x0, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0x9, 0x5, 0x8, 0x4, 0x7, 0x99, 0x8000, 0x6, 0xae, 0xb5, 0x8000, 0xb6a3, 0x7, 0x7, 0x2, 0xfffffffffffffff8, 0xf7a, 0xfffffffffffffff7, 0x8, 0x1, 0x2639, 0x0, 0xff, 0x22, 0x9, 0xe35, 0x0, 0x0, 0x2, @perf_config_ext={0x7f, 0x1000}, 0x11001, 0x7, 0x0, 0x7, 0x1, 0xe5, 0x3edf}, r1, 0x6, r0, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0004000000100000cc000000490b0000ec03000001000000000000000000000000200000002000000004000000000000e95dbe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000011a00)="0000000000000000000000000000000000000000000000000000000074800000ed41000000040000e95dbe5ae95dbe5ae95dbe5a00000000000005000200000000000800000000000af301000400000000000000000000000100000023", 0x5d, 0x10860}], 0x0, &(0x7f0000012f00)) open$dir(&(0x7f0000000e40)='./file0//ile0\x00', 0xc240, 0x0) truncate(&(0x7f0000000440)='./file0//ile0\x00', 0xffff) 2018/04/20 00:52:12 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40802, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) write$evdev(r1, &(0x7f0000037fe8)=[{}], 0x18) sendfile(r1, r1, &(0x7f0000000040), 0x7fc) 2018/04/20 00:52:12 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) sendto$ax25(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000040)={0x3, {"65a21c61a839d6"}, 0x6}, 0x10) preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/73, 0x49}, {&(0x7f00000001c0)=""/39, 0x27}, {&(0x7f0000000340)=""/106, 0x6a}, {&(0x7f00000003c0)=""/243, 0xf3}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x6, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000015c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x40000, 0x8, 0x1, 0x10000, 0x0, 0x0, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0x9, 0x5, 0x8, 0x4, 0x7, 0x99, 0x8000, 0x6, 0xae, 0xb5, 0x8000, 0xb6a3, 0x7, 0x7, 0x2, 0xfffffffffffffff8, 0xf7a, 0xfffffffffffffff7, 0x8, 0x1, 0x2639, 0x0, 0xff, 0x22, 0x9, 0xe35, 0x0, 0x0, 0x2, @perf_config_ext={0x7f, 0x1000}, 0x11001, 0x7, 0x0, 0x7, 0x1, 0xe5, 0x3edf}, r1, 0x6, r0, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0004000000100000cc000000490b0000ec03000001000000000000000000000000200000002000000004000000000000e95dbe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000011a00)="0000000000000000000000000000000000000000000000000000000074800000ed41000000040000e95dbe5ae95dbe5ae95dbe5a00000000000005000200000000000800000000000af301000400000000000000000000000100000023", 0x5d, 0x10860}], 0x0, &(0x7f0000012f00)) open$dir(&(0x7f0000000e40)='./file0//ile0\x00', 0xc240, 0x0) truncate(&(0x7f0000000440)='./file0//ile0\x00', 0xffff) 2018/04/20 00:52:12 executing program 6: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) sendto$ax25(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000040)={0x3, {"65a21c61a839d6"}, 0x6}, 0x10) preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/73, 0x49}, {&(0x7f00000001c0)=""/39, 0x27}, {&(0x7f0000000340)=""/106, 0x6a}, {&(0x7f00000003c0)=""/243, 0xf3}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x6, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000015c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x40000, 0x8, 0x1, 0x10000, 0x0, 0x0, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0x9, 0x5, 0x8, 0x4, 0x7, 0x99, 0x8000, 0x6, 0xae, 0xb5, 0x8000, 0xb6a3, 0x7, 0x7, 0x2, 0xfffffffffffffff8, 0xf7a, 0xfffffffffffffff7, 0x8, 0x1, 0x2639, 0x0, 0xff, 0x22, 0x9, 0xe35, 0x0, 0x0, 0x2, @perf_config_ext={0x7f, 0x1000}, 0x11001, 0x7, 0x0, 0x7, 0x1, 0xe5, 0x3edf}, r1, 0x6, r0, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0004000000100000cc000000490b0000ec03000001000000000000000000000000200000002000000004000000000000e95dbe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000011a00)="0000000000000000000000000000000000000000000000000000000074800000ed41000000040000e95dbe5ae95dbe5ae95dbe5a00000000000005000200000000000800000000000af301000400000000000000000000000100000023", 0x5d, 0x10860}], 0x0, &(0x7f0000012f00)) open$dir(&(0x7f0000000e40)='./file0//ile0\x00', 0xc240, 0x0) truncate(&(0x7f0000000440)='./file0//ile0\x00', 0xffff) 2018/04/20 00:52:12 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) sendto$ax25(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000040)={0x3, {"65a21c61a839d6"}, 0x6}, 0x10) preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/73, 0x49}, {&(0x7f00000001c0)=""/39, 0x27}, {&(0x7f0000000340)=""/106, 0x6a}, {&(0x7f00000003c0)=""/243, 0xf3}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x6, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000015c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x40000, 0x8, 0x1, 0x10000, 0x0, 0x0, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0x9, 0x5, 0x8, 0x4, 0x7, 0x99, 0x8000, 0x6, 0xae, 0xb5, 0x8000, 0xb6a3, 0x7, 0x7, 0x2, 0xfffffffffffffff8, 0xf7a, 0xfffffffffffffff7, 0x8, 0x1, 0x2639, 0x0, 0xff, 0x22, 0x9, 0xe35, 0x0, 0x0, 0x2, @perf_config_ext={0x7f, 0x1000}, 0x11001, 0x7, 0x0, 0x7, 0x1, 0xe5, 0x3edf}, r1, 0x6, r0, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0004000000100000cc000000490b0000ec03000001000000000000000000000000200000002000000004000000000000e95dbe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000011a00)="0000000000000000000000000000000000000000000000000000000074800000ed41000000040000e95dbe5ae95dbe5ae95dbe5a00000000000005000200000000000800000000000af301000400000000000000000000000100000023", 0x5d, 0x10860}], 0x0, &(0x7f0000012f00)) open$dir(&(0x7f0000000e40)='./file0//ile0\x00', 0xc240, 0x0) truncate(&(0x7f0000000440)='./file0//ile0\x00', 0xffff) 2018/04/20 00:52:12 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40802, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) write$evdev(r1, &(0x7f0000037fe8)=[{}], 0x18) sendfile(r1, r1, &(0x7f0000000040), 0x7fc) 2018/04/20 00:52:12 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) sendto$ax25(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000040)={0x3, {"65a21c61a839d6"}, 0x6}, 0x10) preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/73, 0x49}, {&(0x7f00000001c0)=""/39, 0x27}, {&(0x7f0000000340)=""/106, 0x6a}, {&(0x7f00000003c0)=""/243, 0xf3}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x6, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000015c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x40000, 0x8, 0x1, 0x10000, 0x0, 0x0, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0x9, 0x5, 0x8, 0x4, 0x7, 0x99, 0x8000, 0x6, 0xae, 0xb5, 0x8000, 0xb6a3, 0x7, 0x7, 0x2, 0xfffffffffffffff8, 0xf7a, 0xfffffffffffffff7, 0x8, 0x1, 0x2639, 0x0, 0xff, 0x22, 0x9, 0xe35, 0x0, 0x0, 0x2, @perf_config_ext={0x7f, 0x1000}, 0x11001, 0x7, 0x0, 0x7, 0x1, 0xe5, 0x3edf}, r1, 0x6, r0, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0004000000100000cc000000490b0000ec03000001000000000000000000000000200000002000000004000000000000e95dbe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000011a00)="0000000000000000000000000000000000000000000000000000000074800000ed41000000040000e95dbe5ae95dbe5ae95dbe5a00000000000005000200000000000800000000000af301000400000000000000000000000100000023", 0x5d, 0x10860}], 0x0, &(0x7f0000012f00)) open$dir(&(0x7f0000000e40)='./file0//ile0\x00', 0xc240, 0x0) truncate(&(0x7f0000000440)='./file0//ile0\x00', 0xffff) [ 79.929632] EXT4-fs (loop4): bad geometry: block count 4096 exceeds size of device (132 blocks) 2018/04/20 00:52:12 executing program 1: sync_file_range(0xffffffffffffffff, 0xffffffff00000000, 0x0, 0x0) [ 80.000479] FAT-fs (loop1): Unrecognized mount option "codepage=" or missing value 2018/04/20 00:52:12 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)) flock(r0, 0x8) 2018/04/20 00:52:12 executing program 1: socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) close(r0) 2018/04/20 00:52:12 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40802, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) write$evdev(r1, &(0x7f0000037fe8)=[{}], 0x18) sendfile(r1, r1, &(0x7f0000000040), 0x7fc) 2018/04/20 00:52:12 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40802, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) write$evdev(r1, &(0x7f0000037fe8)=[{}], 0x18) sendfile(r1, r1, &(0x7f0000000040), 0x7fc) [ 80.617926] IPVS: Creating netns size=2536 id=23 [ 80.706019] EXT4-fs (loop6): bad geometry: block count 4096 exceeds size of device (132 blocks) [ 80.716984] IPVS: Creating netns size=2536 id=24 2018/04/20 00:52:13 executing program 6: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) sendto$ax25(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000040)={0x3, {"65a21c61a839d6"}, 0x6}, 0x10) preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/73, 0x49}, {&(0x7f00000001c0)=""/39, 0x27}, {&(0x7f0000000340)=""/106, 0x6a}, {&(0x7f00000003c0)=""/243, 0xf3}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x6, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000015c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x40000, 0x8, 0x1, 0x10000, 0x0, 0x0, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0x9, 0x5, 0x8, 0x4, 0x7, 0x99, 0x8000, 0x6, 0xae, 0xb5, 0x8000, 0xb6a3, 0x7, 0x7, 0x2, 0xfffffffffffffff8, 0xf7a, 0xfffffffffffffff7, 0x8, 0x1, 0x2639, 0x0, 0xff, 0x22, 0x9, 0xe35, 0x0, 0x0, 0x2, @perf_config_ext={0x7f, 0x1000}, 0x11001, 0x7, 0x0, 0x7, 0x1, 0xe5, 0x3edf}, r1, 0x6, r0, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0004000000100000cc000000490b0000ec03000001000000000000000000000000200000002000000004000000000000e95dbe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000011a00)="0000000000000000000000000000000000000000000000000000000074800000ed41000000040000e95dbe5ae95dbe5ae95dbe5a00000000000005000200000000000800000000000af301000400000000000000000000000100000023", 0x5d, 0x10860}], 0x0, &(0x7f0000012f00)) open$dir(&(0x7f0000000e40)='./file0//ile0\x00', 0xc240, 0x0) truncate(&(0x7f0000000440)='./file0//ile0\x00', 0xffff) [ 80.823202] EXT4-fs (loop0): bad geometry: block count 4096 exceeds size of device (132 blocks) [ 80.833235] IPVS: Creating netns size=2536 id=25 [ 80.840610] EXT4-fs (loop5): bad geometry: block count 4096 exceeds size of device (132 blocks) [ 80.858439] EXT4-fs (loop7): bad geometry: block count 4096 exceeds size of device (132 blocks) 2018/04/20 00:52:13 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) sendto$ax25(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000040)={0x3, {"65a21c61a839d6"}, 0x6}, 0x10) preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/73, 0x49}, {&(0x7f00000001c0)=""/39, 0x27}, {&(0x7f0000000340)=""/106, 0x6a}, {&(0x7f00000003c0)=""/243, 0xf3}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x6, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000015c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x40000, 0x8, 0x1, 0x10000, 0x0, 0x0, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0x9, 0x5, 0x8, 0x4, 0x7, 0x99, 0x8000, 0x6, 0xae, 0xb5, 0x8000, 0xb6a3, 0x7, 0x7, 0x2, 0xfffffffffffffff8, 0xf7a, 0xfffffffffffffff7, 0x8, 0x1, 0x2639, 0x0, 0xff, 0x22, 0x9, 0xe35, 0x0, 0x0, 0x2, @perf_config_ext={0x7f, 0x1000}, 0x11001, 0x7, 0x0, 0x7, 0x1, 0xe5, 0x3edf}, r1, 0x6, r0, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0004000000100000cc000000490b0000ec03000001000000000000000000000000200000002000000004000000000000e95dbe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000011a00)="0000000000000000000000000000000000000000000000000000000074800000ed41000000040000e95dbe5ae95dbe5ae95dbe5a00000000000005000200000000000800000000000af301000400000000000000000000000100000023", 0x5d, 0x10860}], 0x0, &(0x7f0000012f00)) open$dir(&(0x7f0000000e40)='./file0//ile0\x00', 0xc240, 0x0) truncate(&(0x7f0000000440)='./file0//ile0\x00', 0xffff) [ 80.872995] EXT4-fs (loop4): bad geometry: block count 4096 exceeds size of device (132 blocks) [ 80.885980] IPVS: Creating netns size=2536 id=26 2018/04/20 00:52:13 executing program 1: socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) close(r0) 2018/04/20 00:52:13 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) sendto$ax25(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000040)={0x3, {"65a21c61a839d6"}, 0x6}, 0x10) preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/73, 0x49}, {&(0x7f00000001c0)=""/39, 0x27}, {&(0x7f0000000340)=""/106, 0x6a}, {&(0x7f00000003c0)=""/243, 0xf3}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x6, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000015c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x40000, 0x8, 0x1, 0x10000, 0x0, 0x0, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0x9, 0x5, 0x8, 0x4, 0x7, 0x99, 0x8000, 0x6, 0xae, 0xb5, 0x8000, 0xb6a3, 0x7, 0x7, 0x2, 0xfffffffffffffff8, 0xf7a, 0xfffffffffffffff7, 0x8, 0x1, 0x2639, 0x0, 0xff, 0x22, 0x9, 0xe35, 0x0, 0x0, 0x2, @perf_config_ext={0x7f, 0x1000}, 0x11001, 0x7, 0x0, 0x7, 0x1, 0xe5, 0x3edf}, r1, 0x6, r0, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0004000000100000cc000000490b0000ec03000001000000000000000000000000200000002000000004000000000000e95dbe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000011a00)="0000000000000000000000000000000000000000000000000000000074800000ed41000000040000e95dbe5ae95dbe5ae95dbe5a00000000000005000200000000000800000000000af301000400000000000000000000000100000023", 0x5d, 0x10860}], 0x0, &(0x7f0000012f00)) open$dir(&(0x7f0000000e40)='./file0//ile0\x00', 0xc240, 0x0) truncate(&(0x7f0000000440)='./file0//ile0\x00', 0xffff) 2018/04/20 00:52:13 executing program 7: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) sendto$ax25(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000040)={0x3, {"65a21c61a839d6"}, 0x6}, 0x10) preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/73, 0x49}, {&(0x7f00000001c0)=""/39, 0x27}, {&(0x7f0000000340)=""/106, 0x6a}, {&(0x7f00000003c0)=""/243, 0xf3}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x6, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000015c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x40000, 0x8, 0x1, 0x10000, 0x0, 0x0, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0x9, 0x5, 0x8, 0x4, 0x7, 0x99, 0x8000, 0x6, 0xae, 0xb5, 0x8000, 0xb6a3, 0x7, 0x7, 0x2, 0xfffffffffffffff8, 0xf7a, 0xfffffffffffffff7, 0x8, 0x1, 0x2639, 0x0, 0xff, 0x22, 0x9, 0xe35, 0x0, 0x0, 0x2, @perf_config_ext={0x7f, 0x1000}, 0x11001, 0x7, 0x0, 0x7, 0x1, 0xe5, 0x3edf}, r1, 0x6, r0, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0004000000100000cc000000490b0000ec03000001000000000000000000000000200000002000000004000000000000e95dbe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000011a00)="0000000000000000000000000000000000000000000000000000000074800000ed41000000040000e95dbe5ae95dbe5ae95dbe5a00000000000005000200000000000800000000000af301000400000000000000000000000100000023", 0x5d, 0x10860}], 0x0, &(0x7f0000012f00)) open$dir(&(0x7f0000000e40)='./file0//ile0\x00', 0xc240, 0x0) truncate(&(0x7f0000000440)='./file0//ile0\x00', 0xffff) [ 80.997526] IPVS: Creating netns size=2536 id=27 2018/04/20 00:52:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000ab9ff4)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6) 2018/04/20 00:52:13 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) sendto$ax25(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000040)={0x3, {"65a21c61a839d6"}, 0x6}, 0x10) preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/73, 0x49}, {&(0x7f00000001c0)=""/39, 0x27}, {&(0x7f0000000340)=""/106, 0x6a}, {&(0x7f00000003c0)=""/243, 0xf3}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x6, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000015c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x40000, 0x8, 0x1, 0x10000, 0x0, 0x0, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0x9, 0x5, 0x8, 0x4, 0x7, 0x99, 0x8000, 0x6, 0xae, 0xb5, 0x8000, 0xb6a3, 0x7, 0x7, 0x2, 0xfffffffffffffff8, 0xf7a, 0xfffffffffffffff7, 0x8, 0x1, 0x2639, 0x0, 0xff, 0x22, 0x9, 0xe35, 0x0, 0x0, 0x2, @perf_config_ext={0x7f, 0x1000}, 0x11001, 0x7, 0x0, 0x7, 0x1, 0xe5, 0x3edf}, r1, 0x6, r0, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0004000000100000cc000000490b0000ec03000001000000000000000000000000200000002000000004000000000000e95dbe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000011a00)="0000000000000000000000000000000000000000000000000000000074800000ed41000000040000e95dbe5ae95dbe5ae95dbe5a00000000000005000200000000000800000000000af301000400000000000000000000000100000023", 0x5d, 0x10860}], 0x0, &(0x7f0000012f00)) open$dir(&(0x7f0000000e40)='./file0//ile0\x00', 0xc240, 0x0) truncate(&(0x7f0000000440)='./file0//ile0\x00', 0xffff) 2018/04/20 00:52:13 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) read(r0, &(0x7f0000000440)=""/4096, 0x1000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001480)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000400)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f00006ec000/0x1000)=nil, 0x1000}) 2018/04/20 00:52:13 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=@migrate={0xe4, 0x21, 0x221, 0x0, 0x0, {{@in=@broadcast=0xffffffff, @in6=@loopback={0x0, 0x1}}}, [@user_kmaddress={0x2c, 0x13, {@in6=@loopback={0x0, 0x1}, @in=@rand_addr}}, @policy_type={0xc, 0x10, {0xa}}, @migrate={0x5c, 0x11, [{@in6, @in=@multicast2=0xe0000002}, {@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@remote={0xac, 0x14, 0x14, 0xbb}}]}]}, 0xe4}, 0x1}, 0x0) 2018/04/20 00:52:13 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f00008d1000), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x3}, 0x1c) 2018/04/20 00:52:13 executing program 2: open$dir(&(0x7f0000000000)='./file0\x00', 0x1fffe, 0x0) r0 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) write(r0, &(0x7f0000001300)="d8", 0x1) sendfile(r0, r0, &(0x7f0000000040), 0x7527fb71fffffffe) r1 = open(&(0x7f0000000080)='./file0\x00', 0x4009, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) [ 81.612068] EXT4-fs (loop6): bad geometry: block count 4096 exceeds size of device (132 blocks) [ 81.788286] EXT4-fs (loop5): bad geometry: block count 4096 exceeds size of device (132 blocks) [ 81.850451] EXT4-fs (loop0): bad geometry: block count 4096 exceeds size of device (132 blocks) [ 81.866739] EXT4-fs (loop7): bad geometry: block count 4096 exceeds size of device (132 blocks) [ 81.925187] EXT4-fs (loop4): bad geometry: block count 4096 exceeds size of device (132 blocks) [ 83.635322] pktgen: kernel_thread() failed for cpu 0 [ 83.640473] pktgen: Cannot create thread for cpu 0 (-4) [ 83.645828] pktgen: kernel_thread() failed for cpu 1 [ 83.650942] pktgen: Cannot create thread for cpu 1 (-4) [ 83.656282] pktgen: Initialization failed for all threads [ 83.789784] pktgen: kernel_thread() failed for cpu 0 [ 83.795000] pktgen: Cannot create thread for cpu 0 (-4) [ 83.800434] pktgen: kernel_thread() failed for cpu 1 [ 83.805605] pktgen: Cannot create thread for cpu 1 (-4) [ 83.810968] pktgen: Initialization failed for all threads [ 84.059719] pktgen: kernel_thread() failed for cpu 0 [ 84.064853] pktgen: Cannot create thread for cpu 0 (-4) [ 84.070451] pktgen: kernel_thread() failed for cpu 1 [ 84.075547] pktgen: Cannot create thread for cpu 1 (-4) [ 84.081015] pktgen: Initialization failed for all threads [ 84.214904] pktgen: kernel_thread() failed for cpu 0 [ 84.220116] pktgen: Cannot create thread for cpu 0 (-4) [ 84.225559] pktgen: kernel_thread() failed for cpu 1 [ 84.230794] pktgen: Cannot create thread for cpu 1 (-4) [ 84.236160] pktgen: Initialization failed for all threads [ 84.455901] pktgen: kernel_thread() failed for cpu 0 [ 84.461011] pktgen: Cannot create thread for cpu 0 (-4) [ 84.466686] pktgen: kernel_thread() failed for cpu 1 [ 84.471780] pktgen: Cannot create thread for cpu 1 (-4) [ 84.477698] pktgen: Initialization failed for all threads 2018/04/20 00:52:16 executing program 1: socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) close(r0) 2018/04/20 00:52:16 executing program 6: r0 = gettid() rt_sigtimedwait(&(0x7f0000009ff8)={0xffffffffffff880a}, &(0x7f0000002000), &(0x7f0000010ff0)={0x1}, 0x8) r1 = memfd_create(&(0x7f0000000080)="769cfb85ba903a48d4161b3000", 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x2012, r1, 0x0) rt_sigqueueinfo(r0, 0x4, &(0x7f000000f000)={0x0, 0x0, 0x80000001}) 2018/04/20 00:52:16 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000321000)) 2018/04/20 00:52:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x2, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10) r2 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) close(r2) 2018/04/20 00:52:16 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) dup2(r0, r0) 2018/04/20 00:52:16 executing program 0: r0 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000a26000)=0x100, 0x4) 2018/04/20 00:52:16 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000010a000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5435, &(0x7f0000001000)) 2018/04/20 00:52:16 executing program 4: r0 = socket$inet(0x2, 0x8000000000003, 0x33) sendmsg(r0, &(0x7f00000008c0)={&(0x7f0000000080)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000000140)}, 0x0) 2018/04/20 00:52:16 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) dup2(r0, r0) 2018/04/20 00:52:17 executing program 0: ioprio_set$pid(0x2, 0xffffffffffffffff, 0x0) [ 84.613374] device syz_tun entered promiscuous mode [ 84.761464] device syz_tun left promiscuous mode 2018/04/20 00:52:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f0000000400)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x16}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000007940)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000007900)={&(0x7f0000000540)=@bridge_dellink={0x20, 0x11, 0x4, 0x0, 0x0, {0x7}}, 0x20}, 0x1}, 0x0) 2018/04/20 00:52:17 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) dup2(r0, r0) 2018/04/20 00:52:17 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000180)='..', 0x0, 0x0) getdents64(r1, &(0x7f0000000080)=""/42, 0x2a) getdents64(r1, &(0x7f00000001c0)=""/127, 0x7f) 2018/04/20 00:52:17 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x2, 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) 2018/04/20 00:52:17 executing program 0: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000100)="240000001a0025f0006bb404feff141c020bff6eae12e2853316e3ba76f8cd0ff1b387f3", 0x24) 2018/04/20 00:52:17 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x2, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10) r2 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) close(r2) 2018/04/20 00:52:17 executing program 1: socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) close(r0) 2018/04/20 00:52:17 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000cd6000)={@remote={0xfe, 0x80}}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f0000787ff3)='net/anycast6\x00') preadv(r2, &(0x7f000055ff80)=[{&(0x7f00002f0f89)=""/204, 0xcc}], 0x1, 0x3e) 2018/04/20 00:52:17 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) dup2(r0, r0) 2018/04/20 00:52:17 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000180)='..', 0x0, 0x0) getdents64(r1, &(0x7f0000000080)=""/42, 0x2a) getdents64(r1, &(0x7f00000001c0)=""/127, 0x7f) 2018/04/20 00:52:17 executing program 5: openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x1fffe, 0x0) syncfs(r0) [ 85.477124] device syz_tun entered promiscuous mode 2018/04/20 00:52:17 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000180)='..', 0x0, 0x0) getdents64(r1, &(0x7f0000000080)=""/42, 0x2a) getdents64(r1, &(0x7f00000001c0)=""/127, 0x7f) 2018/04/20 00:52:17 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x2, 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) 2018/04/20 00:52:17 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000500)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b99d504c72dd07f8ad88f301e710", 0x1}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x0, &(0x7f0000000140)}) 2018/04/20 00:52:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f0000000400)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x16}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000007940)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000007900)={&(0x7f0000000540)=@bridge_dellink={0x20, 0x11, 0x4, 0x0, 0x0, {0x7}}, 0x20}, 0x1}, 0x0) 2018/04/20 00:52:17 executing program 6: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006f3ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x40045108, &(0x7f0000000040)) [ 85.504531] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 2018/04/20 00:52:17 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0xff) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000002540), &(0x7f0000002740)=0x40) 2018/04/20 00:52:17 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000180)='..', 0x0, 0x0) getdents64(r1, &(0x7f0000000080)=""/42, 0x2a) getdents64(r1, &(0x7f00000001c0)=""/127, 0x7f) 2018/04/20 00:52:17 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$peek(0x5, r1, &(0x7f0000002300)) 2018/04/20 00:52:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f0000000400)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x16}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000007940)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000007900)={&(0x7f0000000540)=@bridge_dellink={0x20, 0x11, 0x4, 0x0, 0x0, {0x7}}, 0x20}, 0x1}, 0x0) 2018/04/20 00:52:17 executing program 2: r0 = socket$inet(0x2, 0x3, 0x19) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000100)={0x5, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x26, &(0x7f00000037c0)={@multicast2=0xe0000002, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) [ 85.601878] device syz_tun left promiscuous mode 2018/04/20 00:52:18 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x2, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10) r2 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) close(r2) [ 85.694742] device syz_tun entered promiscuous mode [ 85.742337] device syz_tun left promiscuous mode 2018/04/20 00:52:18 executing program 0: mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f000010bff7)='configfs\x00', 0x0, &(0x7f0000a06000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x200000000003) ioctl$TIOCGSOFTCAR(r1, 0x5412, &(0x7f00000000c0)) 2018/04/20 00:52:18 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), 0x4) 2018/04/20 00:52:18 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x2, 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) 2018/04/20 00:52:18 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000040)="b63db85e1e8d020000fed2bc7018cebc9bc2feffffffffff0200000000000000aa1fae1a934a253fa5a300aaa3a0f373cdb1408a", 0x34) 2018/04/20 00:52:18 executing program 5: socketpair$unix(0x1, 0x4000000000005, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000140)=[{0x4}, {0x3}, {0x6}]}, 0x10) sendto$unix(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f000000dff8)=@abs, 0x6e) 2018/04/20 00:52:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f0000000400)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x16}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000007940)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000007900)={&(0x7f0000000540)=@bridge_dellink={0x20, 0x11, 0x4, 0x0, 0x0, {0x7}}, 0x20}, 0x1}, 0x0) 2018/04/20 00:52:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@exit_looper={0x630d}, @dead_binder_done={0x40086310}], 0x0, 0x0, &(0x7f0000000340)}) 2018/04/20 00:52:18 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x2, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10) r2 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) close(r2) 2018/04/20 00:52:18 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="01000006", 0x4) 2018/04/20 00:52:18 executing program 6: r0 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0xffffffffffffff3e) 2018/04/20 00:52:18 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x80045105) 2018/04/20 00:52:18 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x2, 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) 2018/04/20 00:52:18 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f00000019c0)=[{{&(0x7f0000000d80)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x80, &(0x7f0000000fc0), 0x0, &(0x7f0000001800)}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000002380)=[{{&(0x7f0000000140)=@hci, 0x434, &(0x7f0000001c40)=[{&(0x7f0000000440)=""/194, 0xc2}, {&(0x7f0000000300)=""/173, 0xad}], 0x2, &(0x7f00000001c0)=""/198, 0xfffffcf5}}, {{&(0x7f00000000c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000002300), 0x20000000000001ed, &(0x7f0000002340)=""/54, 0x36}}], 0x2, 0x0, &(0x7f0000002400)={0x77359400}) 2018/04/20 00:52:18 executing program 5: perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x70, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2018/04/20 00:52:18 executing program 4: seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x0, &(0x7f0000004fe8)}) 2018/04/20 00:52:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000002fe8)=[{0x1d, 0x0, 0x4000000000401}, {}, {0x6}]}, 0x10) r2 = dup(r1) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) [ 86.319131] device syz_tun entered promiscuous mode [ 86.323124] binder: 10995:11004 BC_DEAD_BINDER_DONE 0000000000000000 not found 2018/04/20 00:52:18 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600", 0xc3, 0x80003}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) 2018/04/20 00:52:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 2018/04/20 00:52:18 executing program 4: mkdir(&(0x7f0000014000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001effd)='/', r0, &(0x7f0000d06ff8)='./file0\x00') renameat2(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0/\x00', 0x2) 2018/04/20 00:52:18 executing program 5: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2018/04/20 00:52:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="390000001100090469000000810000000700004003000000450001070000001419001a0004202300070400000200000d0900100000f41e0000", 0x39}], 0x1) 2018/04/20 00:52:18 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) accept4$packet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x14, 0x0) 2018/04/20 00:52:18 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f00000019c0)=[{{&(0x7f0000000d80)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x80, &(0x7f0000000fc0), 0x0, &(0x7f0000001800)}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000002380)=[{{&(0x7f0000000140)=@hci, 0x434, &(0x7f0000001c40)=[{&(0x7f0000000440)=""/194, 0xc2}, {&(0x7f0000000300)=""/173, 0xad}], 0x2, &(0x7f00000001c0)=""/198, 0xfffffcf5}}, {{&(0x7f00000000c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000002300), 0x20000000000001ed, &(0x7f0000002340)=""/54, 0x36}}], 0x2, 0x0, &(0x7f0000002400)={0x77359400}) [ 86.487909] device syz_tun left promiscuous mode 2018/04/20 00:52:19 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f00000019c0)=[{{&(0x7f0000000d80)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x80, &(0x7f0000000fc0), 0x0, &(0x7f0000001800)}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000002380)=[{{&(0x7f0000000140)=@hci, 0x434, &(0x7f0000001c40)=[{&(0x7f0000000440)=""/194, 0xc2}, {&(0x7f0000000300)=""/173, 0xad}], 0x2, &(0x7f00000001c0)=""/198, 0xfffffcf5}}, {{&(0x7f00000000c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000002300), 0x20000000000001ed, &(0x7f0000002340)=""/54, 0x36}}], 0x2, 0x0, &(0x7f0000002400)={0x77359400}) 2018/04/20 00:52:19 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00002cb000)=0xd9e0, 0xff5e) write$binfmt_elf32(r1, &(0x7f0000000140)=ANY=[], 0x0) recvmsg(r0, &(0x7f0000001780)={&(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000016c0)=""/168, 0xa8}, 0x0) 2018/04/20 00:52:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0b7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000000c0)={0x0, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 'wrr\x00'}, 0x2c) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xbb7, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66733366617c00020401000270027000f8", 0x16, 0x400000000000000}], 0x0, &(0x7f0000000e80)=ANY=[]) mknod$loop(&(0x7f0000000140)='./file0/file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.events\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 2018/04/20 00:52:19 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="2900000018001980013d75241a0407210206e30067ffbd010a0000000800050000000200080000bf00", 0x29}], 0x1) 2018/04/20 00:52:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x5, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="09631040", @ANYBLOB="02"], 0x0, 0x0, &(0x7f0000000140)}) 2018/04/20 00:52:19 executing program 3: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2=0xe0000002, @loopback=0x7f000001, @multicast1=0xe0000001}, 0xc) dup3(r0, r1, 0x0) 2018/04/20 00:52:19 executing program 1: r0 = socket$inet(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg(r0, &(0x7f0000001540)={&(0x7f0000000400)=@ll={0x11, 0x6558, r1, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14, &(0x7f00000004c0)}, 0x0) 2018/04/20 00:52:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x400000000000486, &(0x7f0000000180)=""/24, &(0x7f0000e59000)=0x18) 2018/04/20 00:52:19 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="2900000018001980013d75241a0407210206e30067ffbd010a0000000800050000000200080000bf00", 0x29}], 0x1) [ 87.399030] binder: 11065:11081 BC_ACQUIRE_DONE u0000000000000002 no match [ 87.437391] FAT-fs (loop5): bogus number of reserved sectors [ 87.437395] FAT-fs (loop5): Can't find a valid FAT filesystem [ 87.463590] binder: BINDER_SET_CONTEXT_MGR already set [ 87.468901] binder: 11065:11094 ioctl 40046207 0 returned -16 [ 87.476111] binder: 11065:11094 BC_ACQUIRE_DONE u0000000000000002 no match [ 87.476124] binder_alloc: 11065: binder_alloc_buf, no vma [ 87.476142] binder: 11065:11081 transaction failed 29189/-3, size 40-8 line 3133 2018/04/20 00:52:19 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f00000019c0)=[{{&(0x7f0000000d80)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x80, &(0x7f0000000fc0), 0x0, &(0x7f0000001800)}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000002380)=[{{&(0x7f0000000140)=@hci, 0x434, &(0x7f0000001c40)=[{&(0x7f0000000440)=""/194, 0xc2}, {&(0x7f0000000300)=""/173, 0xad}], 0x2, &(0x7f00000001c0)=""/198, 0xfffffcf5}}, {{&(0x7f00000000c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000002300), 0x20000000000001ed, &(0x7f0000002340)=""/54, 0x36}}], 0x2, 0x0, &(0x7f0000002400)={0x77359400}) 2018/04/20 00:52:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0b7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000000c0)={0x0, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 'wrr\x00'}, 0x2c) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xbb7, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66733366617c00020401000270027000f8", 0x16, 0x400000000000000}], 0x0, &(0x7f0000000e80)=ANY=[]) mknod$loop(&(0x7f0000000140)='./file0/file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.events\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 87.505213] binder: undelivered TRANSACTION_ERROR: 29189 [ 87.511081] binder: release 11065:11081 transaction 7 out, still active [ 87.517928] FAT-fs (loop5): bogus number of reserved sectors [ 87.524588] FAT-fs (loop5): Can't find a valid FAT filesystem [ 87.530694] binder: unexpected work type, 4, not freed [ 87.536027] binder: undelivered TRANSACTION_COMPLETE [ 87.541241] binder: send failed reply for transaction 7, target dead 2018/04/20 00:52:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x5, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="09631040", @ANYBLOB="02"], 0x0, 0x0, &(0x7f0000000140)}) 2018/04/20 00:52:19 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00002cb000)=0xd9e0, 0xff5e) write$binfmt_elf32(r1, &(0x7f0000000140)=ANY=[], 0x0) recvmsg(r0, &(0x7f0000001780)={&(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000016c0)=""/168, 0xa8}, 0x0) 2018/04/20 00:52:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x400000000000486, &(0x7f0000000180)=""/24, &(0x7f0000e59000)=0x18) 2018/04/20 00:52:19 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000ff5ffc), 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000), 0x10) 2018/04/20 00:52:19 executing program 1: r0 = socket$inet(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg(r0, &(0x7f0000001540)={&(0x7f0000000400)=@ll={0x11, 0x6558, r1, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14, &(0x7f00000004c0)}, 0x0) 2018/04/20 00:52:19 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="2900000018001980013d75241a0407210206e30067ffbd010a0000000800050000000200080000bf00", 0x29}], 0x1) 2018/04/20 00:52:19 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00002cb000)=0xd9e0, 0xff5e) write$binfmt_elf32(r1, &(0x7f0000000140)=ANY=[], 0x0) recvmsg(r0, &(0x7f0000001780)={&(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000016c0)=""/168, 0xa8}, 0x0) 2018/04/20 00:52:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x400000000000486, &(0x7f0000000180)=""/24, &(0x7f0000e59000)=0x18) 2018/04/20 00:52:19 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="2900000018001980013d75241a0407210206e30067ffbd010a0000000800050000000200080000bf00", 0x29}], 0x1) 2018/04/20 00:52:19 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) dup2(0xffffffffffffffff, r0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x77e, 0x5}, &(0x7f0000000180)=0x8) dup(r0) 2018/04/20 00:52:20 executing program 1: r0 = socket$inet(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg(r0, &(0x7f0000001540)={&(0x7f0000000400)=@ll={0x11, 0x6558, r1, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14, &(0x7f00000004c0)}, 0x0) 2018/04/20 00:52:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x400000000000486, &(0x7f0000000180)=""/24, &(0x7f0000e59000)=0x18) [ 87.620245] FAT-fs (loop5): bogus number of reserved sectors [ 87.629405] FAT-fs (loop5): Can't find a valid FAT filesystem [ 87.636407] binder: 11105:11119 BC_ACQUIRE_DONE u0000000000000002 no match 2018/04/20 00:52:20 executing program 7: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) futex(&(0x7f000000cffc)=0x4, 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x4) 2018/04/20 00:52:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x5, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="09631040", @ANYBLOB="02"], 0x0, 0x0, &(0x7f0000000140)}) 2018/04/20 00:52:20 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x3, 0x53e, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10800, 0x144) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000080)={0x400}) unshare(0x40000000) 2018/04/20 00:52:20 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00002cb000)=0xd9e0, 0xff5e) write$binfmt_elf32(r1, &(0x7f0000000140)=ANY=[], 0x0) recvmsg(r0, &(0x7f0000001780)={&(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000016c0)=""/168, 0xa8}, 0x0) 2018/04/20 00:52:20 executing program 1: r0 = socket$inet(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg(r0, &(0x7f0000001540)={&(0x7f0000000400)=@ll={0x11, 0x6558, r1, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14, &(0x7f00000004c0)}, 0x0) [ 87.696191] binder: release 11105:11119 transaction 12 out, still active [ 87.720667] binder: unexpected work type, 4, not freed 2018/04/20 00:52:20 executing program 3: r0 = socket$nl_generic(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f00000026c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x80, &(0x7f0000001300), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000000000000000000000200000002000000"], 0x14}, 0x0) 2018/04/20 00:52:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x5, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="09631040", @ANYBLOB="02"], 0x0, 0x0, &(0x7f0000000140)}) [ 87.752020] binder: 11143:11147 BC_ACQUIRE_DONE u0000000000000002 no match 2018/04/20 00:52:20 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000006f40)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=[{0x10, 0x29}], 0x10}}], 0x2, 0x8000) 2018/04/20 00:52:20 executing program 3: r0 = socket$nl_generic(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f00000026c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x80, &(0x7f0000001300), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000000000000000000000200000002000000"], 0x14}, 0x0) [ 87.808972] binder: undelivered TRANSACTION_COMPLETE [ 87.813400] binder: BINDER_SET_CONTEXT_MGR already set [ 87.813407] binder: 11161:11162 ioctl 40046207 0 returned -16 [ 87.815038] binder_alloc: 11143: binder_alloc_buf, no vma [ 87.815060] binder: 11161:11162 transaction failed 29189/-3, size 40-8 line 3133 [ 87.897544] binder: send failed reply for transaction 12, target dead [ 87.904724] binder: undelivered TRANSACTION_ERROR: 29189 [ 87.910265] binder: release 11143:11147 transaction 16 out, still active [ 87.917292] binder: unexpected work type, 4, not freed [ 87.922577] binder: undelivered TRANSACTION_COMPLETE [ 87.927718] binder: send failed reply for transaction 16, target dead [ 87.929329] IPVS: Creating netns size=2536 id=28 [ 88.011010] IPVS: Creating netns size=2536 id=29 [ 88.065120] IPVS: Creating netns size=2536 id=30 2018/04/20 00:52:21 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) dup2(0xffffffffffffffff, r0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x77e, 0x5}, &(0x7f0000000180)=0x8) dup(r0) 2018/04/20 00:52:21 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x3, 0x53e, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10800, 0x144) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000080)={0x400}) unshare(0x40000000) 2018/04/20 00:52:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0b7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000000c0)={0x0, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 'wrr\x00'}, 0x2c) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xbb7, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66733366617c00020401000270027000f8", 0x16, 0x400000000000000}], 0x0, &(0x7f0000000e80)=ANY=[]) mknod$loop(&(0x7f0000000140)='./file0/file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.events\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 2018/04/20 00:52:21 executing program 7: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x3, 0x53e, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10800, 0x144) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000080)={0x400}) unshare(0x40000000) 2018/04/20 00:52:21 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r0) keyctl$read(0xb, r0, &(0x7f0000000000), 0x0) 2018/04/20 00:52:21 executing program 6: mkdir(&(0x7f0000639000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) 2018/04/20 00:52:21 executing program 3: r0 = socket$nl_generic(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f00000026c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x80, &(0x7f0000001300), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000000000000000000000200000002000000"], 0x14}, 0x0) 2018/04/20 00:52:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000000c0)={'veth1_to_bond\x00', {0x2, 0x0, @broadcast=0xffffffff}}) 2018/04/20 00:52:21 executing program 6: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x3, 0x53e, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10800, 0x144) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000080)={0x400}) unshare(0x40000000) 2018/04/20 00:52:21 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r0) keyctl$read(0xb, r0, &(0x7f0000000000), 0x0) 2018/04/20 00:52:21 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x3, 0x53e, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10800, 0x144) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000080)={0x400}) unshare(0x40000000) 2018/04/20 00:52:21 executing program 3: r0 = socket$nl_generic(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f00000026c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x80, &(0x7f0000001300), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000000000000000000000200000002000000"], 0x14}, 0x0) 2018/04/20 00:52:21 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r0) keyctl$read(0xb, r0, &(0x7f0000000000), 0x0) 2018/04/20 00:52:21 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000079fee)='/dev/input/event#\x00', 0x0, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) [ 88.898874] FAT-fs (loop5): bogus number of reserved sectors [ 88.914015] FAT-fs (loop5): Can't find a valid FAT filesystem 2018/04/20 00:52:21 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r0) keyctl$read(0xb, r0, &(0x7f0000000000), 0x0) 2018/04/20 00:52:21 executing program 2: r0 = memfd_create(&(0x7f00002ce000)="1a6465762f6b766d00", 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2012, r0, 0x0) pkey_mprotect(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000004000/0x4000)=nil, 0x4000, 0xe, 0xffffffffffffffff) [ 89.039961] IPVS: Creating netns size=2536 id=31 [ 89.127907] IPVS: Creating netns size=2536 id=32 [ 89.167480] IPVS: Creating netns size=2536 id=33 [ 89.232366] IPVS: Creating netns size=2536 id=34 [ 89.280429] IPVS: Creating netns size=2536 id=35 2018/04/20 00:52:21 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) dup2(0xffffffffffffffff, r0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x77e, 0x5}, &(0x7f0000000180)=0x8) dup(r0) 2018/04/20 00:52:21 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x3, 0x53e, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10800, 0x144) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000080)={0x400}) unshare(0x40000000) 2018/04/20 00:52:21 executing program 7: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x3, 0x53e, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10800, 0x144) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000080)={0x400}) unshare(0x40000000) 2018/04/20 00:52:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0b7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000000c0)={0x0, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 'wrr\x00'}, 0x2c) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xbb7, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66733366617c00020401000270027000f8", 0x16, 0x400000000000000}], 0x0, &(0x7f0000000e80)=ANY=[]) mknod$loop(&(0x7f0000000140)='./file0/file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.events\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 2018/04/20 00:52:21 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x3, 0x53e, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10800, 0x144) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000080)={0x400}) unshare(0x40000000) 2018/04/20 00:52:21 executing program 6: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x3, 0x53e, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10800, 0x144) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000080)={0x400}) unshare(0x40000000) 2018/04/20 00:52:21 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) sendto$inet(r0, &(0x7f0000000040), 0x7f40, 0x0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) 2018/04/20 00:52:21 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="50b4c5d939918f5f4032375bf880173a1c22951edb403a0ccb2cbb9ece17cd669313c15210c36cce52b5cefe87d541d511eb8591df48b3104758f7c9405b980440eadc265f40297c953059e7efbc88fb3cd00108bd41cacc4b2e3a95ef2a2a64f0e744d9ab4bdc75732cee1a92", 0x6d}], 0x1, &(0x7f0000000200)=ANY=[]}, 0x0) r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x890c, &(0x7f0000000100)={"62726964676530000200"}) 2018/04/20 00:52:21 executing program 2: mkdir(&(0x7f0000d90ff8)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff)) r0 = creat(&(0x7f0000939ff2)='./file0/file0\x00', 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mq_notify(r0, &(0x7f0000477fa0)={0x0, 0x0, 0x0, @thr={&(0x7f0000f94000), &(0x7f000054fff7)}}) 2018/04/20 00:52:21 executing program 2: mkdir(&(0x7f0000d90ff8)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff)) r0 = creat(&(0x7f0000939ff2)='./file0/file0\x00', 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mq_notify(r0, &(0x7f0000477fa0)={0x0, 0x0, 0x0, @thr={&(0x7f0000f94000), &(0x7f000054fff7)}}) [ 89.372957] FAT-fs (loop5): bogus number of reserved sectors [ 89.390911] FAT-fs (loop5): Can't find a valid FAT filesystem 2018/04/20 00:52:21 executing program 5: ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x8000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000cd8ff4)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/04/20 00:52:21 executing program 2: mkdir(&(0x7f0000d90ff8)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff)) r0 = creat(&(0x7f0000939ff2)='./file0/file0\x00', 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mq_notify(r0, &(0x7f0000477fa0)={0x0, 0x0, 0x0, @thr={&(0x7f0000f94000), &(0x7f000054fff7)}}) 2018/04/20 00:52:21 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x84}, {0x6, 0x0, 0x0, 0xfffffffffffffffa}]}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/context\x00', 0x2, 0x0) 2018/04/20 00:52:21 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net\x00', 0x200002, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x22800) dup3(r0, r1, 0x0) 2018/04/20 00:52:21 executing program 3: r0 = socket(0xa, 0x2400000001, 0x0) r1 = memfd_create(&(0x7f00000000c0)="196465768293183eb899be8d3cdc52d52486698fd1b67693232f0c3c36b69ce03fef0fccd49a9dab2a72d4df5bbe1f71bcd36eb0f66fb5ed2bd5e8defb1772ad0146265dccfba59658ee1479df5a7f32d51d43f1ac2e1b90fe2fa378a6e92ab9fe9f723068814b878b052e49494fcb276ab8d92506c8eedea2a19ec99fe2b4696dd352999e95406bdf7ad4e3eaf94f7ccaf643cf7c4abdcbef13243e827b5d9ea66a62dec8ddbf980e7a0695b0bc40ac4c9652be", 0x0) write(r1, &(0x7f0000000080)="16", 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000180)) 2018/04/20 00:52:21 executing program 2: mkdir(&(0x7f0000d90ff8)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff)) r0 = creat(&(0x7f0000939ff2)='./file0/file0\x00', 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mq_notify(r0, &(0x7f0000477fa0)={0x0, 0x0, 0x0, @thr={&(0x7f0000f94000), &(0x7f000054fff7)}}) [ 90.427176] pktgen: kernel_thread() failed for cpu 0 [ 90.432295] pktgen: Cannot create thread for cpu 0 (-4) [ 90.437719] pktgen: kernel_thread() failed for cpu 1 [ 90.443079] pktgen: Cannot create thread for cpu 1 (-4) [ 90.448435] pktgen: Initialization failed for all threads [ 90.673234] pktgen: kernel_thread() failed for cpu 0 [ 90.678592] pktgen: Cannot create thread for cpu 0 (-4) [ 90.685807] pktgen: kernel_thread() failed for cpu 1 [ 90.692089] pktgen: Cannot create thread for cpu 1 (-4) [ 90.697527] pktgen: Initialization failed for all threads [ 90.945410] pktgen: kernel_thread() failed for cpu 0 [ 90.950578] pktgen: Cannot create thread for cpu 0 (-4) [ 90.956281] pktgen: kernel_thread() failed for cpu 1 [ 90.961390] pktgen: Cannot create thread for cpu 1 (-4) [ 90.966852] pktgen: Initialization failed for all threads [ 91.199716] pktgen: kernel_thread() failed for cpu 0 [ 91.214613] pktgen: Cannot create thread for cpu 0 (-4) [ 91.222579] pktgen: kernel_thread() failed for cpu 1 [ 91.227909] pktgen: Cannot create thread for cpu 1 (-4) [ 91.233245] pktgen: Initialization failed for all threads 2018/04/20 00:52:23 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) dup2(0xffffffffffffffff, r0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x77e, 0x5}, &(0x7f0000000180)=0x8) dup(r0) 2018/04/20 00:52:23 executing program 7: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x3, 0x53e, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10800, 0x144) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000080)={0x400}) unshare(0x40000000) 2018/04/20 00:52:23 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x3, 0x53e, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10800, 0x144) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000080)={0x400}) unshare(0x40000000) 2018/04/20 00:52:23 executing program 6: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x3, 0x53e, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10800, 0x144) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000080)={0x400}) unshare(0x40000000) 2018/04/20 00:52:23 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x3, 0x53e, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10800, 0x144) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000080)={0x400}) unshare(0x40000000) 2018/04/20 00:52:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000004c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x8, r1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x4000, 0x0) 2018/04/20 00:52:23 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000d01000)=0x7ff, 0x4) 2018/04/20 00:52:23 executing program 5: ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x8000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000cd8ff4)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) [ 91.347733] pktgen: kernel_thread() failed for cpu 0 [ 91.352872] pktgen: Cannot create thread for cpu 0 (-4) [ 91.360738] IPVS: Creating netns size=2536 id=36 2018/04/20 00:52:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00002b8ff6)="9402", 0x2) 2018/04/20 00:52:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00002b8ff6)="9402", 0x2) 2018/04/20 00:52:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00002b8ff6)="9402", 0x2) 2018/04/20 00:52:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00002b8ff6)="9402", 0x2) 2018/04/20 00:52:23 executing program 2: syz_mount_image$ntfs(&(0x7f0000000300)='ntfs\x00', &(0x7f0000000340)='.\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f00000004c0)) 2018/04/20 00:52:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000004c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x8, r1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x4000, 0x0) 2018/04/20 00:52:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000004c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x8, r1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x4000, 0x0) 2018/04/20 00:52:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x39, &(0x7f000079affc), &(0x7f0000000040)=0xfffffffffffffd43) [ 94.080900] pktgen: kernel_thread() failed for cpu 0 [ 94.086997] pktgen: Cannot create thread for cpu 0 (-4) [ 94.092411] pktgen: kernel_thread() failed for cpu 1 [ 94.097624] pktgen: Cannot create thread for cpu 1 (-4) [ 94.102988] pktgen: Initialization failed for all threads [ 94.323429] pktgen: kernel_thread() failed for cpu 0 [ 94.330612] pktgen: Cannot create thread for cpu 0 (-4) [ 94.336284] pktgen: kernel_thread() failed for cpu 1 [ 94.341495] pktgen: Cannot create thread for cpu 1 (-4) [ 94.346862] pktgen: Initialization failed for all threads [ 94.552248] pktgen: kernel_thread() failed for cpu 0 [ 94.557376] pktgen: Cannot create thread for cpu 0 (-4) [ 94.563353] pktgen: kernel_thread() failed for cpu 1 [ 94.568452] pktgen: Cannot create thread for cpu 1 (-4) [ 94.574149] pktgen: Initialization failed for all threads [ 94.683062] pktgen: kernel_thread() failed for cpu 0 [ 94.688175] pktgen: Cannot create thread for cpu 0 (-4) [ 94.697513] pktgen: kernel_thread() failed for cpu 1 [ 94.703615] pktgen: Cannot create thread for cpu 1 (-4) [ 94.709123] pktgen: Initialization failed for all threads [ 94.949287] pktgen: kernel_thread() failed for cpu 0 [ 94.954538] pktgen: Cannot create thread for cpu 0 (-4) [ 94.960145] pktgen: kernel_thread() failed for cpu 1 [ 94.965324] pktgen: Cannot create thread for cpu 1 (-4) [ 94.970691] pktgen: Initialization failed for all threads 2018/04/20 00:52:27 executing program 6: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x1000100000001, 0x20000000, 0x0, &(0x7f0000fff000/0x1000)=nil}) r0 = syz_open_dev$sg(&(0x7f0000797ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x20000000002285, &(0x7f0000000000)="53000000012e2a6824") 2018/04/20 00:52:27 executing program 1: clone(0x1044000, &(0x7f0000000000), &(0x7f0000000340), &(0x7f0000000100), &(0x7f0000000280)) 2018/04/20 00:52:27 executing program 7: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8", 0x16}], 0x0, &(0x7f0000000080)={[{@codepage={'codepage', 0x3d, '949'}, 0x2c}, {@gid={'gid', 0x3d, [0x34]}, 0x2c}]}) 2018/04/20 00:52:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000004c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x8, r1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x4000, 0x0) 2018/04/20 00:52:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) ioctl$TIOCGLCKTRMIOS(r2, 0x5412, &(0x7f0000000100)={0xffffffff}) 2018/04/20 00:52:27 executing program 5: ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x8000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000cd8ff4)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/04/20 00:52:27 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x38, &(0x7f0000bfd000)=@routing, 0x8) 2018/04/20 00:52:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080), 0x8) 2018/04/20 00:52:27 executing program 1: clone(0x1044000, &(0x7f0000000000), &(0x7f0000000340), &(0x7f0000000100), &(0x7f0000000280)) 2018/04/20 00:52:27 executing program 3: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r0 = socket$inet(0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x4e20}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x4e21, @broadcast=0xffffffff}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[{0x18, 0x0, 0x7, "8704"}], 0x18}}], 0x2, 0x0) [ 95.252670] FAT-fs (loop7): bogus number of reserved sectors [ 95.263985] FAT-fs (loop7): Can't find a valid FAT filesystem [ 95.341791] FAT-fs (loop7): bogus number of reserved sectors [ 95.347626] FAT-fs (loop7): Can't find a valid FAT filesystem 2018/04/20 00:52:28 executing program 6: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x1000100000001, 0x20000000, 0x0, &(0x7f0000fff000/0x1000)=nil}) r0 = syz_open_dev$sg(&(0x7f0000797ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x20000000002285, &(0x7f0000000000)="53000000012e2a6824") 2018/04/20 00:52:28 executing program 4: r0 = epoll_create1(0x0) poll(&(0x7f0000050fd8)=[{r0}], 0x1, 0x0) 2018/04/20 00:52:28 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)=@newsa={0x10c, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@dev={0xac, 0x14, 0x14}}, {@in=@broadcast=0xffffffff, 0x0, 0x2b}, @in=@remote={0xac, 0x14, 0x14, 0xbb}, {}, {}, {}, 0x0, 0x0, 0x2}, [@encap={0x1c, 0x4}]}, 0x10c}, 0x1}, 0x0) 2018/04/20 00:52:28 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) sendto$inet6(r0, &(0x7f0000000200), 0x0, 0x804, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80}}, 0x1c) 2018/04/20 00:52:28 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001200)=""/246) 2018/04/20 00:52:28 executing program 1: clone(0x1044000, &(0x7f0000000000), &(0x7f0000000340), &(0x7f0000000100), &(0x7f0000000280)) 2018/04/20 00:52:28 executing program 5: ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x8000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000cd8ff4)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/04/20 00:52:28 executing program 7: pipe2(&(0x7f0000edeff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) vmsplice(r0, &(0x7f0000de4000)=[{&(0x7f0000663000)='F', 0x1}], 0x1, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) 2018/04/20 00:52:28 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000180)=0x7, 0x4) 2018/04/20 00:52:28 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fcntl$setstatus(r0, 0x4, 0x2400) 2018/04/20 00:52:28 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000ff5fe8)={0xaa}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000b58000)=0x200000, 0xffff) 2018/04/20 00:52:28 executing program 6: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x1000100000001, 0x20000000, 0x0, &(0x7f0000fff000/0x1000)=nil}) r0 = syz_open_dev$sg(&(0x7f0000797ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x20000000002285, &(0x7f0000000000)="53000000012e2a6824") 2018/04/20 00:52:28 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x00') ioctl$fiemap(r0, 0x40086610, &(0x7f00000011c0)) 2018/04/20 00:52:28 executing program 1: clone(0x1044000, &(0x7f0000000000), &(0x7f0000000340), &(0x7f0000000100), &(0x7f0000000280)) 2018/04/20 00:52:28 executing program 6: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x1000100000001, 0x20000000, 0x0, &(0x7f0000fff000/0x1000)=nil}) r0 = syz_open_dev$sg(&(0x7f0000797ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x20000000002285, &(0x7f0000000000)="53000000012e2a6824") 2018/04/20 00:52:28 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000ff5fe8)={0xaa}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000b58000)=0x200000, 0xffff) 2018/04/20 00:52:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000ff5fe8)={0xaa}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000b58000)=0x200000, 0xffff) [ 96.224521] EXT4-fs warning (device sda1): ext4_resize_fs:1884: can't read last block, resize aborted 2018/04/20 00:52:28 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x00') ioctl$fiemap(r0, 0x40086610, &(0x7f00000011c0)) 2018/04/20 00:52:28 executing program 6: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000006c0)={'ifb0\x00', 0x4012}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @multicast2=0xe0000002}, {0x1, @link_local={0x1, 0x80, 0xc2}}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 'ifb0\x00'}) 2018/04/20 00:52:28 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/71, 0x2}], 0x1, 0x7ffffffffffffffb) 2018/04/20 00:52:28 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000ff5fe8)={0xaa}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000b58000)=0x200000, 0xffff) 2018/04/20 00:52:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000ff5fe8)={0xaa}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000b58000)=0x200000, 0xffff) [ 96.334044] EXT4-fs warning (device sda1): ext4_resize_fs:1884: can't read last block, resize aborted 2018/04/20 00:52:29 executing program 6: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000004000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000003000/0x9000)=nil, 0x9000, 0x0, 0x0, 0x0) 2018/04/20 00:52:29 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fcntl$setstatus(r0, 0x4, 0x2400) 2018/04/20 00:52:29 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x171, 0x0, &(0x7f0000000040), 0xb1, 0x0, &(0x7f0000008000)}) 2018/04/20 00:52:29 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x00') ioctl$fiemap(r0, 0x40086610, &(0x7f00000011c0)) 2018/04/20 00:52:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x7}, {0x6}]}, 0x10) 2018/04/20 00:52:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000ff5fe8)={0xaa}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000b58000)=0x200000, 0xffff) 2018/04/20 00:52:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000ff5fe8)={0xaa}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000b58000)=0x200000, 0xffff) 2018/04/20 00:52:29 executing program 5: capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000200)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0) flistxattr(r1, &(0x7f0000000180)=""/42, 0x3a7) [ 97.088747] EXT4-fs warning (device sda1): ext4_resize_fs:1884: can't read last block, resize aborted [ 97.091147] mmap: syz-executor6 (11541) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. [ 97.098802] binder: 11534:11543 unknown command 1818587951 [ 97.098810] binder: 11534:11543 ioctl c0306201 20000080 returned -22 [ 97.106948] binder: 11534:11550 unknown command 1818587951 [ 97.106956] binder: 11534:11550 ioctl c0306201 20000080 returned -22 2018/04/20 00:52:30 executing program 6: getpid() 2018/04/20 00:52:30 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1) 2018/04/20 00:52:30 executing program 7: clone(0x200, &(0x7f0000000380), &(0x7f00000000c0), &(0x7f0000000340), &(0x7f0000000040)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000775000)) open$dir(&(0x7f0000000080)='./file0\x00', 0x801, 0x0) 2018/04/20 00:52:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net\x00') fchdir(r0) syz_fuseblk_mount(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/20 00:52:30 executing program 0: umount2(&(0x7f0000000480)='/\x00', 0xd) 2018/04/20 00:52:30 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000180)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) dup2(r0, r1) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), &(0x7f00000004c0)) 2018/04/20 00:52:30 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fcntl$setstatus(r0, 0x4, 0x2400) 2018/04/20 00:52:30 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x00') ioctl$fiemap(r0, 0x40086610, &(0x7f00000011c0)) 2018/04/20 00:52:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="200a4f7d2cd3cf681df3e40f9a52c906790667ea55684d1647b5e62cd403c20cdc7d576f7ea8e978c8aec8834536b5140fed9f16c9c0763033919c342ff0084dd944f0455006071b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x0, 0x0, &(0x7f00000002c0), 0x1, 0x0, &(0x7f0000000500)='j'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f00000005c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)}}}], 0x0, 0x0, &(0x7f00000002c0)}) 2018/04/20 00:52:30 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r1, &(0x7f0000987000)={0x2, 0x4e23}, 0x60) sendto(r1, &(0x7f0000000080)="1e", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003500)=[{{&(0x7f0000003040)=@hci, 0xc, &(0x7f00000031c0)=[{&(0x7f0000003080)=""/135, 0x87}, {&(0x7f0000003140)=""/102, 0x66}], 0x2, &(0x7f0000003200)=""/48, 0x30}}, {{0x0, 0x0, &(0x7f00000033c0), 0x347, &(0x7f0000003400)=""/202, 0xca}}], 0x2, 0x0, &(0x7f0000003680)={0x77359400}) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@ipv6_delroute={0x1c, 0x19, 0x0, 0x0, 0x0, {0xa}}, 0x1c}, 0x1}, 0x0) 2018/04/20 00:52:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000aff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$urandom(&(0x7f0000031ff3)='/dev/urandom\x00', 0x0, 0x0) close(r1) socket(0x18, 0x0, 0x4) dup3(r0, r1, 0x0) 2018/04/20 00:52:30 executing program 0: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x0, 0x0, 0x40000000000, 0x48}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000040)) 2018/04/20 00:52:30 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x3, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x3a) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x8922, &(0x7f0000000040)) [ 97.983885] EXT4-fs warning (device sda1): ext4_resize_fs:1884: can't read last block, resize aborted [ 98.001198] binder: 11581:11583 ERROR: BC_REGISTER_LOOPER called without request 2018/04/20 00:52:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000aff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$urandom(&(0x7f0000031ff3)='/dev/urandom\x00', 0x0, 0x0) close(r1) socket(0x18, 0x0, 0x4) dup3(r0, r1, 0x0) 2018/04/20 00:52:30 executing program 3: rt_sigprocmask(0x0, &(0x7f0000f4dff8)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000bc8000)={0x0, 0xa, 0x4, @tid=r0}, &(0x7f00009b5ffc)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0x9}}, &(0x7f0000040000)) timer_settime(0x0, 0x0, &(0x7f0000061fe0), &(0x7f00003df000)) 2018/04/20 00:52:30 executing program 0: syz_open_dev$sndtimer(&(0x7f0000000ff1)='/dev/snd/timer\x00', 0x0, 0x0) 2018/04/20 00:52:30 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376633, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9ed56da6e9047526}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/20 00:52:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000aff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$urandom(&(0x7f0000031ff3)='/dev/urandom\x00', 0x0, 0x0) close(r1) socket(0x18, 0x0, 0x4) dup3(r0, r1, 0x0) 2018/04/20 00:52:30 executing program 7: timerfd_create(0x4, 0x0) 2018/04/20 00:52:30 executing program 0: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40040, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x5, 0x802132, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x20012, r0, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000003400)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1, 0x0) 2018/04/20 00:52:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000aff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$urandom(&(0x7f0000031ff3)='/dev/urandom\x00', 0x0, 0x0) close(r1) socket(0x18, 0x0, 0x4) dup3(r0, r1, 0x0) 2018/04/20 00:52:30 executing program 2: unshare(0x8000400) r0 = mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0x8c2, 0x0, &(0x7f000004b000)={0xffffffffffffffff, 0x1, 0x3}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000289000)={0x20000009}) mq_timedsend(r0, &(0x7f0000012000), 0x0, 0x0, &(0x7f0000036000)) ppoll(&(0x7f0000000000)=[{r1}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100), 0x8) [ 98.811347] binder: release 11581:11583 transaction 22 out, still active [ 98.818365] binder: release 11581:11583 transaction 21 in, still active [ 98.842591] binder: undelivered TRANSACTION_COMPLETE [ 98.871125] binder: BINDER_SET_CONTEXT_MGR already set [ 98.876512] binder: 11581:11627 ioctl 40046207 0 returned -16 [ 98.892644] binder: 11581:11583 ERROR: BC_REGISTER_LOOPER called without request [ 98.906550] binder_alloc: 11581: binder_alloc_buf, no vma [ 98.912238] binder: 11581:11627 transaction failed 29189/-3, size 0-0 line 3133 2018/04/20 00:52:31 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fcntl$setstatus(r0, 0x4, 0x2400) 2018/04/20 00:52:31 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f0000184000)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast1=0xe0000001}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}]}, 0x80}, 0x1}, 0x0) [ 98.926320] binder_alloc: 11581: binder_alloc_buf, no vma [ 98.926336] binder: 11581:11583 transaction failed 29189/-3, size 0-0 line 3133 [ 98.957668] binder: undelivered TRANSACTION_ERROR: 29189 [ 98.964647] binder: undelivered TRANSACTION_ERROR: 29189 [ 98.979208] binder: release 11581:11627 transaction 23 in, still active [ 98.993650] binder: send failed reply for transaction 23 to 11581:11627 [ 99.007163] ================================================================== [ 99.014526] BUG: KASAN: use-after-free in __list_del_entry+0x1a9/0x1c0 [ 99.021178] Read of size 8 at addr ffff8801cab09d10 by task kworker/0:3/1835 [ 99.028341] [ 99.029957] CPU: 0 PID: 1835 Comm: kworker/0:3 Not tainted 4.9.94-g8683408 #1 [ 99.037209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.046548] Workqueue: events binder_deferred_func [ 99.051563] ffff8801ce24fa58 ffffffff81eb0aa9 ffffea00072ac240 ffff8801cab09d10 [ 99.059536] 0000000000000000 ffff8801cab09d10 ffffed00386aa009 ffff8801ce24fa90 [ 99.067519] ffffffff815652cb ffff8801cab09d10 0000000000000008 0000000000000000 [ 99.075499] Call Trace: [ 99.078061] [] dump_stack+0xc1/0x128 [ 99.083397] [] print_address_description+0x6c/0x234 [ 99.090043] [] kasan_report.cold.6+0x242/0x2fe [ 99.096245] [] ? __list_del_entry+0x1a9/0x1c0 [ 99.102364] [] __asan_report_load8_noabort+0x14/0x20 [ 99.109089] [] __list_del_entry+0x1a9/0x1c0 [ 99.115031] [] binder_release_work+0x6f/0x1d0 [ 99.121146] [] ? binder_send_failed_reply+0x1c8/0x230 [ 99.127954] [] binder_thread_release+0x425/0x520 [ 99.134329] [] binder_deferred_func+0x44d/0xc30 [ 99.140619] [] ? __lock_is_held+0xa2/0xf0 [ 99.146387] [] process_one_work+0x7e1/0x1500 [ 99.152416] [] ? process_one_work+0x728/0x1500 [ 99.158622] [] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 99.165093] [] worker_thread+0xd6/0x10a0 [ 99.170778] [] ? __schedule+0x655/0x1bd0 [ 99.176460] [] kthread+0x26d/0x300 [ 99.181622] [] ? process_one_work+0x1500/0x1500 [ 99.187916] [] ? kthread_park+0xa0/0xa0 [ 99.193512] [] ? kthread_park+0xa0/0xa0 [ 99.199105] [] ? kthread_park+0xa0/0xa0 [ 99.204701] [] ret_from_fork+0x5c/0x70 [ 99.210206] [ 99.211806] Allocated by task 11627: [ 99.215491] save_stack_trace+0x16/0x20 [ 99.219437] save_stack+0x43/0xd0 [ 99.222863] kasan_kmalloc+0xc7/0xe0 [ 99.226548] kmem_cache_alloc_trace+0xfd/0x2b0 [ 99.231103] binder_transaction+0x8d4/0x61c0 [ 99.235481] binder_thread_write+0xa40/0x2160 [ 99.239945] binder_ioctl_write_read.isra.46+0x1eb/0x810 [ 99.245365] binder_ioctl+0x702/0x1160 [ 99.249229] do_vfs_ioctl+0x1ac/0x11a0 [ 99.253091] SyS_ioctl+0x8f/0xc0 [ 99.256436] do_syscall_64+0x1a6/0x490 [ 99.260295] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 99.265365] [ 99.266963] Freed by task 1835: [ 99.270214] save_stack_trace+0x16/0x20 [ 99.274159] save_stack+0x43/0xd0 [ 99.277581] kasan_slab_free+0x72/0xc0 [ 99.281438] kfree+0xfb/0x310 [ 99.284514] binder_free_transaction+0x6a/0x90 [ 99.289071] binder_send_failed_reply+0x1c3/0x230 [ 99.293885] binder_thread_release+0x413/0x520 [ 99.298436] binder_deferred_func+0x44d/0xc30 [ 99.302901] process_one_work+0x7e1/0x1500 [ 99.307107] worker_thread+0xd6/0x10a0 [ 99.310966] kthread+0x26d/0x300 [ 99.314302] ret_from_fork+0x5c/0x70 [ 99.317984] [ 99.319586] The buggy address belongs to the object at ffff8801cab09d00 [ 99.319586] which belongs to the cache kmalloc-192 of size 192 [ 99.332220] The buggy address is located 16 bytes inside of [ 99.332220] 192-byte region [ffff8801cab09d00, ffff8801cab09dc0) [ 99.343977] The buggy address belongs to the page: [ 99.348880] page:ffffea00072ac240 count:1 mapcount:0 mapping: (null) index:0x0 [ 99.357113] flags: 0x8000000000000080(slab) [ 99.361406] page dumped because: kasan: bad access detected [ 99.367087] [ 99.368683] Memory state around the buggy address: [ 99.373583] ffff8801cab09c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 99.380912] ffff8801cab09c80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 99.388239] >ffff8801cab09d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.395568] ^ [ 99.399428] ffff8801cab09d80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 99.406757] ffff8801cab09e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.414085] ================================================================== [ 99.421420] Disabling lock debugging due to kernel taint [ 99.427148] Kernel panic - not syncing: panic_on_warn set ... [ 99.427148] [ 99.434496] CPU: 0 PID: 1835 Comm: kworker/0:3 Tainted: G B 4.9.94-g8683408 #1 [ 99.442952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.452283] Workqueue: events binder_deferred_func [ 99.457308] ffff8801ce24f9b8 ffffffff81eb0aa9 ffffffff841c4445 00000000ffffffff [ 99.465296] 0000000000000000 0000000000000000 ffffed00386aa009 ffff8801ce24fa78 [ 99.473281] ffffffff8141f845 0000000041b58ab3 ffffffff841b7b48 ffffffff8141f686 [ 99.481260] Call Trace: [ 99.483824] [] dump_stack+0xc1/0x128 [ 99.489166] [] panic+0x1bf/0x3bc [ 99.494151] [] ? add_taint.cold.6+0x16/0x16 [ 99.500093] [] kasan_end_report+0x47/0x4f [ 99.505860] [] kasan_report.cold.6+0x76/0x2fe [ 99.511986] [] ? __list_del_entry+0x1a9/0x1c0 [ 99.518106] [] __asan_report_load8_noabort+0x14/0x20 [ 99.524829] [] __list_del_entry+0x1a9/0x1c0 [ 99.530768] [] binder_release_work+0x6f/0x1d0 [ 99.536880] [] ? binder_send_failed_reply+0x1c8/0x230 [ 99.543691] [] binder_thread_release+0x425/0x520 [ 99.550068] [] binder_deferred_func+0x44d/0xc30 [ 99.556356] [] ? __lock_is_held+0xa2/0xf0 [ 99.562127] [] process_one_work+0x7e1/0x1500 [ 99.568155] [] ? process_one_work+0x728/0x1500 [ 99.574357] [] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 99.580819] [] worker_thread+0xd6/0x10a0 [ 99.586499] [] ? __schedule+0x655/0x1bd0 [ 99.592181] [] kthread+0x26d/0x300 [ 99.597339] [] ? process_one_work+0x1500/0x1500 [ 99.603626] [] ? kthread_park+0xa0/0xa0 [ 99.609219] [] ? kthread_park+0xa0/0xa0 [ 99.614811] [] ? kthread_park+0xa0/0xa0 [ 99.620404] [] ret_from_fork+0x5c/0x70 [ 99.626428] Dumping ftrace buffer: [ 99.629939] (ftrace buffer empty) [ 99.633617] Kernel Offset: disabled [ 99.637212] Rebooting in 86400 seconds..